What Pip collects
Your child’s name (if you enter one during setup), their age, a short list of their interests, and a summary of recent conversations. These are saved on your device so Pip can remember who it’s talking to between sessions.
That’s it. Pip does not collect your name, your email, your phone number, your location, your contacts, your photos, your IP address, or anything else.
Where Pip stores it
On your device, in Pip’s private app container. Specifically, on iPhone and iPad that’s the app’s Documents folder; on macOS it’s ~/Library/Application Support/Pip/. We cannot read this data. Apple cannot read this data. No other app can read this data.
When you delete Pip, the data is deleted with it. There is no backup we can restore and no copy on a server somewhere.
Where the AI runs
Pip uses Apple’s Foundation Models framework, which runs entirely on your device using Apple Intelligence. When your child says something, the audio is processed on-device by Apple’s speech recognition, the text is handed to Apple’s on-device language model, and the response is spoken back by Apple’s on-device text-to-speech.
No part of the conversation is sent to Fuzzy Rainbow, to Apple, to OpenAI, or to anyone else. You can verify this by enabling airplane mode — Pip still works.
What Pip does not do
- Pip has no user accounts. There is nothing to sign up for.
- Pip has no cloud sync. Your child’s data is only on the device you installed Pip on.
- Pip has no analytics. Not Google Analytics, not Mixpanel, not Amplitude, not Firebase, not App Store Connect analytics. We do not know who opens Pip or when.
- Pip has no advertising. There are no ads, no ad networks, no sponsored content, no tracking pixels.
- Pip has no third-party SDKs that send any data anywhere.
- Pip has no in-app purchases, no subscriptions, no upgrades we can sell you after the initial purchase. You pay $14.99 once and it is yours forever.
- Pip does not access your microphone outside of the moments when your child is actively talking to it.
- Pip does not access your camera, contacts, photos, calendar, location, or health data. Ever.
Children’s privacy
Pip is designed for children ages 4–10 and we built it to comply with the U.S. Children’s Online Privacy Protection Act (COPPA), the EU General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA), despite the fact that those laws are mostly about companies that actually collect data from children. We do not.
Because we collect no personal information from children (or from anyone) and store nothing off-device, there is no data to request access to, no data to correct, no data to delete that is not already deleted when you remove the app. If you are a parent or guardian and you have a question about this, please email [email protected] and we will answer honestly and promptly.
Network access
Pip makes no network requests during normal use. The only time Pip touches the network is when the App Store itself checks for app updates, which is handled by iOS and macOS, not by us.
Third parties
There are none. Pip has no dependencies on third-party APIs, cloud services, analytics platforms, advertising networks, or telemetry services. The only parties in the picture are you, your child, your Apple device, and Fuzzy Rainbow.
How we keep our promises
We built Pip this way on purpose. The “lives on your device” promise is not just marketing — it is how the app is architected. There is no hidden server waiting to be turned on. There is no account system we can enable later. There is no analytics toggle buried in settings. If we wanted to change any of this in the future, we would have to ship a completely different app, and we would tell you clearly in advance.
If this policy changes
If we ever need to change this policy, we will update the date at the top of this page and explain what changed and why. If the change materially affects what Pip does with your child’s data, we will also notify you inside the app before the change takes effect.
Contact
For any privacy-related question or concern, email Audrey Roy Greenfeld at [email protected]. Real person, real inbox. No ticketing system, no auto-reply, no “for faster service please visit our help center.”