Privacy Policy for Pinnacle

1. Our Privacy First Philosophy

At KCOApps, we believe that your curiosity and web browsing habits are private. Pinnacle: Apex Web Directory is engineered from the ground up to let you explore the top websites and resources of the world without compromising your privacy or tracking your personal life.

• No Accounts or Sign-Ups: You never need to create an account, log in, or provide your name, email address, phone number, or social profiles to use Pinnacle.
• Zero Browsing History Harvesting: We do not log, record, or track which links you tap or visit within Pinnacle.
• On-Device Local Storage: Your starred favorites, custom-created categories, custom links, and Apex Vault preferences are stored exclusively on your device within the isolated iOS application sandbox.
• No Centralized User Databases: We do not operate remote databases storing user profiles or behavioral dossiers.

2. In-App Safari & External Link Isolation

Pinnacle curates links to elite public web destinations. When you tap to open an external link:

• Apple SFSafariViewController Sandbox: External websites open inside Apple's native in-app Safari interface. This runs in a completely separate, secure process managed by iOS.
• No Access to Credentials or Cookies: Pinnacle cannot access your Safari cookies, autofill credentials, payment details, or browsing sessions. Your web activity on external sites is governed solely by those sites' respective privacy policies.
• Content Blockers & Reader Mode: Pinnacle supports Apple's native Safari Reader Mode and system-level Content Blockers for an optimal, secure reading experience.

3. Ask Pinnacle AI Scout & Third-Party AI Processing

Pinnacle features Ask Pinnacle AI, an optional conversational scout that uses a third-party AI service, the Google Gemini API provided by Google LLC, to recommend websites and tools. This section describes exactly what is shared and how.

• Permission First: Before any question is sent, the app shows an in-app disclosure that explains what is sent and who receives it, and asks for your permission. Nothing is sent to Google unless you choose Allow. You can withdraw permission anytime in Settings → AI Scout Privacy, and Ask Pinnacle AI then stops sending data.
• What Data Is Collected & Sent: Only the text of each question you type or tap (suggested prompts) in Ask Pinnacle AI. As with any internet request, Google also receives your device's IP address. We do not send your name, email, saved links, favorites, custom categories, Apex Vault contents, location, contacts, or advertising identifier.
• How It Is Collected: You enter it directly into the Ask Pinnacle AI chat. The app sends it straight from your device to Google's Gemini API over TLS-encrypted HTTPS.
• How It Is Used: Solely to generate the recommendations shown back to you in the chat: links from Pinnacle's curated catalog, plus a clearly labeled Beyond Pinnacle section of live websites. To find those live websites, Google may run your question as a Google Search (Gemini API "Grounding with Google Search"), and the app displays Google's Search Suggestions as Google requires. Pinnacle does not store your questions or the AI answers on its own servers, does not tie them to any account, and does not sell them or use them for advertising. Your question text is never sent to Firebase Analytics or any advertising partner.
• Who Receives It: Google LLC, as the operator of the Gemini API and Google Search. Google processes questions under the Google Privacy Policy and the Gemini API Additional Terms of Service, which provide protection for your data equal to or greater than that described in this policy. Please avoid entering sensitive personal information in your questions.

4. Apex Vault & Biometric Security

Pinnacle includes an optional Apex Vault to let you bookmark and organize private links behind a passcode and biometric security:

• Apple LocalAuthentication Framework: Biometric authentication (Face ID or Touch ID) is executed strictly on-device using Apple's Secure Enclave. Pinnacle never has access to your biometric mathematical data or face scans.
• Local Passcode Verification: Your chosen 4-digit PIN is stored securely on your local device and is never transmitted over any network.

5. Diagnostics, Analytics & Crash Reporting

To ensure app stability, fix crashes promptly, and maintain high performance, Pinnacle integrates trusted developer SDKs from Google Firebase:

• Google Firebase Crashlytics: If the application encounters an unexpected crash, Crashlytics collects anonymous crash stack traces, device model (e.g. iPhone 15 Pro), and operating system version (e.g. iOS 17.5). This contains no personally identifiable information (PII) or visited URLs.
• Firebase Analytics: We collect aggregate, privacy-preserving telemetry (such as session counts and screen views) to understand app stability and improve directory usability. We do not track individual users across apps or websites.

6. Advertising & App Tracking Transparency (ATT)

To support ongoing curation, regular link updates, and keep Pinnacle free to all users, the app integrates Google AdMob to display non-intrusive advertisements:

• Ad Formats: Pinnacle displays native directory banners, occasional full-screen interstitial ads (frequency-capped, such as after every 5 link clicks), and optional rewarded video ads (to unlock extra Daily Mystery Gem reveals, Apex Vault access, or +5 Ask Pinnacle AI searches).
• App Tracking Transparency (ATT): Pinnacle strictly complies with Apple's App Tracking Transparency framework. On iOS 14.5+, you are presented with an explicit prompt asking for tracking permission.
• Opt-In Choice: If you grant permission, Google AdMob may serve personalized ads. If you choose "Ask App not to Track", Google AdMob serves only non-personalized, contextual advertisements. You can toggle this permission anytime in your iOS device settings (Settings → Privacy & Security → Tracking).
• No Directory Data Shared: Your custom bookmarks, Apex Vault contents, search queries, and Ask Pinnacle AI questions are never shared with advertising partners.

7. Data Retention & Your Control (GDPR, CCPA & CalOPPA)

Because Pinnacle does not store your information on external servers, you have immediate, sovereign control over all data generated within the app:

• In-App Data Erasure: You can purge all custom categories, custom links, starred bookmarks, and cached search history anytime via Settings → Directory Management → Reset All Data.
• Complete Deletion: Uninstalling Pinnacle from your Apple device immediately and permanently deletes all local sandbox files and preferences.
• Rights under GDPR & CCPA/CPRA: European and California residents have the right to know, access, and erase their personal information. Since Pinnacle operates without user accounts or personal profiles, no additional paperwork or request forms are required—you can exercise full erasure instantaneously on your device.

8. Children's Online Privacy Protection (COPPA)

Pinnacle is intended for general audiences and does not knowingly solicit or collect personal information from children under the age of 13. If you believe that a child has provided personal information to us, please contact us immediately and we will take steps to delete such data.