Your PIN travels over HTTPS and is stored only as a one-way hash. This phone keeps a sign-in cookie and your unsent scores until they sync — sign out if you’re sharing it.