Privacy Policy

1. No account

Pip does not require you to create an account or give us your name, email address, or a password. We don’t maintain user profiles that identify you.

2. Information stored on your device & Photo Proof

The heart of Pip — your daily three tasks, scheduled times, completion status, proof photos, streaks, 4-week calendar history, weekly intentions, reflections, and settings — is stored locally on your device in secure SQLite storage. We do not receive or store this content on our servers.

You can create a backup from within the app; this exports your data to a file that you save and share. We never receive that file.

3. Payments & subscriptions

Subscriptions are sold through Apple and managed with RevenueCat, our subscription-infrastructure provider. When you subscribe, they process purchase-transaction data, a subscriber identifier, and device/app information so we can grant and verify access. We never receive your card or payment details — Apple handles the transaction.

• RevenueCat privacy: revenuecat.com/privacy
• Apple handles billing under its own privacy policy.

4. Analytics

We use Mixpanel to understand how the app is used — for example, which onboarding steps people complete, when the paywall is viewed, and anonymous engagement events like “locked in,” “day won,” and streak milestones. These are tied to a random device/instance identifier. We do not send your task text, reflections, name, or email to Mixpanel.

• Mixpanel privacy: mixpanel.com/legal/privacy-policy

5. Optional AI features

Some premium features (a weekly reflection insight, turning your intention into suggested tasks, and a gentle “is this really a top 3?” check) use AI. If — and only if — you use these features, the relevant text you wrote (your weekly reflection notes, weekly intention, and/or task text) plus your win/miss pattern is sent to OpenRouter, which routes it to Google’s Gemini model to generate a response.

This text is used to produce your result. To the best of our knowledge it is not used to train those providers’ models, but their handling is governed by their own policies. If you prefer not to share this content, simply don’t use the AI features — the rest of Pip works without them.

• OpenRouter privacy: openrouter.ai/privacy
• Google AI / Gemini terms: ai.google.dev/gemini-api/terms

6. Notifications

Reminders (morning nudge, the 10 AM deadline warning, evening and last-call prompts) are local notifications scheduled on your device. We do not operate a push server and no data is sent to us to deliver them.

7. App updates & diagnostics

Pip is built with Expo. To deliver over-the-air updates, the app may contact Expo’s update service with basic technical information such as app version and platform. See expo.dev/privacy.

8. What we do not do

• We do not sell or rent your data.
• We do not show third-party ads.
• We do not require or collect your name, email, or password.

9. Retention & deletion

Your on-device data remains until you delete it. Using “Start fresh” in Settings erases your streak and history, and deleting the app removes the local data from your device. To request deletion of analytics or subscription-related data held by our providers, email us and we’ll help facilitate it.

10. Your rights

Depending on where you live, you may have rights to access, correct, delete, or restrict processing of personal data (we do not sell data). To exercise any right, contact us at the address below.

11. Children

Pip is not directed to children under 13 and we do not knowingly collect their personal data.

12. Security & international processing

We use reasonable measures to protect information, and your core content stays on your device. The providers named above may process limited data on servers outside your country (including the United States).

13. Changes

We may update this policy; we’ll change the effective date above and, for material changes, provide notice in the app or on this page.