Privacy
Privacy and data handling details for pinakea.
Your original files stay where they are. pinakea keeps its library on your Mac. AI processing runs through OpenRouter. For technical details, see OpenRouter and BYOK.
What stays local
Your original files remain in their original locations (folders, Mail, Obsidian vaults, and the rest). pinakea’s database, search index, summaries, titles, tags, embeddings, and chat history are stored on your Mac.
What is done in the cloud
Items you add can be processed through OpenRouter (embeddings, titles, tags, summaries, and chat). Requests go from your Mac to OpenRouter and the provider over encrypted connections, using your own key. pinakea asks OpenRouter for Zero Data Retention routing where available.
If content must never leave your Mac for AI processing, do not add it to pinakea.
No pinakea content server
pinakea does not upload or store your documents, emails, notes, chat, or file content on its own servers. Licensing and optional analytics use separate services and never receive your library content (see below).
pinakea licensing service
pinakea uses a small backend service for licensing and entitlement checks. This is what it stores:
- License and customer identifiers
- Device installation identifier
- Plan status (
free,pro_monthly,pro_lifetime) - Entitlement and trial-status metadata (where applicable)
- Checkout, transaction, and billing reference identifiers
- Device and eligibility signals needed to protect one-time trial access against abuse
- Account email, necessary account-email delivery metadata, and optional product-news contact/subscription state handled by Resend if you choose to receive product news
What it does not store:
- Your documents, emails, notes, or any file content
- Chat messages or responses
- Summary text
- Any file payloads
This licensing communication is essential for the app to work and is separate from optional analytics.
Analytics and crash reporting
Analytics (OpenPanel): pinakea collects lightweight usage analytics — things like feature usage counts, source-type adoption, aggregate counters, app sessions, and app/OS version. No content from your documents, chats, searches, summaries, filenames, file paths, or source names is ever included. You can disable analytics entirely in Settings, and analytics can also be disabled remotely to prevent monthly event-quota exhaustion.
Crash reporting (Firebase Crashlytics): If pinakea crashes, it sends technical diagnostic data (stack traces and crash metadata) to help fix the issue. No content from your documents or chats is intentionally included in crash reports.
Cookies: The websites pinakea.com and pinakea.com/doc do not use cookies.
Third-party services
External services pinakea can communicate with:
- OpenRouter — routes AI requests to providers
- AI providers (via OpenRouter) — execute model inference
- Paddle — handles paid-plan checkout, billing, and refunds as Merchant of Record
- Supabase — account authentication and account/licensing metadata storage
- Resend — delivery of account/security emails and optional product-news emails, including optional product-news subscription and unsubscribe state
- OpenPanel — optional usage analytics
- Firebase Crashlytics — crash diagnostics
- Tailscale — optional, only if you enable Web Server remote access
pinakea processes your content through OpenRouter and the selected AI-provider endpoint. Processing may happen in the United States or other countries depending on OpenRouter’s provider routing for the selected text model and Qwen embeddings. Optional analytics and crash-diagnostic metadata are processed in the United States (OpenPanel, Firebase Crashlytics). All connections use encrypted transport.
Who operates pinakea
pinakea is published by Reckoner GmbH, Ahornweg 23, 2542 Pieterlen, Switzerland (CHE-336.371.286). For privacy-related questions, reach us at [email protected].
Your rights under Swiss law
In-app analytics can be disabled in Settings and are not linked to your identity.
You can request information, correction, or deletion of personal data processed by pinakea under the Swiss Federal Act on Data Protection (DSG). For privacy and legal data-handling requests, contact [email protected].