Privacy

The Short Version

• Your data stays on your device. Chat history, tasks, notes, documents, memories — all stored locally on your phone.
• Nothing on our servers outside of active sessions. We don't keep your conversations.
• AI models don't train on your data. We use API endpoints that don't use your input for training.
• You can see everything PiPar knows about you, edit it, or delete it all with one button.

What We Collect

Information You Provide

• Email address: For account creation, authentication, and subscription management
• Google account info: When you grant permission, we access Google Calendar data for sync features
• Content you create: Tasks, notes, documents, images, chat messages, and voice recordings

Automatically Collected

• Usage logs: Anonymized data including timestamps, AI service types used, and response times
• Subscription info: Subscription type, expiration dates, credit balance

We do not collect your name, physical address, phone number, or other personal identifiers beyond your email.

How We Store Your Data

Local Storage (On Your Device)

All your personal content is stored locally:

• Chat history
• Notes and documents
• Tasks
• Images
• Synchronized Google Calendar data
• All user-created materials

This means your content remains on your device and is under your control.

Temporary Backend Storage

The currently active chat conversation is temporarily stored on our server to enable real-time AI interactions. This is automatically deleted when you close the chat or when the session times out.

Persistent Backend Storage

We maintain minimal backend data: your email address, subscription type, expiration date, and credit balance. That's it.

Third-Party AI Services

PiPar integrates with these AI providers:

• Anthropic (Claude)
• OpenAI (GPT)
• Google (Gemini)
• Mistral AI
• Deepseek

Important: We use API endpoints that do not train on your data. When you interact with AI features, your prompts and content are sent to these services for processing, but they are not used to improve their models.

GDPR Compliance

NEX Oy is based in Finland and operates under GDPR. This applies to all data processed through our Service, including data sent to third-party AI providers. Because you access these services through PiPar, GDPR protections apply regardless of where the provider's servers are located.

Google Calendar Integration

When you grant permission, PiPar synchronizes your calendar data:

• Calendar events (titles, descriptions, dates, times, locations)
• Calendar metadata (names, colors, time zones)

This data is stored locally on your device. It may be included in chat context when you ask calendar-related questions. Your calendar data is not permanently stored on our backend.

You can revoke access anytime through your Google Account settings.

Voice Recordings

Voice recordings are converted to text and processed for understanding your intent. The audio itself is not permanently stored — only the text transcription, which stays on your device.

Your voice data is never sold, shared with advertisers, or used for purposes other than providing PiPar's services.

Data Retention

• Local data: Remains on your device until you delete it
• Active chat data: Automatically deleted when session ends or times out
• Account data: Retained while account is active, deleted 30 days after account deletion
• Usage logs: Retained for 90 days, then automatically deleted

Your Rights

You have the right to:

• Access: Request a copy of your data stored on our backend
• Rectification: Update your email or subscription information
• Erasure: Request deletion of your account and associated backend data
• Portability: Export your locally stored content anytime
• Restriction: Request limitation of processing under certain circumstances
• Object: Object to processing based on legitimate interests
• Withdraw consent: Stop using the service anytime

To exercise any of these rights, contact us at pipar@nexii.fi. We'll respond within one month.

Children's Privacy

PiPar is not intended for children under 13 (or the applicable age in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately.

Data Security

• Local data is protected by your device's security features
• Backend data is stored on secure Google Cloud infrastructure
• Temporary chat data is encrypted in transit and automatically purged
• User identifiers in logs are anonymized through cryptographic hashing
• All communications use encryption