In short
- We use your data to make Pimble work: showing your profile to people nearby who are allowed to see you, making matches, delivering messages and keeping the app safe.
- We don’t sell your data, and we don’t use trackers to follow your behaviour. Usage figures come from our own database, and only as totals.
- Our servers are in Germany, at Hetzner. For sign-in, notifications on your phone, crash reports, payments and ads we work with Google.
- If you’re 16 or 17, you never get personalised ads, and you only see other 16- and 17-year-olds.
- You can download everything we keep about you, and delete your account yourself. In the app, and also at pimble.nl/en/delete-data and pimble.nl/en/delete-account. Deleting really means deleting.
Who we are
Pimble is an app by Kleijer Solutions, which makes and provides it. The official company details are at the bottom of this page. We are the data controller: we decide why and how your data is used in Pimble.
Questions about privacy, or a request about your data? Email info@kleijersolutions.nl. This is also our point of contact for users and authorities under the Digital Services Act.
Ages 16 and up
Pimble is for people aged 16 and over. In the Netherlands you can consent to the use of your data yourself from the age of 16. If you’re younger, please don’t create an account. If we find out someone is under 16, we end the account.
Extra rules apply to 16- and 17-year-olds, and they are built into the server:
- You only see other 16- and 17-year-olds, and only they see you. Adults never see minors.
- You never get personalised ads, even if you tap ‘agree’ somewhere.
- If you take Pimble Plus, we ask you to confirm that a parent or guardian agreed, and we record that statement.
Which data, and why
Below, per part: what we use, what for, and on which legal basis.
| What | Which data | Purpose and legal basis |
|---|---|---|
| Your account | Your name and email address from Google, your Google account ID, our own account ID, when you created your account and were last active, and which version of the terms of use you accepted and when. |
Signing in with Google and keeping your account. Basis: our contract with you (the terms of use). |
| Your profile | Your name (which you choose), date of birth, gender, bio, interests, your photos and clips, and the name of the place you’re in. For a photo we also store whether it shows a face: the app checks that on your phone itself, and the photo isn’t sent anywhere else for it. |
Showing your profile to people who are allowed to see you, and using your age for the age rules. Basis: the contract. |
| Your location | The approximate location of your phone (Android calls it ‘approximate location’; not GPS precision) and the matching place name. |
Finding people near you, within the distance you choose. Basis: the contract. You can withdraw location permission at any time in Android’s settings. |
| Your preferences and settings | The age range, distance and who you want to see; which notifications you want; whether others may see when you were online and whether you send read receipts. |
Making the app do what you set. Basis: the contract. |
| What you do in the app | Who you chose or skipped, who you starred or brought back, your matches, who you blocked, when you were last active, and how many choices you have left today. |
Building your feed, making matches and making sure you no longer see someone you blocked. Basis: the contract. |
| Messages | Your chat messages with your friends, hearts on messages and when a message was read. |
Delivering messages and keeping them for you and your friend. Pimble staff can’t read your conversations. One exception: if someone reports the other person from within a conversation, our server makes a copy of the last 20 messages of that conversation (from both of you) and keeps it with the report, so a moderator can judge whether the report is right. Basis: the contract; for that copy, our legitimate interest in a safe app and our obligation under the Digital Services Act. |
| Safety and moderation | Reports you make and reports about you (with the reason and any explanation), for a report made from a conversation a copy of its last 20 messages (the server makes that copy; the person reporting chooses nothing), the review of your photos and clips, a moderator’s decisions with the reason, the messages we send you about them, and your appeal if you make one. If you’re suspended, we keep a digital fingerprint (a keyed hash) of your Google address and of your Google account ID. Your address can’t be read back from it; it only lets us see that someone signing up is using the same Google account. |
Keeping Pimble safe, and telling you what we decided and why, so you can appeal. The fingerprint is there so that someone who is suspended can’t make a new account with the same Google account. Basis: our legal obligation under the Digital Services Act, and our legitimate interest in a safe app. |
| Pimble Plus | Which subscription you have, when it started, renews or ends, what it costs, and the purchase details Google Play gives us to verify the purchase. If you’re 16 or 17: when you confirmed that a parent or guardian agreed, your age at the time and the sentence you confirmed. You pay Google; we never see bank or card details. If you got a day of Plus as thanks for a report that was right, we keep that it’s a gift and until when it runs, and when you last got such a day (you get at most one a week). The decision on your report records whether you got the day, and if not, why not. |
Providing your subscription and checking it has been paid, and giving and limiting a gift day. Basis: the contract. We also keep the consent statement to be able to show it was given (legitimate interest). |
| Notifications on your phone | A Firebase Cloud Messaging token per phone, the platform and when it was last used. |
Notifying you of a new message, a new friend or, if you turn it on, new people nearby. A notification itself contains no name, photo or text; the app fetches those afterwards. Basis: the contract. You can turn them off in the app and in Android. |
| Crash reports | If the app crashes: where in the code it went wrong, your phone model, the Android and app version, free storage and memory at that moment, and a Firebase installation ID. No name, email address, account ID, messages or photos. |
Finding and fixing bugs, via Google’s Firebase Crashlytics. Basis: our legitimate interest in an app that works (the report button has to work too). |
| Advertising | See Advertising below. |
Offering Pimble for free. |
| Technical data | For every request to our server: your IP address, the time and what was requested (server logs). Of your sign-in session we only store a hash, not the key itself. |
Securing the service, preventing abuse and overload, and tracking down errors. Basis: our legitimate interest. |
What we don’t do
- We don’t use Firebase Analytics or any other behaviour trackers.
- We don’t use your photos and clips for advertising or to train AI models.
- We don’t keep a copy of any ID document. At the moment we don’t check your age with an ID document: we go by the date of birth you enter yourself, and only record that your age was self-declared, when, and how old you were then. That’s why nobody has a check mark on their profile. If we start having your age checked by a specialised provider, we’ll update this policy beforehand.
What other users see
Your profile is only visible to people who may see you under the rules: in your age group, within their distance and preferences, and not blocked. They see:
- your name, age, gender (if you fill it in), place name, bio and interests;
- your photos and clips, but only once approved. A new upload is visible only to you until it has been reviewed.
Good to know: to show your age, the other person’s app receives your date of birth. For the distance, that app receives your position, rounded to about a hundred metres. Your email address is never on your profile.
With your friends (a match) you also share your messages and, if you both have it switched on, roughly when you were online (‘active today’, no exact time) and whether you’ve read a message.
Who we share data with
Only with parties we need to make Pimble work:
| Party | What they do | Role |
|---|---|---|
| Hetzner Online GmbH, Germany | Our servers, database, storage of photos and clips, and backups. All in Germany. | Processor: acts only on our instructions. |
| Google (Firebase Cloud Messaging and Crashlytics) | Delivering notifications to your phone, and collecting crash reports. | Processor. |
| Google (Sign in with Google) | Confirms to us who you are when you sign in. We receive your name, email address and Google account ID. | Google is itself responsible for your Google account. |
| Google Play | Payment for Pimble Plus. Google handles the payment and tells us whether a purchase is valid. | Independently responsible for the payment. |
| Google AdMob | Ads in the app (see below). | Independently responsible for the advertising data it collects. |
| Authorities | Only when the law requires it, or in serious criminal cases, such as a minor in danger. | Independent. |
We sign a data processing agreement with processors. Google’s privacy policy is at policies.google.com/privacy.
Advertising
Between the people in your feed there are sometimes ads from Google AdMob. They’re labelled ‘Advertentie’ (ad), with the advertiser’s name. With Pimble Plus you see no ads and AdMob isn’t even started.
- Consent first. If you’re 18 or over, Google’s consent screen first asks what you agree to. If you don’t consent to storing or reading information on your phone, the app doesn’t request any ads at all. If you only refuse personalised ads, you get non-personalised ones. You can change your choice at any time in the app: Instellingen → Privacy en gegevens → Advertentievoorkeuren (Settings → Privacy and data → Ad preferences).
- 16 and 17: always non-personalised. With every request the app tells Google it’s dealing with a minor. Your age comes from our server for this, not from your phone.
- What AdMob uses: your phone’s advertising ID, your IP address and the approximate location derived from it, and information about your phone and the app. Google is itself responsible for that. We don’t give AdMob your name, email address, profile or messages.
- The app only requests ads suitable for teens (Google’s ‘T’ rating), also for adults.
Outside the EU
Our own servers are in Germany. Google may also process data outside the European Union, for example in the United States. For this, Google participates in the EU-US Data Privacy Framework and uses the European Commission’s standard contractual clauses.
How long we keep data
No longer than necessary. The server applies these periods automatically:
| Data | How long |
|---|---|
| Account, profile, preferences, choices, matches and blocks | As long as your account exists. If you delete your account, it is removed from our database immediately. |
| Photos and clips | Until you remove them or delete your account; then the file is gone immediately. There’s no recycle bin. An upload that never made it onto your profile: 24 hours. A blurred version for ‘See who already chose you’: at most 24 hours, and gone together with the photo. A rejected photo or clip is deleted immediately. |
| Messages | As long as the friendship exists. If either of you ends the friendship, blocks the other or deletes their account, the whole conversation disappears, for both of you. ‘Clear conversation’ only hides the messages for you: they belong to your friend too and stay for them. |
| Sign-in session | Expires after 60 days without use, and always after one year. Signing out ends it immediately; the expired session is then cleaned up automatically. |
| Moderation decisions, messages from Pimble and appeals | You can appeal a decision for 6 months. After that, or after the ruling on your appeal, the decision stays for another 6 months. Without an appeal it’s gone after 12 months. As long as a suspension, a hidden profile or a block on reporting is still in effect, the decision stays. |
| After a suspension: the fingerprint of your Google account | Even if you delete your account, or that would be the way back. For a suspension without an end date 2 years, for a temporary one until it ends. If the suspension is lifted or your appeal is upheld, it’s gone straight away. |
| Reports | Reports about you disappear with your account. A report you made stays after you delete your account, but without your name. The copy of a conversation attached to a report is kept as long as the decision on that report (see above), and disappears straight away if the report does. |
| Pimble Plus and parental consent | As long as your account exists. Google keeps the purchase itself, under Google’s policy. |
| Notification token | Belongs to the sign-in session on that phone and is cleaned up with it: at most 60 days after last use. If you delete your account, immediately. |
| Crash reports | 90 days, at Google (Firebase Crashlytics). |
| Server logs | Overwritten automatically once they reach a fixed size, and not stored separately. |
| Backups | We make backups of the server so we can restore data after an outage. Something you delete may still be in a backup until it is overwritten: after 7 days at most. |
Deleting
You can delete your account yourself at any time: in the app via Jij (You) → Instellingen → Account verwijderen (Conversations → your photo → Settings and account → Delete account), or at pimble.nl/en/delete-account. That page explains exactly what happens and what stays for a while.
You can remove or change individual photos, clips, your bio and your interests without closing your account. How is explained at pimble.nl/en/delete-data.
Do you have Pimble Plus? Your Google Play subscription doesn’t stop automatically when you delete your account. Cancel it separately in the Play Store.
Your rights
Under the GDPR you have these rights. Most of them you can use yourself, right away:
- Access and portability: download everything we keep about you as a JSON file, in the app (Instellingen → Mijn gegevens downloaden) or at pimble.nl/en/delete-data.
- Rectification: you change your profile and settings yourself in the app.
- Erasure: individual photos and clips, or your whole account. See above.
- Objection: to use based on our legitimate interest.
- Restriction: asking us to temporarily stop using your data, for example while we look into a question of yours.
- Withdrawing consent: for ads under Advertentievoorkeuren, for location and notifications in Android.
For anything you can’t do yourself, email info@kleijersolutions.nl. We reply within one month. To prevent someone else requesting your data, we may ask you to confirm the account is yours, for example by emailing from your account’s email address.
Not happy with how we handle your data? Tell us first and we’ll look into it. You always have the right to complain to the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.
Automated decisions
Who you see in your feed follows from fixed rules: age group, distance, your preferences, blocks and approved photos. There are no automated decisions with legal effects for you. Two things do happen automatically:
- The app checks on your phone whether you’re in a photo. Only the result (yes or no) is sent to us.
- If a profile is reported with the reason ‘minor’ or ‘sexual’, it is immediately hidden for a while until a moderator looks at it. With a single reporter this lapses by itself after 72 hours. A human makes the decision, and you can appeal it.
Security
- All connections are encrypted (https).
- Only a hash of a sign-in session is stored in the database. Signing out, a suspension and deleting your account end sessions immediately.
- A link to a photo or clip only works for the person it was made for, expires within a day, and is checked again on every request. After a block it stops working immediately.
- ‘See who already chose you’ without Plus shows blurred versions that are made unrecognisable on the server. The sharp photo never reaches your phone in that case.
- The server limits how many requests someone can make per minute, against abuse and overload.
- If we discover a data breach that poses a risk to you, we report it to the Autoriteit Persoonsgegevens within 72 hours and let you know.
This website
pimble.nl uses no statistics or trackers, and sets no cookies of its own. Fonts and images come from our own server. Like for the app, our server keeps a log with your IP address and what you requested.
On the delete account and delete data pages you can sign in with Google. Only there do we load Google’s sign-in script. Google then sees your IP address and may use its own cookies for signing in. On those pages the script also sets one functional cookie on pimble.nl (g_state), in which Google keeps track of whether the sign-in prompt was shown; it contains nothing about your account. After signing in, the page keeps your session only in your browser’s memory, not in a cookie or in storage. Signing in on the website never creates a new account.
Changes
If anything important changes in how we handle your data, we update this policy, raise the version number and announce it in the app beforehand. The date at the top tells you which version you’re reading.
Questions? Email info@kleijersolutions.nl. See also the terms of use.
Company details
Kleijer Solutions, registered with the Dutch Chamber of Commerce (KvK) under number 98970178, Jansje Rozendaalstraat 25, 3882 KR Putten, the Netherlands. Email: info@kleijersolutions.nl.