PimoBack Privacy Policy
Read in another language
Last updated: November 9, 2026.
This policy explains what the PimoBack app keeps on your phone, what leaves it, where it goes, and for how long. It applies to the app on iPhone and Android, and to the getpimoback.app website.
In short
- PimoBack asks for no account: no sign-up, no password, no email address.
- Your collection, its progress, your loose pieces and your lists stay on your phone. We have no copy of them.
- The app sends no photos. Reading the number on a box happens on the phone.
- No ads, no tracking, no advertising identifier, no audience measurement.
- What leaves the phone is what makes the app work: downloading the catalog, verifying a Pro purchase, showing prices where the app offers them. The section “What leaves your phone” gives the complete list.
Who is responsible
| Role | Details |
|---|---|
| Data controller | Régis Jehl, sole trader (entrepreneur individuel), under the trade name MASH MEDIA |
| Registration | SIREN 485 249 189 |
| Address | 20 rue du Tabac, 67600 Ebersheim, France |
| Contact | contact@getpimoback.app |
| Data protection officer | None appointed |
What stays on your phone
The app saves the following on the phone, and only there:
- the sets in your collection, the pieces you checked off and their progress;
- your loose pieces, the shopping list, the wishlist, your tags and your notes;
- the log of your actions (piece checked off, quantity changed), which lets you undo and rebuild your progress;
- your settings, and the count of sets used on the free plan;
- the downloaded catalog and the images already displayed, kept in a cache;
- the technical reports the system hands to the app after a crash, as long as you don't send them.
This data leaves the phone only if you decide so: by creating a file with “Back up my data”, which you store wherever you like, or by writing to us (see below).
Backups of the phone itself, iCloud on iPhone and Google backup on Android, may contain the app's data depending on your settings. They are the responsibility of Apple and Google, not ours. On Android, the catalog and the caches are excluded from them.
What leaves your phone
| To | When | What is sent | What is never sent |
|---|---|---|---|
| Our catalog server, hosted by Cloudflare | On first launch, then for catalog updates and to display images of pieces and sets | A request for a file or an image, with your IP address | Your collection, your searches, an identifier for you or the phone |
| RevenueCat | At launch, and when you buy or restore Pro | An anonymous identifier generated by RevenueCat, the platform, the technical history of your PimoBack purchases | Your name, your email address, your payment methods |
| Apple (App Store) or Google (Google Play) | When you buy Pro | The payment, processed by the store with your account there | None of your payment details reach us |
| Google Play (Android) | When the app needs to know which country to show prices for | The app asks Google Play for your account's country | The app doesn't keep this country |
| Affilizz, and our price server hosted by Cloudflare | With the Pro plan, in the countries where the app shows prices, when you open a set or a list that shows them | The identifier of the requested content (it refers to a set and a country), the country, your IP address | An identifier for you or the phone, your collection, your location |
| Google, through ML Kit (Android only) | When you use “Scan a box” | Technical information described below, with no image and no number read | The camera image, the number read, your collection |
| Us, by email | Only if you write to us | Your message, your email address, and the crash report if you choose to attach it | Nothing is sent until you tap “Send” |
None of these requests is tied to an account: PimoBack doesn't have any.
Reading a set's box
“Scan a box” reads the number and the barcode printed on the box, to add the set. The camera image is analyzed on the phone, then discarded: it is neither saved nor sent, and the number read doesn't leave the device.
On iPhone, this reading uses Vision, Apple's framework built into the system, with nothing sent.
On Android, it uses ML Kit, a Google library that runs on the phone. When you use it, ML Kit sends Google technical information for its own diagnostics and usage statistics: the phone's manufacturer, model and system version, the app's name and version, an identifier specific to this installation, processing times, the format and size of the analyzed images, the event type and error codes. Neither the image, nor the number read, nor anything from your collection is included. According to Google, this data is encrypted in transit and is not shared with any third party; Google doesn't publish how long it is kept. This transfer doesn't happen if you don't use “Scan a box”: you can always type the set's number.
Purchases and the Pro plan
Apple or Google collect the payment and handle renewal, cancellation and refunds. No card number or bank details go through PimoBack. From the store, we only receive sales figures, with no names.
RevenueCat verifies on our behalf that a purchase is valid and unlocks Pro. It processes an anonymous identifier, the platform and the technical history of purchases (product, dates, status). The last known status is kept on the phone so that Pro works offline.
Store prices and links
With the Pro plan, in the countries where the app shows prices, PimoBack requests store offers from Affilizz, an affiliate network, and from our price server. These requests carry the content identifier (a set in a country) and your IP address, with no cookie and no identifier for you.
When you tap an offer, the link opens in the phone's browser, going through Affilizz's redirect address. The app adds nothing to it. The browser itself sends your IP address and its cookies, and Affilizz as well as the store may set their own trackers, under their own policies: this is what allows a purchase to be attributed to the link. We may earn a commission on that purchase; it changes neither the order of the offers nor the price you pay. We receive no personally identifying information about your purchases.
App permissions
The only permission the app asks you for is the camera, to read the number on a box. If you decline, type the number: everything else works.
PimoBack doesn't ask for access to your photos, your location, your contacts, your microphone, or cross-app ad tracking.
What PimoBack doesn't do
- No account, no sync between devices: nothing from your collection is on our servers.
- No sending of piece photos: photo recognition doesn't exist in the app yet. If it arrives, this policy will state before it goes live what it sends and to whom, and the app will ask for your consent.
- No ads, no audience measurement tool, no third-party crash reporting tool, no advertising identifier (it is removed from the Android app).
- We don't sell, rent or trade any data, and we don't build any profile.
Google kits included but switched off
The app contains Google kits meant for an optional account and for alerts that do not exist yet: Firebase Authentication and Google Sign-In on iPhone; Firebase Authentication, Firebase Cloud Messaging (automatic start turned off) and Google's credential manager on Android. In this version they are linked into the app but never started: no sign-in is offered and nothing is sent to them. Apple shows these kits' declarations alongside the app's own, so the App Store privacy label lists what they would collect if they were started (name, email address, phone number, approximate location, identifiers, usage and diagnostic data). If the account arrives, this policy will say what it processes before it goes live, and you will choose whether to sign in.
The getpimoback.app website
The website is hosted by Cloudflare. It sets no cookies, loads no scripts and doesn't measure its audience. As with any website, Cloudflare processes your IP address to serve the pages and protect them from attacks, under its own logging rules.
How long
| Data | Retention |
|---|---|
| Collection, progress, loose pieces, lists, log | On your phone, until you delete them or uninstall the app |
| Cached catalog and images | On your phone, replaced as updates come in |
| Crash reports on the phone | On your phone, until the app replaces them or you uninstall it |
| Purchase history | At RevenueCat, Apple and Google, under their rules and our accounting obligations |
| Catalog and price requests | Our code doesn't record your IP address; platform logs are Cloudflare's responsibility |
| ML Kit diagnostics | At Google, retention period not published |
| Your emails and attached reports | As long as needed to handle your request, then at most three years after our last exchange |
Legal basis
- Running the features you use (catalog, images, prices, box reading, purchases): performance of the service you request (Article 6(1)(b) of the GDPR).
- The diagnostics ML Kit sends to Google: our legitimate interest in offering box reading, from which this transfer is inseparable on Android (Article 6(1)(f)).
- Answering your messages: our legitimate interest in helping you (Article 6(1)(f)).
Outside the European Union
Cloudflare, RevenueCat, Apple and Google are American companies whose servers are not all in the Union. Transfers to Cloudflare and RevenueCat are covered by their data processing agreements, which include the European Commission's standard contractual clauses. Those to Apple and Google fall under the terms you accepted with them.
Your rights
You have the right of access, rectification, erasure, restriction, objection and portability.
Your collection data is on your phone and entirely in your hands: you see it in the app, you correct it, you export it with “Back up my data”, and uninstalling erases it.
For anything else, write to us at contact@getpimoback.app. We reply within one month. Since PimoBack has no account, we can't link you to an IP address or an anonymous identifier unless you give it to us; if we can't identify you, we will tell you (Article 11 of the GDPR).
If you believe your rights are not being respected, you can lodge a complaint with the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 (www.cnil.fr), or with the data protection authority of your country.
Children
PimoBack has no messaging, no social features, no user-published content, and collects no identity data. Purchases go through the account holder's Apple or Google account, with the store's parental controls.
Changes
If this policy changes, the date at the top of the page changes with it. Any change that would send new data off the phone is described here before it goes live.
Languages
This policy is available in eleven languages. If they differ, the French version prevails.