Privacy Policy

This policy explains how Pinmigo: Fake GPS (“Pinmigo” or “the app”), developed by Md. Farhan Labib (“we”, “us”), handles information. The developer is based in Dhaka, Bangladesh. Pinmigo does not require or create a Pinmigo account.

Location and saved data

With your permission, the app accesses your device location to display your position and center the map. Mock coordinates are supplied to Android’s mock location system while you run a simulation. Other apps with location access may receive those coordinates under Android’s permission rules.

Saved places, saved routes, Activity history (each teleport and route you run), dropped pins, labels, and settings are stored in the app’s local database or preferences. If you bought the ad-free upgrade sold in earlier versions, that purchase flag is also kept on the device. The map shows your most recent teleport as a shortcut, taken from your Activity history. Recent address-search results are cached on the device for up to seven days; the search text itself is kept only as a one-way hash. Imported GPX/KML route data and backup files are read on your device. Pinmigo has no developer-operated account or sync server.

Local storage does not mean that coordinates never leave your device: map requests identify the area being viewed, the coordinates under the map pin are sent to the address service to show a place name, and route calculation sends selected waypoint coordinates to the routing service. A map centered on your actual position can reveal that area to these providers.

Android backup is enabled in the current app. Depending on your device and backup settings, Android or your device manufacturer may back up or transfer app data. Backup files, Activity exports (GPX, KML, CSV or JSON) and shared route files are created only when you ask, and go to the destination or app you choose, which may be a cloud service.

Services that receive information

Maps, address search, and routing

• Google Maps SDK for Android: displays the map. Google receives map requests that identify the area being viewed, your IP address, device and SDK details, a pseudonymous Maps SDK identifier, crash data, and map interaction events such as panning and zooming. Your use of the map is subject to the Google Maps/Google Earth Additional Terms of Service and Google’s Privacy Policy. See Google’s Maps SDK data disclosure.
• OpenStreetMap Foundation’s Nominatim: receives the address or place text you search for, and the coordinates under the map pin when the app looks up a name for that spot (reverse geocoding), along with network information and an app-identifying request header. Avoid entering confidential information into searches. See the OpenStreetMap Foundation Privacy Policy.
• The routing service at routing.openstreetmap.de: receives selected route waypoint coordinates and the requested travel profile to calculate a route along roads. It also receives normal connection information. See the routing service for its provider information and policies.

These requests are not inherently anonymous just because you have no account. The app’s map, search, and routing endpoints use HTTPS.

Advertising

The app includes Google AdMob for full-screen (interstitial), native, and optional rewarded ads. Google’s advertising SDK can process IP addresses, device and advertising identifiers, ad interactions, and diagnostic information to deliver and measure ads and prevent fraud. An IP address can indicate an approximate location. Processing depends on SDK configuration, availability of identifiers, and applicable consent settings. See Google’s Privacy Policy and Google’s Mobile Ads data disclosure.

Watching an optional rewarded ad pauses other ads for a set time. Ads are not requested until Google’s consent form, where it applies, has been answered. Pausing ads does not disable map requests, Firebase Analytics, Remote Config, or crash reporting.

Analytics, crash reporting, and remote configuration

The app includes Google Analytics for Firebase, Firebase Crashlytics, and Firebase Remote Config. Analytics processes app usage events, installation identifiers, device information, and approximate location information. Crashlytics processes crash reports, stack traces, device and app details, installation identifiers, and diagnostic logs to help identify and fix failures. Remote Config retrieves the current advertising and search settings and uses a Firebase installation identifier for fetch requests and real-time updates. These reports and identifiers are not guaranteed to be anonymous. See Firebase privacy information and Analytics data collection information.

Purchases

The current app has no in-app purchases. Earlier versions offered a one-time ad-free upgrade through Google Play, which processed the payment. We never received your payment card number or bank credentials.

Permissions

• Precise and approximate location: display your location and support location-related functionality.
• Mock location selection: Android Developer Options lets you select Pinmigo as the mock location app.
• Location foreground service and notifications: keep an active simulation running with a notification and Pause and Stop actions.
• Display over other apps: show the joystick over the app you are testing. Requested only when you open the joystick.
• Internet and network state: access maps, search, routing, ads, diagnostics, analytics, and Google Play services.
• Files you select: import routes and backups, or save and share exports and backups, through Android’s file interfaces.

Retention and your choices

Saved app data remains on your device until you delete it, clear the app’s storage, or uninstall the app. You can remove saved entries and clear history in the app. Backups and exported files must be managed separately; clearing app storage does not erase copies held by other services.

You can change location and notification permissions in Android Settings, stop a simulation in the app or its notification, and manage the advertising ID using the controls available on your device. The current app does not provide an in-app switch for Analytics, Crashlytics, or Remote Config. Removing the app stops its future activity on that device but does not automatically erase previously transmitted data.

Google Analytics for Firebase retains event-level data for 14 months by default before automatic deletion, and Firebase Crashlytics retains crash reports for 90 days; the developer may adjust the Analytics retention window in the Firebase console within Google’s available range. Support emails are kept only as long as needed to handle and follow up on your request. To make a request concerning remotely held data, contact us using the details below with enough information to identify the relevant records. Provider retention and independently processed records are also governed by the policies linked above.

Depending on applicable law, you may have rights to request access, correction, deletion, or restrictions on processing, object to processing, or withdraw consent where processing relies on it. These rights and any exceptions depend on your circumstances. The developer will need enough information to identify the relevant records without collecting unnecessary information. You may also contact the appropriate data protection authority.

Security and international processing

The app uses Android’s app storage protections and HTTPS for the external endpoints described above. No method of storage or transmission is completely secure. Service providers may process information outside your country under their applicable terms and safeguards. Do not put confidential personal information into route labels, search queries, or public support posts.

Children

Pinmigo is a developer and QA testing tool intended for adults and professional or hobbyist developers, not for children. It is distributed worldwide but is not directed at children, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us using the details below so we can address it.

This website and policy changes

These pages contain no advertising, analytics scripts, forms, or embedded third-party fonts. This website is hosted on Cloudflare Pages, which processes standard connection and request-log information (such as IP address and request metadata) to serve pages and protect against abuse. See Cloudflare’s Privacy Policy. Visiting external links is subject to the destination’s practices.

We will update this policy when our practices change and revise the date above. If a change requires notice or consent, it must be provided as required; continued use alone is not a substitute for required consent.

Privacy contact

Developer: Md. Farhan Labib
Location: Dhaka, Bangladesh
Profile: github.com/farhanlabib
Support and privacy email: farhan.labib4@gmail.com