Pip

Privacy Policy

Last updated: June 2026

Pip is a voice learning companion for children. We built it with one rule: never collect anything we don't absolutely need. No child's name, voice, or conversation is stored anywhere.

Who We Are

Pip is developed and operated as an independent app. If you have any questions about this policy, contact us at hello@talkwithpip.com.

What We Collect

We collect the minimum needed to make Pip work well for your child.

Anonymous device identifier — a randomly generated ID created on first launch. It is never linked to a name, email, or account unless you choose to register.

Learning signals — anonymous patterns like "asked a what-if question" or "used a new word correctly." We never store what your child said word-for-word.

Session metadata — duration, approximate age group, topics explored. No audio. No transcripts.

Parent email (optional) — only if you choose to receive the daily summary email. Used solely to send that email.

What We Never Collect

Your child's name, photo, or any identifying information
Voice recordings or audio files
Full conversation transcripts
Location data
Contacts, camera, or any device sensor beyond the microphone during a live session
Any data from children under 5

How We Use Your Data

To personalise Pip's conversation style for your child over time
To send the optional daily parent summary email
To count sessions for the free / premium tier limits
To improve Pip — anonymised and aggregated only, never individual profiles

We do not use your data for advertising. We do not sell data to third parties. Ever.

Third-Party Services

Pip uses the following services to function. Each has its own privacy policy:

Anthropic (Claude) — generates Pip's responses. Text is sent per-message and not stored by us after the session ends. Anthropic Privacy Policy
OpenAI (Whisper) — converts your child's speech to text during a session. Audio is not retained. OpenAI Privacy Policy
ElevenLabs — converts Pip's text responses to voice. ElevenLabs Privacy Policy
Supabase — stores anonymous learning data and session metadata securely. Supabase Privacy Policy
RevenueCat — manages subscription billing. No conversation data is shared. RevenueCat Privacy Policy
Resend — delivers the optional parent summary email. Resend Privacy Policy

Children's Privacy (COPPA)

Pip is designed for children aged 6–16 and used under parental supervision. We comply with the Children's Online Privacy Protection Act (COPPA).

We do not knowingly collect personal information from children under 13 without verifiable parental consent
The app is set up by a parent, not the child
No child-identifiable data (name, voice, photo) is ever collected
Parents can request deletion of all data associated with their device at any time

Data Storage and Security

All data is stored on Supabase (hosted on AWS). Data is encrypted at rest and in transit. Anonymous identifiers cannot be reverse-engineered to identify a person.

Data Retention

Session metadata: retained for up to 90 days, then automatically deleted
Learning signals (anonymous): retained for the life of the account to personalise Pip
Parent email: retained until you unsubscribe or request deletion

Your Rights

You can at any time:

Request a copy of all data associated with your device identifier
Request complete deletion of all your data
Unsubscribe from the parent summary email
Delete child profiles from within the app

To exercise any of these rights, email us at hello@talkwithpip.com with your device identifier (found in the app under Settings).

Changes to This Policy

If we make material changes, we will update the date at the top of this page and notify registered parents by email. Continued use of Pip after changes constitutes acceptance of the updated policy.