The short version
- Your thoughts are yours. Pipdrop owns nothing you create.
- We never sell your data, never show you ads, and never use your content to train AI.
- Your content is visible only to the people in the circles you choose to share it with. Private pips stay private.
- You can delete everything, including your whole account, anytime from inside the app.
What we collect
Account information. Your name, email address, and a securely hashed password.
Your content. Text notes, voice recordings and their transcripts, photos, videos, tags, reactions, comments, and drafts. This is the entire point of the app. It is stored solely so you can access it and share what you choose with the circles you join.
Technical basics. A device push-notification token (so we can tell you when something happens in your circles), and minimal error logs so we can fix crashes.
What we do not collect: your location, your contacts, your browsing activity, advertising identifiers, or analytics profiles. There are no ad SDKs and no third-party trackers in Pipdrop.
How your content is used
To run Pipdrop for you, and for nothing else: storing your pips, syncing them between your devices, sharing the pips you post with the people in that circle, sending the notifications you've turned on, and powering your own search.
We will never:
- sell or rent your data to anyone;
- use your content for advertising or marketing;
- use your content to train artificial intelligence models;
- read your content, except in the rare case you explicitly ask support for help with a specific item.
Voice transcription
Voice notes are transcribed on your device, using Apple's or Google's built-in speech recognition. Your audio is not sent to Pipdrop's servers to be transcribed.
Who sees your content
The people in your circles see only the pips you post to that circle, plus the reactions and comments you leave. Pips you mark "just me" are never visible to anyone else. If you block someone, their pips and comments are hidden from you.
Service providers that host Pipdrop's infrastructure: Supabase (database and file storage), Expo and Firebase Cloud Messaging (push-notification delivery), and Apple and Google (app distribution and on-device speech). These providers store or transmit data on our behalf and are not permitted to use it for their own purposes.
We do not share your data with anyone else, except if legally compelled by a valid court order, in which case we will notify you unless legally barred from doing so.
Storage and security
Your content is encrypted in transit (TLS) and encrypted at rest on our storage provider. Media files (voice, photos, video) are stored in a private bucket and served only to you and the members of the circles you share them with. Passwords are hashed, never stored in plain text. Pipdrop does not currently offer end-to-end encryption; if that changes, we will say so here.
Deletion
- Deleting a pip removes it for everyone it was shared with.
- You can delete your account from inside the app (Profile, then Delete account). This permanently removes your account and everything you created, and it purges from our systems within 30 days.
Your rights
Depending on where you live (including under GDPR and CCPA), you have the right to access, correct, and delete your personal data, and the right not to be discriminated against for exercising those rights. Email us and we will honor these requests regardless of where you live: hello@pipdrop.app
Children
Pipdrop is not intended for children under 13 (or under 16 where local law requires). We do not knowingly collect data from children.
Changes
If this policy changes in any meaningful way, we will notify you in the app before the change takes effect. We will never weaken the "never" promises above without your explicit consent.
Contact
Pipdrop · hello@pipdrop.app