Privacy Policy
Pingworth keeps your numbers yours. We don't sell your data, we don't run ads or analytics, and what reads your screen, your notifications or your location stays on your phone.
Last updated: September 23, 2026
Pingworth is made by RADLAB LLC, a Wyoming limited liability company ("we", "us"). This policy covers the Pingworth apps for iPhone and Android and pingworth.ai.
What we collect
Your account. Your email address and password (stored by our authentication provider as a salted hash; we never see it). If you sign in with Apple or Google instead, we receive your email address and an account identifier from them. With Sign in with Apple you may choose to hide your email; we then receive a relay address.
Your driving ledger. The records you create or bring into Pingworth, which live on our servers so they sync between your devices:
- Offers — the platform (for example Uber or DoorDash), the pay the offer showed, its estimated minutes and miles, when you saw it, and whether you accepted it.
- Trips and orders — platform, start and end times, base pay, tips, miles and status.
- Expenses — date, amount, category and any note you type.
- Mileage — for each drive: its start and end times, its miles, and whether it was for business. Also any odometer readings you enter for the vehicle method.
- Matches and corrections — which offer went with which trip, and any edits you make.
- Receipt photos (Pro, optional) — if you attach a photo to an expense, the image is stored with your account. The text on it is read on your phone and not kept.
- Your settings — your hourly target, tax set-aside percentage, which alerts you want, whether automatic mileage is on, and your time zone.
Files you import (Pro). When you import an Uber or Lyft data export, Pingworth reads the trips out of it and saves only those rows. The file itself isn't kept, and location coordinates in it are never read.
Alerts (Pro, optional). If you turn on an alert, we store your phone's push token so we can send it, and a log of which alerts were sent.
AI copilot (Pro). We keep the weekly summary the copilot writes for you, and a count of how much copilot use you've had this month (to cap its cost).
Your subscription. If you subscribe to Pingworth Pro, we receive your subscription status, product and renewal date from Apple or Google through RevenueCat. We never receive your card or bank details.
That's the full list. We don't collect your contacts, your photo library, your device's advertising identifier, your browsing, or your location history.
What stays on your phone
- Offer screenshots. When you share a screenshot to Pingworth, the text is read on your device (Apple's on-device text recognition and model on iPhone; Google ML Kit and Gemini Nano on Android). Only the offer details listed above are saved. The image itself is never uploaded.
- Offer notifications (Android, optional, off by default). If you turn on offer capture, Android asks you to grant Pingworth notification access. Pingworth then reads notifications only from the gig apps you individually switch on, pulls out the offer details, and discards the notification text on the spot. Notifications from every other app are ignored before their contents are examined. You can turn this off at any time in Pingworth or in Android settings.
- Location (automatic mileage — Pro, off by default). If you turn it on, Pingworth uses your phone's GPS and motion sensors, including in the background, to notice when you're driving and measure the distance. Your position is used only to add up miles and is never saved or uploaded: each drive is kept on your phone as a start time, an end time and a mileage. Only drives you then mark as business or personal are synced, and only those three numbers plus your choice.
- Receipt text. Reading the text on a receipt photo happens on your phone.
How we use it
To run Pingworth: show you your earnings, per-hour and per-mile numbers, offer-vs-pay comparisons, tax worksheets and mileage; send the alerts you turn on; sync between your devices; and check whether you have Pro. Nothing else. We don't use your data for advertising, and we don't build profiles of you for anyone else.
The AI copilot (Pro)
Pingworth Pro includes an AI copilot built on Anthropic's Claude. It sees summaries, not your raw ledger: your weekly totals and per-hour rates, per-app and per-day figures, your busiest hours, the offer you ask it to grade, and your Schedule C totals. It never receives your name, email or notes. In the tax chat, it also receives the questions you type, so please don't type anything you wouldn't want sent to it. For Pro users, the weekly summary is prepared when you open the app. Anthropic processes these requests to answer them and doesn't use them to train its models under its commercial terms.
Who processes it for us
| Provider | What for | Where |
|---|---|---|
| Supabase | Account sign-in, database, receipt storage, and the server functions that compute your numbers | United States (us-east-1) |
| RevenueCat | Keeping track of your Pro subscription | United States |
| Anthropic | The AI copilot (Pro) | United States |
| Apple | App distribution, in-app purchases, Sign in with Apple, and delivering alerts to iPhone (APNs) | Apple's own policy applies |
| Google Play distribution and purchases, Sign in with Google, delivering alerts to Android (Firebase Cloud Messaging), and on-device services on Android (text recognition, location) | Google's own policy applies |
Each provider may only use your data to provide its service to us. Alerts carry your numbers (for example your hourly rate), so their text passes through Apple's or Google's notification service. On Android, the Firebase messaging library registers the app with Google when it starts; it's a messaging component only, not analytics.
What we don't do
- We don't sell or rent your data, or share it for cross-context advertising.
- We don't include advertising, analytics, crash-reporting or tracking SDKs in the apps.
- We don't read notifications from apps you haven't switched on, and we never upload a screenshot, a notification's text, or your GPS position.
- We don't access your gig-platform accounts. Pingworth only knows what you show it.
How long we keep it
Your ledger, receipt photos, settings and copilot summaries stay for as long as you have an account, because they are the product. When you delete your account, all of it is deleted from our live database and storage right away, and it drops out of our backups within 30 days. Subscription records that Apple, Google or RevenueCat must keep for their own accounting are governed by their policies.
Your choices and rights
- See and correct your data — it's all on screen in the app, and you can edit or remove any entry.
- Get a copy — email us and we'll send your ledger as a file.
- Delete your account — in the app, tap Delete account (under Sign out on the main screen), or email us from the address on your account. It deletes your account, your whole ledger and your receipt photos from our servers, and wipes Pingworth's data (including any recorded drives) from that phone. Deletion is permanent.
- Depending on where you live (for example California, or the EEA/UK), you may have further rights, such as to object to or restrict processing. Email us and we'll honour them. We won't treat you differently for using them.
Children
Pingworth is for adult drivers. You must be 18 or older to use it, and we don't knowingly collect data from anyone younger.
International users
Pingworth is operated from the United States and your data is stored there. If you use Pingworth from elsewhere, your data is transferred to the US, where privacy laws may differ from yours.
Security
Data travels encrypted (TLS) and is stored in a database where every row is locked to its owner, so one driver's records can never be read by another. Your sign-in session is kept in your phone's secure storage. No system is perfectly secure, but we built Pingworth to hold as little as possible.
Changes
If we change this policy, we'll update the date at the top. If a change is material (for example a new kind of data or a new provider), we'll tell you in the app before it takes effect.
Contact
[email protected] RADLAB LLC, a Wyoming limited liability company, is responsible for your data under this policy.