Privacy
Policy.

1. Scope and operator

This Privacy Policy applies to products and services operated by Hangzhou FrameFlow Information Technology Services Co., Ltd. (“FrameFlow,” “we,” “us,” or “our”), including this website, Pinlist, and other services that link to this policy.

Some products may provide additional notices at the point of collection. If a product-specific notice conflicts with this policy, the product-specific notice controls for that product.

2. Information we process

Information you provide

This may include messages sent to support, feedback, files you intentionally upload to a service, and account information when a product offers an account.

Product and device information

We may process limited technical information such as app version, device and operating-system type, language, approximate region, diagnostics, request logs, and security events. We use this information to operate, secure, and improve our services.

Purchase information

Purchases made through Apple are processed by Apple. We may receive transaction identifiers, product identifiers, entitlement status, renewal or expiration information, refund or revocation status, and an anonymous app-user identifier from service providers. We do not receive your complete payment-card details.

3. Pinlist-specific information

Pinlist can be used without creating an account. Favorites, preferences, and other app state may be stored locally on your device or synchronized through Apple services when you enable the applicable system features.

Pinlist may use Apple StoreKit and RevenueCat to load products, validate purchases, restore eligible entitlements, and maintain subscription status. Our services may retain limited transaction audit records to prevent fraud, resolve support requests, and preserve access after a verified purchase.

When Pinlist requests public App Store information, our infrastructure may process the requested app identifier, storefront or region, and standard network logs needed to return and protect the service.

4. How we use information

• Provide, maintain, localize, and improve our products.
• Process and restore purchases and determine product entitlements.
• Respond to support, legal, or security requests.
• Detect abuse, fraud, outages, and unauthorized access.
• Comply with applicable law and enforce our agreements.

We do not use personal information for cross-context behavioral advertising, and we do not sell personal information.

5. Service providers and disclosure

We may use service providers to host and protect our websites and APIs, distribute applications, process in-app purchases, synchronize app data, deliver support, and monitor service reliability. Depending on the product, these providers may include Apple, Cloudflare, and RevenueCat.

We may also disclose information when required by law, to protect users or our services, in connection with a corporate transaction, or with your direction or consent. Service providers may process information only for the services they provide to us and subject to their own legal obligations.

6. Retention and security

We retain information only for as long as reasonably necessary for the purposes described above, including providing entitlements, maintaining security and audit records, resolving disputes, and meeting legal obligations. Retention periods vary by data type and product.

We use administrative, technical, and organizational measures designed to protect information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

7. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, restrict, or object to certain processing of your personal information, or to receive a portable copy. You may also withdraw consent where processing is based on consent.

You can manage Apple subscriptions in your Apple Account. Deleting an app does not automatically cancel an active subscription. Requests concerning Apple Account or payment data must be directed to Apple.

To make a privacy request, email [email protected]. We may need to verify your request before responding.

8. Children

Our products are not directed to children under the minimum age required to consent to data processing in their jurisdiction. We do not knowingly collect personal information from children in violation of applicable law. If you believe a child provided us personal information improperly, please contact us.

9. International processing

Our users and service providers may be located in different countries. Information may therefore be processed outside your country of residence, subject to appropriate safeguards required by applicable law.

10. Changes and contact

We may update this policy to reflect product, legal, or operational changes. We will update the effective date on this page and provide additional notice when required.