PiperBot

PiperBot privacy policy

Last updated: 2026-10-29

PiperBot ("Piper", "we") is a personal assistant app. This policy explains what the app sends to our servers and why.

What we collect

  • Your calendar. With your permission, the app reads the events on the calendars you choose to share (all of them unless you pick, during setup or in Settings → Calendars Piper reads): titles, dates, notes, locations, attendee names, calendar names, and whether the organizer canceled an invite, for the next 90 days, and sends them to our servers. Calendars you leave out never leave your phone. This is the whole point of the app: Piper reads what's coming and prepares you for it.
  • The people you tell Piper about and the preferences and facts you share in chat (for example, "Sam is my brother, he loves cycling", or a gift budget).
  • Your chat messages with Piper, and the cards it produces (gift ideas, plans, draft texts you ask for, notices that an event was canceled).
  • Your profile: a display name, a home town/city (so plans are local), your time zone, the language your phone shows the app in (English, Portuguese or Spanish, so Piper writes in it), and the hour you want your daily briefing.
  • Your family profile, if you turn on the weekend plan: your kids' first names and birth months (for their ages), nap times, how far you're willing to drive, a budget, and any event calendars you ask Piper to check first. Feedback you give on a weekend plan (a 👍, a 👎, or a note in chat) is kept with that weekend's plan so later plans can learn from it.
  • A push notification token if you allow notifications.
  • How the app is working for you: simple event records tied to your account, such as that a briefing was sent, a notification was opened, or a card was tapped. We use them to keep the daily briefing reliable and to improve Piper. There are no third-party analytics or advertising SDKs in the app.
  • Your sign-in. You sign in with Apple, Google, Facebook, or a code sent to your email. We keep the email address that sign-in gives us (with Sign in with Apple this can be a private relay address), which provider you used, and an account id from our sign-in service (Supabase). We never see or store a password.
  • Your subscription. PiperBot is a paid subscription with a free trial, bought through the App Store. Apple handles the payment; we never see your card or billing details. Apple tells our servers whether your subscription is active, and we keep that status, the product, when it renews or ends, and Apple's id for the subscription. That is how Piper knows whether to prepare your morning note.
  • What the AI costs for your account: for each piece of work Piper does, the task and how much AI processing it used, so we can keep the service affordable. There are no message contents in these records.

We do not collect precise location, contacts, photos, or advertising identifiers, and we do not use any of this data for tracking or advertising.

How we use it

To prepare you for your events: understand what each event means, decide what to prepare and when, and write the morning briefing and chat replies. Piper does this with Claude, an AI made by Anthropic (our AI provider), including web searches for real products and venues. The app asks for your agreement to this during setup, before anything is sent, and we keep the time you agreed with your account.

To estimate drive times for a weekend plan, your home town and the addresses of the places in the plan are sent to OpenStreetMap's Nominatim geocoding service; no name or account information goes with them.

For the plan's weather forecast, your home town's approximate location (rounded to about a kilometer) is sent to the US National Weather Service or, outside the US, to MET Norway (the Norwegian Meteorological Institute), with nothing else.

What Claude sees, and what it doesn't

Your history is kept on our servers, not by Anthropic. Each time Piper writes something, it sends Claude only what that piece of work needs and gets the answer back; Claude doesn't remember any of it the next time.

  • Reading a new or changed event: its title, date and time, location, the first 500 characters of its notes, the calendar's name and the attendees' names (never their email addresses), along with your name, home town and the people you've told Piper about. An event that hasn't changed isn't sent again.
  • Your morning note and chat replies: your name, home town, time zone, language and preferences; your calendar for the next 30 days; the people and facts you've told Piper; your last 30 chat messages; and, if you set them up, your family profile and your latest weekend plan.
  • The morning of a public event (a show, a game, a class, a flight): that event's title, time, location and notes, to check the host's website for a cancellation.
  • The weekend plan, if you turn it on: your family profile, that weekend's calendar, and your past plans with the feedback you gave on them.

Never sent to Anthropic: your email address and sign-in details, your push notification token, your subscription status, the usage records described above, events more than 60 days ahead, events you deleted, and anything on a calendar you don't share (those never reach our servers either).

Anthropic processes this data under its commercial terms. It does not train its models on it, and it deletes it automatically within 30 days, unless it must keep it longer to enforce its usage policy or to comply with the law. Nothing is sold or used for advertising.

Where it lives and for how long

On our servers (hosted on Render and a managed Postgres database), with sign-in handled by Supabase, for as long as you have an account. Events that disappear from your calendar, or from a calendar you stop sharing, are marked deleted on the next sync.

Deleting your data

Settings → Delete account removes your account and everything associated with it (calendar mirror, people, memories, messages, weekend plans and feedback, analytics, usage records, subscription status) immediately, deletes your sign-in from our sign-in service, and, if you used Sign in with Apple, revokes the app's access to your Apple ID. Signing out or uninstalling the app alone does not delete the server copy. Deleting your account doesn't cancel an App Store subscription: cancel it in your iPhone's Settings → Apple Account → Subscriptions.

Security

The app talks to our servers over HTTPS only. Each signed-in device holds its own token in the iOS Keychain; our servers only accept requests carrying a token for your account, and signing out revokes that device's token.

Children

The app is not directed at children under 13. The weekend plan keeps only what a parent enters about their own kids (first name, birth month, whether they nap). You can change or remove it in Settings, and deleting your account removes it.

Contact

Email support@piperbot.cloud.

Changes

We will update the date above and, for material changes, tell you in the app.