PingDit Privacy Policy
Last updated: 24 October 2026
PingDit is made by Ernestas Venckus. If you have a question about this policy or your data, write to evenckus.dev@gmail.com.
In short
PingDit sends a silent "come here" signal between two paired people. It carries no messages, and there is no sign-up: we never ask for your name, email address or phone number. Our server keeps only what it needs to deliver a ping and its answer, and ping records are deleted after about seven days. PingDit has no ads, no analytics and no tracking.
What our server keeps
| What | Why | How long |
|---|---|---|
| A random account ID, created the first time you open the app | To tell your install apart from everyone else's | Until you delete your account |
| A one-way hash of your app's secret key | To recognise your app. The key itself is created on your phone and sent with each request over an encrypted connection; the server stores only the hash, from which the key cannot be recovered | Until you delete your account |
| Your phone's push token, from Google's Firebase Cloud Messaging | To deliver pings and answers to your phone | Until you delete your account. It is replaced when it changes and removed when Google reports it no longer works |
| Who you are paired with: the other person's account ID | To know where your pings go | Until either of you unpairs or deletes your account |
| A six-digit pairing code, while you have one | To connect your two phones | Valid for ten minutes, removed within a day after that |
| Ping records: a random ping ID, who sent it to whom, when it was sent, delivered and answered, and which answer was chosen ("Coming" or "Give me a minute") | To deliver the answer, notice when you both ping at once, and limit how often pings can be sent | About seven days |
| Whether your phone can currently alert you (it has a vibrator and PingDit's notifications are on), and when it last said so | So your partner's app can warn them before they rely on a ping that may not get through | Until you delete your account. It is updated each time you open the app |
| A one-way hash of your Google Play purchase token, if you unlock PingDit | To remember the unlock for you and your partner, and to notice a refund | Until you delete your account, or the purchase is refunded |
"Until you delete your account" also ends on its own: if PingDit has not heard from your app for six months, your account and everything above are deleted automatically.
Push messages sent through Google carry only a ping ID, what happened to it, and the answer. Never anything you typed, because PingDit has nowhere to type a message.
We never receive your payment details. Google Play handles payment.
What stays on your devices
These never reach our server:
- your app's secret key (only the hash described above is stored)
- the nickname you give your partner
- your settings: vibration pattern, strength, how hard to try, and whether your own pings buzz you
- the progress of the ping you are waiting on
Your phone and watch talk to each other through Google Play services on your own devices. We do not receive what passes between them.
Device backups. Your app's secret key, your partner's nickname and the state of a ping in progress are left out of Android's backups and phone-to-phone transfers. A new phone therefore starts unpaired, and the two of you pair again. This is deliberate: two phones sharing one identity would quietly split your pings between them. Your settings may be included in the backup Android keeps in your Google account, which Google handles under its own terms and we cannot read.
Who else is involved
We use two service providers. Each processes data only to provide its service to us, under its own privacy policy:
- Cloudflare hosts our server and database. Like any web service, it handles your IP address to deliver each request. PingDit does not store your IP address. Cloudflare privacy policy
- Google delivers pings to your phone through Firebase Cloud Messaging, and distributes the app and handles purchases through Google Play. Google privacy policy
We do not sell your data or share it with anyone else. PingDit contains no advertising, analytics or crash-reporting code.
Cloudflare and Google are based in the United States and may process data there or elsewhere. Both protect it under recognised safeguards, such as the EU–US Data Privacy Framework and the European Commission's Standard Contractual Clauses.
Why we process it
If you are in the European Economic Area or the UK: we process this data to provide the service you asked for (Article 6(1)(b) of the GDPR), and to keep it from being abused, for example by limiting how often pings can be sent (Article 6(1)(f), our legitimate interest in a working service).
Deleting your data
- In the app: Settings, then "Delete my account and all data". This immediately deletes your account, your pairing, your pairing codes and every ping record involving you from our server. It also removes your account details and your partner's nickname from your phone. If the app cannot reach our server, nothing is deleted yet, and you can try again.
- Unpairing removes the pairing straight away. Its ping records are deleted within about seven days.
- If you no longer have the app: uninstalling deletes nothing from our server. Instead, an account the app has not contacted for six months is deleted automatically, with everything listed above, and its partner is unpaired. With no sign-up we cannot find your account from an email, so if you still have the app, delete it there. The same steps are on our account deletion page.
Security
All traffic between the app and our server is encrypted. The server keeps only hashes of secret keys and purchase tokens, never the originals, and it keeps as little as the app can work with.
Your rights
Depending on where you live, you may have the right to access, correct, delete or receive a copy of your data, and to object to how it is used. There is no sign-up, so we can only identify your account through the app itself: the quickest way to delete everything is the in-app option above. For anything else, write to evenckus.dev@gmail.com. You can also complain to the data protection authority where you live.
Children
PingDit is meant for adults and is not directed at children.
Changes
If this policy changes, we will update this page and the date at the top.