Privacy Policy

1. Who we are

Piplet is a mobile application for iOS and Android developed and operated by Kyle ("we", "us", "our"). Our contact email is hello@getpiplet.com.

This Privacy Policy describes what information we collect, why, how we use it, and what rights you have over it.

2. Our privacy model

Piplet is designed to be local-first. This means:

• Your photos, voice notes, memories, milestones, and all personal content are stored in an encrypted SQLite database on your device.
• We do not sync your data to our servers automatically or by default.
• We do not have access to your memories, and we do not want it.
• No account or email address is required to use the core app.

3. Information stored on your device

All of the following is stored locally on your phone and never transmitted to us unless you explicitly trigger a feature that requires it:

• Photos, videos, and voice recordings you add to the app
• Written memories, captions, and notes
• Milestone records (including dates and photos)
• First words, artwork, and activity data
• Child profiles (name, date of birth, photo)
• Book drafts and exported PDFs
• App settings and preferences

4. When data leaves your device

There are three situations in which data leaves your device:

4a. Share links

When you tap Share on a book or memory, Piplet uploads a package of that specific content to our file storage provider (DigitalOcean Spaces, located in the US). This package is:

• Limited to the content you explicitly selected to share — nothing else is uploaded
• Accessible only via a unique, unguessable URL
• Retained until you delete the link from within the app, or for 90 days on the free plan (whichever comes first)
• Not indexed by search engines

We may log the number of times a share link is accessed (view counts) in order to show you that statistic in the app. We do not log the identity or location of viewers.

4b. AI caption rewrite (opt-in, per page)

Piplet offers an optional feature that uses the Claude API (operated by Anthropic, PBC) to rewrite voice note transcriptions into book-quality text. This feature:

• Is opt-in only — it is off by default
• Sends only the text of the specific caption you choose to rewrite — not photos, not other memories
• Is subject to Anthropic's privacy policy at anthropic.com/privacy

Photo curation (choosing the best photos for a book) runs entirely on-device using Apple's Vision framework (iOS) and Google's ML Kit (Android). Your photos are never sent to any AI server for this purpose.

4c. Crash and diagnostic data

If the app crashes, anonymised crash data (device type, OS version, stack trace) may be sent to a crash reporting service to help us fix bugs. This data contains no personal information, photos, or memories. We will update this section if and when we integrate a specific crash reporting provider.

5. Our website (getpiplet.com)

If you visit our website and sign up for early access, we collect your email address to notify you when the app launches. We use Formspree to process this form submission. We will not share your email with third parties or use it for marketing beyond Piplet launch communications. You can unsubscribe at any time.

Our website does not use advertising trackers or analytics cookies. We may use basic server-side access logging (IP address, timestamp, URL requested) for security and performance purposes.

6. Children's privacy

Piplet is a tool for parents to document their children's lives. The app is designed for use by adults (parents and caregivers) and is not directed at children. We do not knowingly collect personal information from children under 13.

Because all family data is stored locally on the device of the adult using the app, children's information (names, photos, etc.) is not transmitted to us and remains under the control of the parent.

7. Data retention and deletion

Because we do not hold your personal data, there is no server-side deletion required for the core app. Deleting the Piplet app from your device will remove all locally stored data.

For share links: you can delete any share link from within the app at any time. Upon deletion, the associated content is removed from our file storage within 24 hours.

For early access email signups: email hello@getpiplet.com and we will remove your address promptly.

8. Data export

You can export all your data from Piplet at any time, for free, in open formats. This is a core feature of the app and will never be paywalled.

9. Your rights

Depending on where you live, you may have rights including:

• The right to access data we hold about you
• The right to correct inaccurate data
• The right to delete data we hold about you
• The right to data portability
• The right to object to certain processing

Because we hold minimal personal data (limited to share link metadata and, where applicable, early access email addresses), most requests can be resolved by email. Contact us at hello@getpiplet.com.

10. Security

Your on-device data is protected by the encrypted app sandbox on iOS and Android. Share link content is stored with access controls and served over HTTPS. We apply reasonable technical measures to protect any data we do hold, but no system is perfectly secure.

11. Third-party services

We use the following third-party services, each with its own privacy policy:

• DigitalOcean Spaces — file storage for share links (privacy policy)
• Anthropic (Claude API) — optional AI caption rewrite (privacy policy)
• Formspree — early access email form (privacy policy)
• Apple Vision / Google ML Kit — on-device photo curation (no data leaves your device)

12. Changes to this policy

We may update this policy from time to time. Material changes will be communicated via an in-app notice or, where we hold your email, by email. The "Last updated" date at the top of this page will always reflect the most recent revision.

Continued use of the app after a change constitutes acceptance of the updated policy.