The short version
- You don't need an account. We never ask for your name, email or phone number in the app.
- Your answers, progress, saved prompts and anything you type stay on your iPhone.
- We collect a small amount of data to run subscriptions (RevenueCat), understand how the app is used (PostHog) and fix crashes (Sentry). None of it identifies you by name.
- No ads. No tracking across other apps or websites. We don't sell or share your data for advertising.
- The app doesn't send anything you type to any AI company. The AI examples in lessons were made in advance by our team.
- You can turn analytics off in Settings at any time, and erase everything on your device with one tap.
1. Who we are
Pipli is made by Harry Langley, trading as Pipli ("we", "us"). We are the controller of the personal data described here.
Contact: support@pipli.app.
This policy covers the Pipli iOS app and this website. It applies to people who use the app in the United Kingdom.
2. What we collect, why, and our lawful basis
We don't collect your name, email address, phone number, contacts, photos, location, health data or advertising identifier. Here is everything that does leave your device.
Subscription data
A random app user ID created on your device, the App Store transaction and receipt details Apple gives us (product, price, currency, storefront country, purchase, trial and renewal dates), app version, device model and iOS version.
- Why we use it
- To check whether you have Pipli Pro, unlock it, and restore it on your other devices. To understand subscription numbers (for example, how many trials convert).
- Lawful basis
- Performance of a contract (giving you what you paid for). Legitimate interests (understanding our business).
- Who handles it
- RevenueCat, Inc.
Usage analytics
A random ID for this install, and events such as "lesson completed", "game score 4/5", "paywall shown" or "plan selected", with device type, iOS version, app version and language. We switch off IP address storage and location lookup. We never send text you type.
- Why we use it
- To see which lessons and games work, find where people get stuck, and improve the app.
- Lawful basis
- Legitimate interests (improving the service). Storing the analytics ID on your device relies on the UK exception for statistical purposes to improve a service. You can turn analytics off at any time (see section 8).
- Who handles it
- PostHog Inc., EU Cloud (data hosted in the EU)
Crash and performance reports
What the app was doing when it crashed (a technical stack trace), device model, iOS version, app version, memory and timing data. No user ID is attached, and IP addresses aren't stored.
- Why we use it
- To find and fix bugs and crashes.
- Lawful basis
- Legitimate interests (keeping the app working).
- Who handles it
- Functional Software, Inc. (Sentry), EU data region
Support messages
Your email address and whatever you write to us.
- Why we use it
- To reply to you and fix problems you report.
- Lawful basis
- Legitimate interests (answering you). Legal obligation where you exercise a data right.
- Who handles it
- Cloudflare, Inc. (email routing) and Google LLC (Gmail)
Website visits
This site has no cookies or analytics. Our host keeps standard server logs (IP address, browser, pages requested).
- Why we use it
- To keep the site running and secure.
- Lawful basis
- Legitimate interests (security).
- Who handles it
- Vercel Inc.
Payments
Apple processes all payments. We never see your name, Apple Account email, card or billing address. Apple handles your payment data under Apple's Privacy Policy.
Notifications
If you allow notifications, practice reminders are scheduled on your iPhone. We don't collect a push token and we don't send marketing notifications.
3. What stays on your device
These never leave your iPhone and we can't see them:
- Your onboarding answers (for example, what you want to use AI for) and the learning plan built from them.
- Your progress, streak, XP, badges and game history.
- Prompts you save, edit or build in your Toolkit and projects.
- Anything you type into exercises. It's checked on your device by simple rules, not by AI and not by us.
- Your settings.
Because there's no account, this data isn't backed up by us. If you delete the app, it's gone. Your subscription is tied to your Apple Account, so you can restore it on any device.
4. What we don't do
- We don't show ads or use advertising or attribution SDKs.
- We don't track you across other companies' apps or websites, and we don't access your device's advertising identifier.
- We don't sell your personal data or share it for advertising.
- We don't send what you type to ChatGPT, Claude, Gemini or any other AI service. The app has no live AI. The AI outputs shown in lessons were generated in advance by our team.
- We don't make decisions about you that have legal or similarly significant effects. Your learning plan is worked out on your device from your onboarding answers, and you can change it.
5. Who we share data with
We use these service providers. They process data for us under contract and can't use it for their own purposes:
- RevenueCat, Inc. (USA): subscription management. Privacy policy.
- PostHog Inc. (EU Cloud, hosted in the EU): product analytics. Privacy policy.
- Functional Software, Inc. (Sentry) (EU data region): crash reporting. Privacy policy.
- Cloudflare, Inc. (USA) and Google LLC (USA): receive and store support email.
- Vercel Inc. (USA): hosts this website. Privacy policy.
Apple acts independently when it sells and manages your subscription.
We may also disclose data if the law requires it, to protect our rights or users' safety, or to a buyer if our business is sold (and they would have to follow this policy).
6. International transfers
Some providers are based in, or can access data from, the USA. Where data leaves the UK, we rely on the UK's adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework where the provider is certified) or the UK International Data Transfer Addendum to the EU Standard Contractual Clauses. Ask us for a copy of the safeguards.
7. How long we keep data
- Subscription data (RevenueCat): while your subscription history is relevant to giving you access, then deleted on request or when we close the service. Apple keeps its own records.
- Analytics events (PostHog): up to 12 months, then deleted.
- Crash reports (Sentry): up to 90 days.
- Support emails: up to 24 months after the conversation ends.
- Website server logs: up to 30 days.
- On-device data: until you delete the app or use Erase all data.
8. Your choices and controls
- Turn off analytics: Settings › Privacy › "Share usage data". When it's off, the app sends no analytics events. Pro features don't depend on it.
- Erase everything on this device: Settings › Privacy › "Erase all data". This wipes your progress, saved prompts and settings and resets your analytics ID. It doesn't cancel a subscription.
- Notifications: turn reminders on or off in Settings or in iOS Settings.
- Subscriptions: manage or cancel in Settings › Subscription › "Manage subscription", or in your Apple Account settings.
9. Your rights
Under UK data protection law you can ask us to: give you a copy of your data; correct it; delete it; restrict or object to how we use it (including anything based on legitimate interests); and move it to another service. Email support@pipli.app.
Because we don't know who you are, we need a way to find your data. In the app, Settings › Privacy › "Copy my data IDs" copies a support ID and your app version. Paste them into your email. We'll reply within one month.
10. Young people
Pipli is for people aged 13 and over. It isn't directed at children under 13, and we don't knowingly collect data from them. If you think a child under 13 has used the app, contact us and we'll delete any data we hold.
We follow the ICO's Age Appropriate Design Code for users under 18. That means no profiling for advertising, no location data, no nudges to share more data, and no public profiles, chat or contact with other users.
11. Security
Data is sent over encrypted connections (HTTPS). We limit access to the people who need it and use providers with recognised security practices. No system is perfectly secure, but we'll tell you and the ICO about any breach as the law requires.
12. Changes to this policy
If we change how we use your data, we'll update this page and the date above. If the change is significant (for example, adding accounts or new data types), we'll tell you in the app before it applies.
13. Contact us and complaints
Harry Langley, trading as Pipli. Email: support@pipli.app.
If you're unhappy with how we've handled your data, please tell us first. You can also complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, 0303 123 1113.