Pip helps you start tasks. To do that it reads the messy things you dump into it — which is exactly why none of it is sent anywhere. There is no account to create, no server of ours to store it on, and no analytics watching you use it.
Nothing. Here is the list in full, so you can check it against what you expected:
Your brain dumps, tasks, drawer items and focus sessions are written to a database file inside Pip's own storage on your device. That file never leaves the phone. It is covered by your device passcode and by iOS's standard app sandboxing, and it is included in your iPhone backup only if you have backups switched on — in which case it is governed by Apple's backup encryption, not by us.
We cannot read your data. Not because we promise not to, but because we never receive a copy of it.
Pip turns what you write into a single small first step. That processing happens entirely on your device — either with Pip's built-in logic or, on supported iPhones, with Apple's on-device Foundation Models.
Your text is never sent to any third-party AI service. Not to OpenAI, not to Anthropic, not to Google, not to us. If that ever changes, Pip will ask for your explicit permission first and this policy will be updated before it does.
Two things involve companies other than us. Neither one sends them anything you wrote.
Pip Pro is billed by Apple through your App Store account. We never see your card details. To check whether your subscription is active, Pip uses RevenueCat, which receives a randomly generated anonymous ID and Apple's purchase receipt. It does not receive your name, your email, or anything you have written in the app. Apple's own handling of the transaction is covered by Apple's privacy policy.
If you write to us for help, we will have your email address and whatever you chose to tell us. We use it to answer you and nothing else.
Pip's reminders are scheduled locally on your device and are never sent through a push server. They contain no personal content, they never tell you what you failed to do, and you can turn them off in iOS Settings at any time.
Open Settings → Erase all data in Pip to wipe every task, session and drawer item immediately. Deleting the app from your phone also removes the database permanently. Because we hold no copy, there is nothing left for you to request from us and nothing for us to delete on our side.
Pip is made for adults and is not directed at children under 13. We do not knowingly collect information from children — which is straightforward here, since we do not knowingly collect information from anyone.
Privacy laws such as the GDPR and the CCPA give you the right to access, correct, export or delete the personal data a company holds about you. In Pip's case those rights are satisfied by design: the only copy of your data is already in your hands, on your device. We do not sell or share personal information, and there is nothing to opt out of.
If Pip ever gains a feature that changes how data is handled — syncing between devices, for example — this page will be updated before that feature ships, and the app will ask for your consent rather than assume it. The date at the top always reflects the current version.