Privacy

Who we are

Pinna is made by Breukr, based in the Netherlands. We are the controller for the personal data described on this page, which means we decide why and how it is used. You can reach us at support@getpinna.app.

Because we are established in the European Union, the General Data Protection Regulation (GDPR) applies to how we handle your data.

The app: what stays on your Mac

Pinna has no account and no analytics, and it does not run a cloud service of ours. Your recordings, transcripts, notes, settings and the activity log are stored on your Mac, in the folders you choose. We do not receive them.

• Recording uses your microphone and the sound your call app plays, on your Mac. No bot joins your call.
• Transcripts are made on your Mac by default, with built-in Whisper, NVIDIA Parakeet or Apple on-device speech.
• Notes are written on your Mac by Apple Intelligence or a local model server (such as Ollama or LM Studio), unless you choose a cloud model.
• Transcripts and notes in another folder, such as an Obsidian vault or iCloud Drive, are synced by that app or by your own iCloud account under its terms. We have no access to it.
• API keys you add for cloud engines are stored in your Keychain.
• The trial: the time used of the Pro trial is stored on your Mac and is never sent anywhere.

Cloud engines and models you choose

If you choose a cloud engine for transcripts (Deepgram, OpenAI, Groq, AssemblyAI or ElevenLabs) or a cloud model for notes (Anthropic, OpenAI, Gemini, OpenRouter or Groq), Pinna sends the audio or the transcript text from your Mac straight to that company, with your own key. Before the first use, Pinna shows what is sent, where it is processed, how long the company keeps it and whether it trains on it, and asks for your OK. It asks each company separately for the audio and for the transcript text.

That company handles the data as its own controller or as your processor, under its own terms and your agreement with it. We do not see the data and do not receive a copy.

AI agents you connect

When you connect an agent such as Claude Code or Codex, Pinna shares the meetings that agent asks for, on your Mac. What the agent reads goes to that agent's AI provider under the provider's terms. Pinna keeps a log, on your Mac, of what agents search and read through its MCP server, and lets you hide meetings or apps from agents. An agent that reads the files in your recordings folder directly does so outside Pinna, so those reads are not in the log.

What the app sends over the internet

Apart from the cloud engines and agents you choose, Pinna makes these requests:

• License check. When you enter a Pro key, Pinna activates it with Polar, our merchant of record, sending the key and your Mac's name. It checks the key again about once a day and keeps Pro working offline for up to 30 days. We use this only to confirm the license and to show the Macs it is active on in the customer portal. Free use without a key makes no license check.
• Model downloads. When you download a transcription model, such as Whisper or Parakeet, Pinna fetches the model files from Hugging Face, which sees your IP address like any website. Nothing about your recordings is sent.
• Ollama models. When you download a notes model under Download a model for Ollama, Pinna asks the Ollama app on your Mac to fetch it from Ollama's model library, which sees your IP address like any website. Nothing about your recordings is sent.
• Update check. Once a day, and when you ask, Pinna reads one public file on GitHub that describes the latest release. GitHub sees your IP address like any website. Pinna sends only the app version, no identifier and nothing about your meetings. Nothing downloads or installs by itself. You can turn automatic checks off.

macOS itself may contact Apple when you run any app; that is Apple's behavior, not ours.

The website

getpinna.app is hosted by Vercel. Like any web server, it processes technical data when you visit, such as your IP address, the page requested, the time and your browser's user agent. This is needed to deliver the site and keep it secure, which is our legitimate interest. Vercel acts as our processor and keeps these request logs for a short period.

The site uses no cookies, no analytics and no advertising trackers, and loads nothing from other websites. If that changes, we will update this page first and ask for your consent where the law requires it.

Purchases

Pro licenses are sold through Polar, which acts as the reseller and merchant of record: it handles checkout, payment, invoicing and sales tax or VAT, and it issues your license key. It is a separate controller for the data you give it at checkout, under its own privacy policy. We do not receive your full card details.

To deliver and support your license, Polar shares with us the details needed for that: typically your name, e-mail address, country, what you bought and your license key. We use these to deliver your license, help with recovery and answer support questions. The legal basis is performing our contract with you, and keeping records the law requires.

Data outside the European Economic Area

Vercel (the website), Polar (purchases and license checks) and GitHub (the update check) may process data in the United States or other countries outside the European Economic Area. Where they do, the transfer relies on the EU-US Data Privacy Framework or on the European Commission's standard contractual clauses.

Customer portal and support e-mail

Your key, your receipts and the Macs your key is active on are in the customer portal, which Polar runs. If you e-mail us for help, we use your e-mail address and what you tell us to find your purchase and reply. We do not use it for marketing.

Your rights

Under the GDPR you have the right to:

• Access the personal data we hold about you.
• Rectification of data that is wrong or incomplete.
• Erasure of your data, unless we must keep it by law, for example tax records.
• Objection to processing based on our legitimate interest, and to ask us to restrict processing.
• Portability of data you gave us, in a common format.

E-mail support@getpinna.app to use any of these rights. If you are not happy with how we handle your data, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or to the authority in your own EU country.

How long we keep data

• License details (e-mail address, name, license key, what you bought and when): while your license is valid, so we can help you recover it.
• Accounting records: 7 years, because Dutch tax law requires us to keep them.
• Support e-mails: deleted 24 months after the last message in the conversation.
• Website request logs: kept by Vercel for a short period, as described above.

You can ask us to delete your data earlier, except where the law requires us to keep it.

Recording other people

When you record a call, you decide what is recorded and you are responsible for it. Depending on where you and the other people are, the law may require you to tell them or to ask their consent. Pinna does not send your recordings to us.

Changes to this policy

If we change how we handle personal data, we will update this page and the date at the top. For significant changes we will give notice on this site before they take effect.

Contact

Breukr, the Netherlands. support@getpinna.app