Privacy Policy

Last updated 13 September 2026. Pip, contact [email protected].

Back to Pip

What this covers

Pip is an accountability assistant that sends you text messages. This policy explains what personal information we collect, how we use it, and how to ask us to stop. By using Pip you agree to this policy and to our Terms of Service.

Photos and location

Pip asks for a photo when you check in, and sometimes for your location, so it can tell whether you showed up. That is the only reason we take them.

• Who sees your face. Pip uses the photo to confirm the check-in. The person you named as a witness is told when you miss. They do not receive the photo. Photos are not used for ads, and they are not sold.
• How long it is kept. Once the check-in is judged, Pip deletes the photo and the location ping. We keep the result (you showed up, or you did not) so Pip can hold the streak. We do not keep a gallery of you.
• Location. Only when a check-in needs to confirm you are at the right place, and only while you are using the app. It is a one-time ping for that check-in, then it is deleted with the photo. Pip does not collect background location.

Information we collect

• Account. Your phone number, first name, time zone, and an optional iMessage email if Messages shows an email instead of your number.
• The thread. Goals, cadence, stakes (including a friend you name, or a money amount Pip keeps), and the messages you send and receive, so Pip can hold you to them.
• Check-in proof. Photos and, when needed, a location ping, as described above.
• Billing. Plan, subscription status, and invoices. Card details are handled by Stripe. We never see or store your full card number.
• How you found Pip. A channel name such as instagram or direct, taken from the link you arrived on. No advertising identifiers.
• Device and usage. Basic technical data (browser or app type, errors) so we can keep Pip working. A signed-in session is stored as a cookie on the web, or in Keychain if you use the iPhone app.
• Google account data, only if you connect one. See below.
• Support. What you send us when you email [email protected].

How we use it

We use this information to run Pip: sign you in, send check-ins and reminders, judge whether you showed up, bill you, stop abuse, and answer support. We may look at usage in totals to fix bugs and decide what to build. We do not sell your information, rent it, or share it with advertisers or data brokers.

Service providers

We use other companies to host Pip, deliver messages, process payments, generate replies, and keep the service reliable. They only receive what they need to do that work for us, and they are not allowed to use it for their own marketing. If you use iMessage, Apple handles those messages. SMS still goes through your carrier.

Payments are processed by Stripe. Connecting Google is optional and described below.

The Pip iOS app

The Pip iOS app is optional. You can keep using Pip in Messages without it.

If you connect the app, Pip stores a session on your iPhone (Keychain) so you do not enter a code every time. Live check-in photos and location from the app are handled as described above.

Google account data

Connecting a Google account is optional and Pip works without it. If you connect one, Pip requests access to your Google Calendar, and to your Gmail if you grant it, so it can see when your week is genuinely free and avoid interrupting you.

Pip's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• Google data is used only to provide the check-in features you signed up for.
• Google data is never sold, and never transferred to anyone else except as needed to provide the service, to comply with the law, or as part of a merger with prior notice.
• Google data is never used for advertising.
• Google data is never used to train, fine-tune, or improve any generalized or foundational AI or machine learning model.
• No human reads your Google data except with your explicit consent, to resolve a support issue you raised, or where required by law.

Access tokens are encrypted before storage. You can revoke access from your dashboard, or from your Google account permissions page.

How long it is kept

Check-in photos and location pings are deleted once that check-in is judged. Pip keeps the result, not the picture. The rest of your record is kept while your account is active. If you fully opt out, Pip retains your number so it cannot text you again by accident. Ask for full deletion and it will be done within 30 days. We may keep limited records when the law requires it, for example payments, taxes, security, and preventing fraud.

Your choices

• Reply STOP by itself to pause check-ins and reminders. Pip then texts a link if you want to fully opt out. That does not cancel billing. You can also stop texts from your dashboard.
• Email [email protected] to see, correct, or delete what we hold about you, or to get a copy we can reasonably send. Pip does not treat HELP as a special command.
• Disconnect Google from your dashboard or from your Google account permissions.

Depending on where you live, you may have extra rights. Email us and we will help.

Age

Pip is not for anyone under 16 and does not knowingly collect their information.

Changes

If this policy changes in a way that matters, the date above changes and Pip will say so in a message before the change takes effect.