Privacy and data controls
Your records stay attached to your account.
What PinPoint stores
PinPoint stores account identity details, authentication records, the substances and protocols you enter, preparation math, schedules, NFC and QR access metadata, dose confirmations, Undo events, and timestamps. These records may reveal health-related routines because you choose what to track.
Why it is used
The data is used to operate your schedule, calculate the values you request, link revocable tags, confirm a dose, show adherence, create private labels, secure your account, and support export or deletion. PinPoint tracks user-entered information; it does not provide medical advice or recommend a dose or schedule.
Service categories
Cloudflare provides application hosting, database, and network security services. Better Auth and, when configured, Better Auth Infrastructure provide authentication operations. When Sentinel is enabled, authentication security may process device and network identifiers to detect abuse; PinPoint does not attach protocol or dose content to that security metadata.
NFC tags and QR codes
A physical tag contains a private, revocable URL. PinPoint stores a one-way hash for tap lookup and an encrypted recovery credential so the authenticated account owner can reopen the link. The token is never stored as plaintext. Replacing or revoking a tag invalidates the old link.
Retention and your choices
Application data is retained until you delete it or delete your account. Authentication and security audit records follow separately configured provider retention settings. Before public launch, the operator must publish those exact settings here. Signed-in users can export their PinPoint records or permanently delete the account from Settings.
Security limitations
PinPoint uses account isolation, private responses, revocable NFC links, and modern browser security controls, but no online service can promise absolute security. Do not use PinPoint as the only source for urgent medical information.