Pips — Privacy Policy

Last updated: 25 September 2026.

Pips is a fitness app for iPhone and Apple Watch made by the Pips team ("we"). This policy explains what Pips does with your information. The short version: your data stays on your devices by default, Pips has no passwords, no ads and no tracking. The only account is an optional Friends profile that lives in your own iCloud.

1. Data that stays on your device

Everything you log in Pips — micro-challenges and reps, workouts, sets and templates, meals and food entries, macro targets, body weight you enter for the target calculator, daily check-ins and your chats with Pip — is stored on your iPhone (and, for your challenges, on your paired Apple Watch). We have no server that receives it and we cannot see it. Pip, the in-app coach, runs on your device (Apple Intelligence on-device model where available, otherwise built-in rules); your chats are not sent to us or to any third party.

Deleting the app deletes this data.

2. Friends (optional, uses your iCloud account)

Friends is optional. Pips works fully without it, and nothing is shared until you create a Pips profile and invite someone.

What Friends stores. When you create a profile, Pips stores the following in your own private iCloud database (Apple's CloudKit), in a space only you own:

• a display name you choose (up to 24 characters) and an avatar colour;
• your daily challenge progress for your main challenge: the exercise name, the day's target, reps done, which time slots were done, missed or still to come, your streak, and when it was updated;
• nudges you send: one of a few preset messages (for example "You've got this"), who it is for, and when. There is no free-text messaging.

Friends never includes Apple Health data, food or meal logs, body weight, check-ins, workouts or your chats with Pip.

Who can see it. Only people you invite. Inviting uses Apple's iCloud sharing: you choose who to send the invitation to, and they get read-only access to your profile and progress. There is no public profile, no search and no discovery — nobody can find you in Pips unless you invite them. If a friend shares their progress with you, you can see theirs in the same way.

Identifiers. To tell friends apart, CloudKit gives Pips an anonymous iCloud user record identifier for each person. It is not your Apple Account email or phone number, and Pips never shows it.

Where it lives. Your Friends data is stored by Apple in iCloud under your Apple Account, subject to Apple's privacy policy (https://www.apple.com/legal/privacy/). We do not operate a server for Friends and cannot read your private iCloud data.

Notifications. Pips can tell you when a friend misses a slot or sends you a nudge. These are local notifications generated on your iPhone after iCloud tells the app that a friend's progress changed.

Blocking, removing and reporting. You can remove a friend or block them at any time; both stop sharing your progress with them and stop showing theirs. You can report a user from their row, which opens an email to us with their display name and Pips ID. You can also block them straight away.

Deleting your Friends account. Settings → Account → Delete account deletes your profile, all of your progress and nudge records and your share from iCloud, stops sharing with every friend, leaves every friend's share you had joined, and clears Friends data from your iPhone. This cannot be undone. The rest of Pips (your challenges, workouts and meals on the device) is not affected. Signing out of iCloud also stops Friends on that device.

3. Purchases (Pips Pro)

Pips Pro is sold through the App Store. Payment is handled entirely by Apple; we never see your payment details. Pips uses RevenueCat (RevenueCat, Inc.) to check whether you have an active Pips Pro subscription. RevenueCat receives your App Store purchase history for Pips and an anonymous app user ID generated by the app — not your name, email or Apple Account. It is used only to unlock Pro features. See RevenueCat's privacy policy: https://www.revenuecat.com/privacy.

4. Apple Health

With your permission, Pips writes your workouts, finished challenge days and the meals you log to Apple Health. Pips never reads your Health data. Health data is never shared with friends, used for advertising, or sent to us or any third party.

5. Food search and barcodes

Food search runs on your device against a food list built into the app. When you look up a barcode, Pips sends the barcode number to Open Food Facts to find the product. No identifier of you is sent with it. The camera is used only to read barcodes and no images are stored or sent.

6. No ads, no tracking

Pips contains no advertising and no analytics or tracking SDKs. We do not track you across apps or websites, do not sell or share data for advertising, and do not use data brokers.

7. Children

Pips is not directed at children under 13, and we do not knowingly collect personal information from them.

8. Your rights

Because your data lives on your devices and in your own iCloud, you control it directly: edit or delete entries in the app, use Delete account for Friends, or delete the app. If you have a question or a request (including under GDPR or CCPA), contact us at the address below.

9. Changes

If this policy changes, we will update the date above and, for material changes, tell you in the app.

10. Contact

The Pips team — pipsapp@protonmail.com