Privacy & Security
Private by architecture, not by promise.
PingRoom can’t leak what it never collects. Privacy here isn’t a setting you configure or a policy you trust — it is baked into how every layer is built.
The data we hold is the data we need.
Most apps collect everything and figure out what to do with it later. PingRoom works the other way: every piece of data in the system had to earn its place. Everything else was cut before it could become a liability.
The safest data is the data we never collect.
Six principles, enforced in code.
Location never leaves your phone
Geofencing runs entirely on the device — iOS and Android handle it natively. When a trigger fires, your phone tells our server to ping, and nothing else crosses the wire. No coordinates. No movement history. No trace.
Direct delivery. No middlemen
Your notifications travel straight to Apple and Google. No third-party push vendor, no analytics SDK, no outside company sitting in the path between you and your people.
Tokens are minimal and self-cleaning
We hold one push token to reach your device — nothing more. Invalid tokens are purged automatically on the first failed delivery. We don't build profiles from them.
Start without an account
Use PingRoom as a guest from minute one — no email, no sign-up form, no data to surrender. Upgrade later with a one-time code. Sessions are signed, stateless JWTs. We never store passwords.
Hardened by default
Rate limits on every public endpoint, strict field whitelisting, sensitive fields hidden from API responses, webhook logs with secrets filtered out. Rooms can be password-protected. This is the baseline, not an option.
Minimalism as a security strategy
The safest data is the data we never collect. Every field in the database was argued for. Everything that lost the argument was cut. A smaller surface means fewer things that can go wrong.
What we don’t collect
The list of things we never touch.
- Location history or movement data
- Third-party trackers in the notification path
- Advertising identifiers or cross-app profiles
- Your data, sold or shared with anyone
Want the full picture? Everything is written down in plain language — no buried clauses.