← Back to Pinday

Privacy policy

Last updated 17 October 2026 (subscriptions, error reports, libraries now served by Pinday)

In short: Pinday has no server and no database of its own. When you connect your Google account, all your data (timetable, check-ins, notes) is stored in a Google Sheet and files in your own Google Drive, and Pinday can only see the files it created there. Nobody else, including the people who run Pinday, can see your data.

Writing together (live co-editing)

When you share a live link to a note, the people who open it can type in the note at the same time as you. For this, the text typed in that note passes through Liveblocks, a real-time service, so that everyone sees the same words at once. The note is still saved in the Google Drive of the student who owns it, and nothing else is stored by Pinday. Liveblocks keeps the live text while people are in the note; see Liveblocks' own privacy policy for how long it keeps it. Only students signed in with Google can join a live note, and only with its link.

AI mode (optional, for subscribers)

If you subscribe, you can ask for a summary, flashcards or a quiz of a note. Only when you press Generate, the text of that note, the text of its slides (and the picture of a slide that has no text) is sent, through Pinday's server, to an AI service (Google Gemini, through its paid API, where what you send is not used to train the models) that writes the result. Pinday does not keep what you send or what comes back: results are shown to you and are saved in your Google Drive only if you choose Save in my Drive. The payment itself is handled by Stripe; Pinday only checks, from your e-mail address, whether a subscription is running, and counts how many requests you made this month.

Your data in a Google Sheet

When you connect Google Drive, Pinday creates a Google Sheet called Pinday data in the Pinday folder of your Drive and keeps every piece of your data in it:

The sheet is yours: you can open it, share it, download it or delete it like any other file in your Drive. The .ics timetable file itself is read in your browser and never uploaded anywhere.

Your browser also keeps a copy of this data in its local storage, so the app opens instantly and works before you connect Google. Before you connect, that local copy is the only one. Clearing your browser data deletes it.

Google Drive (optional)

If you click Connect Google Drive, Google asks you to allow Pinday to “see, edit, create and delete only the specific Google Drive files you use with this app” (the drive.file permission). With it, Pinday:

Pinday cannot see, read or change any other file in your Drive. Your files and data travel directly between your browser and Google; they never pass through Pinday.

Staying signed in

So you don't have to sign in on every visit, Pinday has a small sign-in service on its website (hosted on Cloudflare). When you connect, Google gives this service a long-lived key (a “refresh token”) for the drive.file permission only. The service puts that key, encrypted, in a cookie on your own device and keeps no copy: there is no database. Each time you open the app, the service uses the key from your cookie to get a one-hour access token for your browser. The cookie lasts up to 180 days. Disconnect Google Drive deletes it and cancels the key at Google.

Pinday's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Your Google data is used only to show and save your own notes in Pinday. It is not sold, shared, used for advertising, or used to train AI models.

Subscription and payments (Stripe)

The AI mode is paid. Payment is handled by Stripe on Stripe's own page: Pinday never sees or stores your card. Stripe knows your e-mail address and your subscription, and tells Pinday whether it is active. To remember this without a database of people, Pinday keeps in a small key-value store (Cloudflare D1, the database of the same hosting) only a scrambled (hashed) form of your e-mail address with: whether your subscription is active, how much of your monthly AI allowance you used, and counters that stop abuse (requests per minute). No notes and no names are kept there. You manage or cancel the subscription from the Account window, which opens Stripe's portal.

Error reports

If the app breaks in your browser, it may send a short report (the error message, where in the code it happened, the page and the browser name) to Pinday's server logs so it can be fixed. E-mail addresses are blanked, and nothing you typed is included. Logs are kept by Cloudflare for a short time.

Removing access and deleting your data

Other services

Pinday loads fonts from Google Fonts. Its code libraries (Markdown, PDF, live editing) are served by Pinday itself, not by a third party. The site is hosted on Cloudflare. These services may see technical information such as your IP address, as with any website. Pinday uses no analytics, no tracking and no advertising.

Contact

For any question about your data or this policy, write to contact@pinday.ch.

Terms

Using Pinday is also subject to the terms of use.

Changes

If this policy changes, the new version will be posted on this page with a new date.