Privacy Policy

Last updated 30 August 2026

Pijnhol is a messaging service run by Pijnhol (ABN 91 206 800 518), based in Melbourne, Victoria, Australia. This policy explains what personal information we collect, why we collect it, and what your rights are. We handle personal information in line with the Australian Privacy Act 1988 and the Australian Privacy Principles.

What we collect

We collect the minimum needed to run the service:

  • Your verified mobile number — this is what creates your account and how we send you the digests you signed up for. We verify it with a one-time code, so we never store a password.
  • Your email addressoptional. We may collect it later (for example if you subscribe to a paid plan) so we can send a receipt or let you sign in without your phone. Not required to use the service.
  • Your watch-listthe people, shows, teams, and topics you choose to follow, which steers what your digests cover.
  • Referral relationshipsif you join using a friend's invite link, we record that connection so we can credit both of you when you subscribe.
  • Delivery recordswhich messages we sent you, when, and whether they were delivered.
  • Billing recordsyour subscription status and payment history. Card details go directly to Stripe; we never see or store them.
  • Product usage eventsbasic events like signup and link clicks, stored in our own database. We also use Vercel Analytics and Speed Insights, which are cookieless and don't track you across other sites, to see aggregate traffic and page performance. We don't use ad networks or advertising cookies.

How we use it

We use your information to run Pijnhol: generating and sending your digests, verifying your phone number, billing your subscription, responding to support requests, and understanding how the product is used so we can improve it. We do not sell personal information, and we do not use it for third-party advertising.

Your phone number

Your mobile number is treated as sensitive data. Access to it is restricted within our systems, it is never written to application logs, and it is deleted when your account is deleted. We use it only to send you the messages you asked for and the one-time codes that verify it's yours.

Who processes your data

We rely on a small set of service providers to run the product. Each receives only what it needs for its job:

  • Supabaseour database and authentication provider. Your data is stored in Sydney, Australia.
  • Stripepayments and subscription billing.
  • Twiliosends the one-time codes that verify your phone number (verification only).
  • Mobile Messagean Australian SMS provider that delivers your digests by text.
  • LoopMessagewill deliver digests by iMessage once that channel launches (all digests are SMS today).
  • Anthropicthe AI provider that writes your digests. It receives your watch-list (not your name, email, or phone number) to generate them.
  • Search and news providers — we query services like Tavily and Google News for source material using what you follow, never your identity.
  • Vercelhosts this website and provides cookieless traffic and performance analytics (Vercel Analytics, Speed Insights).
  • Resendsends account emails, such as the welcome email after you subscribe.
  • Cloudflareruns a bot check (Turnstile) on sign-up and login to stop automated abuse of phone verification.

Some of these providers operate outside Australia (for example in the United States). Where they do, we take reasonable steps to ensure your information is handled consistently with Australian privacy law.

How long we keep it

We keep your information while your account is active. You can delete your account yourself at any time from your dashboard, under "Email & phone" — this immediately and permanently removes your personal data, including your phone number, watch-list, and message history, and cancels any active subscription. We may retain limited billing records where required for tax and accounting obligations.

Your rights and choices

  • Stop messages any timereply STOP to your first message, or use "Stop receiving texts" in your dashboard's account settings, which works immediately regardless of how you signed up. You can undo it from the same place if you change your mind.
  • Access and correctionyou can see and edit your details from your dashboard, or contact us for anything you can't reach there.
  • Deletiondelete your account yourself at any time from your dashboard (under "Email & phone"); it wipes your personal data straight away. Or email support@pijnhol.com and we'll do it within 30 days. We may keep limited billing records where tax law requires.
  • Complaintscontact us first and we'll try to put it right. You can also complain to the Office of the Australian Information Commissioner (OAIC).

Changes to this policy

If we make material changes, we'll update this page and the date above, and let you know if the change meaningfully affects you.

Contact

Questions about privacy? Email support@pijnhol.com. See also our Terms of Service.