PiperBot

PiperBot privacy policy (draft — review before publishing)

Last updated: 2026-09-24

PiperBot ("Piper", "we") is a personal assistant app. This policy explains what the app sends to our servers and why. Have it reviewed before it goes on the App Store listing; it is written to match what the code actually does.

What we collect

  • Your calendar. With your permission, the app reads the events on your device's calendars (titles, dates, notes, locations, attendee names, calendar names) for the next 90 days and sends them to our servers. This is the whole point of the app: Piper reads what's coming and prepares you for it.
  • The people you tell Piper about and the preferences and facts you share in chat (for example, "Sam is my brother, he loves cycling", or a gift budget).
  • Your chat messages with Piper, and the cards it produces (gift ideas, plans, draft texts).
  • Your profile: a display name, a home town/city (so plans are local), your time zone, and the hour you want your daily briefing.
  • Your family profile, if you turn on the weekend plan: your kids' first names and birth months (for their ages), nap times, how far you're willing to drive, a budget, and any event calendars you ask Piper to check first. Feedback you give on a weekend plan (a 👍, a 👎, or a note in chat) is kept with that weekend's plan so later plans can learn from it.
  • A push notification token if you allow notifications.
  • How the app is working for you: simple event records tied to your account, such as that a briefing was sent, a notification was opened, or a card was tapped. We use them to keep the daily briefing reliable and to improve Piper. There are no third-party analytics or advertising SDKs in the app.
  • Your sign-in. You sign in with Apple, Google, Facebook, or a code sent to your email. We keep the email address that sign-in gives us (with Sign in with Apple this can be a private relay address), which provider you used, and an account id from our sign-in service (Supabase). We never see or store a password.

We do not collect precise location, contacts, photos, or advertising identifiers, and we do not use any of this data for tracking or advertising.

How we use it

To prepare you for your events: understand what each event means, decide what to prepare and when, and write the morning briefing and chat replies. To do that, your name, home town and time zone and the relevant calendar events, people, memories and chat history are sent to our AI provider (Anthropic) to generate responses, including web searches for real products and venues. Anthropic processes this data under its commercial terms and does not train on it. The app asks for your agreement to this during setup, before anything is sent, and we keep the time you agreed with your account.

If you turn on the weekend plan, your family profile and past plans are sent to Anthropic the same way, to plan each weekend. To estimate drive times, your home town and the addresses of the places in a plan are sent to OpenStreetMap's Nominatim geocoding service; no name or account information goes with them.

Where it lives and for how long

On our servers (hosted on Render and a managed Postgres database), with sign-in handled by Supabase, for as long as you have an account. Events that disappear from your calendar are marked deleted on the next sync.

Deleting your data

Settings → Delete account removes your account and everything associated with it (calendar mirror, people, memories, messages, weekend plans and feedback, analytics) immediately, deletes your sign-in from our sign-in service, and, if you used Sign in with Apple, revokes the app's access to your Apple ID. Signing out or uninstalling the app alone does not delete the server copy.

Security

The app talks to our servers over HTTPS only. Each signed-in device holds its own token in the iOS Keychain; our servers only accept requests carrying a token for your account, and signing out revokes that device's token.

Children

The app is not directed at children under 13. The weekend plan keeps only what a parent enters about their own kids (first name, birth month, whether they nap). You can change or remove it in Settings, and deleting your account removes it.

Contact

Email support@piperbot.cloud.

Changes

We will update the date above and, for material changes, tell you in the app.