1. Who we are
Pipfern is a focus companion for iPhone, operated by ClearCare Platform LLC, a New York limited liability company ("we", "us"). This policy covers the Pipfern app and the online services it connects to. Our website has its own notice at pipfern.com/privacy.
Contact: support@pipfern.com or pipfern.com/support.
Pipfern is a productivity app for adults aged 18 and older. It is not a healthcare service.
2. What stays on your phone
Pipfern saves your tasks, next steps, notes, reminders, finished work, rewards, settings and privacy choices on your phone. If you turn on session history, it also saves a record of each work block. The weekly review is put together on your phone from what you saved.
Signing in does not copy your task library to our servers or to another device. Your saved work can be included in your iPhone's own backups, depending on your iPhone settings. Files you export can contain private task information; anyone you share them with can read them.
The current conversation is kept in the app's memory while you use it, not saved as a transcript. A note you choose to save becomes part of your saved work.
3. Camera, voice and on-device features
Camera presence is optional. With your permission, the app looks at camera frames on your phone to estimate whether you are at your desk. Frames are not saved, not sent anywhere and not used to identify you.
Voice input uses your iPhone's on-device speech recognition. It listens only when you start it: while you hold Talk, or for up to a minute when you dictate a note. Recordings are not sent to us. If you then send the recognized words in a cloud request, they are sent as text.
Some suggestions can be made by the language model built into your iPhone, without a cloud request. The app shows where each suggestion came from.
Reminders and Live Activities can show task information on your Lock Screen. You control these in the app and in iPhone Settings.
4. Cloud replies (optional)
Cloud replies are off until you allow them in the app. Signing in or buying Plus does not turn them on. When they are on, your request goes to our server, which passes it to Google's Gemini model to write the answer. This covers chat, Help me start, Break it down and the suggested next step when you finish a block.
A cloud request can contain:
- your task title and your message or request;
- with notes allowed: one confirmed next step, recent notes, the session phase and time, the recent conversation and, when you ask for a different starting step, the suggestions you passed over.
"Don't send my notes" limits a request to the task title and your message. Camera images, recordings, other tasks, your account details and whether you are at your desk are never part of a cloud request.
Our server checks your sign-in or this installation's anonymous credential to apply daily allowances and prevent abuse. Those credentials are not sent to Google.
Google does not use these requests to train or improve its models. Google may keep requests and replies for up to 55 days to detect abuse, and authorized Google staff may review flagged requests. Separately, our server keeps a reply for up to 15 minutes so you can recover it after a connection problem.
Turning cloud replies off stops new requests. It cannot recall a request already sent.
5. Usage statistics (optional)
"Share usage statistics" is off by default and is separate from cloud replies. When it is on, the app sends:
- what happened, such as a block starting or ending, a suggestion used, or a note saved (never the note's words);
- answers you tap to optional questions;
- times, the app build, and block lengths in bands;
- random reference numbers that connect related events;
- if you are signed in with session history on: each block's start and end, minutes present, times away, breaks, check-ins and whether it finished;
- if you are signed in: daily counts of companion lines and cloud replies.
Statistics never include task names, notes, messages, replies, camera images or whether you are at your desk. Without an account, they are linked to this installation's anonymous credential; if you sign in, they can become linked to your account.
Turning the switch off stops sending at once and deletes statistics waiting on your phone. It does not delete statistics already received; see section 9.
6. Records our service needs
When you use online features, we keep the technical records needed to run and protect them: sign-in and installation identifiers, request identifiers and outcomes, allowance counters, timing, and security checks. Our hosting providers process IP addresses and connection details to deliver the service. When you send feedback, we record that it arrived. These records are not usage statistics and the statistics switch does not control them.
Anonymous cloud access may use Apple's App Attest to confirm the app is genuine. The private key stays protected by iOS; we keep the public key and verification records.
7. Accounts and purchases
You can use Pipfern without an account. If you sign in with Apple or Google, we receive an account identifier and may receive your email address (Apple may give us a private relay address). We never see your Apple or Google password. Sign-in tokens are kept in your iPhone's Keychain.
Apple processes App Store payments; we never receive your card details. RevenueCat helps us confirm purchases and restore access. We and RevenueCat process an app user identifier, product, transaction, subscription period and purchase events. A purchase made without signing in is linked to this installation; signing in or restoring can link it to an account.
8. Feedback and support
In-app feedback is saved on your phone first and sent with your account details when delivered. You can attach diagnostics to one message at a time after previewing them: app version and build, iOS version, device type, recent error codes, and for each recent crash or hang its day, app version and numeric error codes. Diagnostics never include tasks, notes, messages, sign-in details or camera data.
Email to support@pipfern.com is handled by our mail provider, Namecheap Private Email. You do not need an account or Plus to contact us.
9. How long we keep information
- Saved work on your phone: until you delete it.
- Error codes kept on your phone for diagnostics: removed after 7 days; at most the 10 latest crash or hang summaries are kept. Both are deleted when you delete local work or your account.
- Cloud reply recovery copy: up to 15 minutes.
- Request accounting records: deleted after 30 days.
- Usage statistics from an installation never linked to an account: deleted 180 days after they were recorded, or sooner with My data › Delete my usage statistics.
- Usage statistics and daily counts linked to an account, server feedback and attached diagnostics: kept until you delete your account, or ask us to delete them.
- Purchase records: kept while needed to confirm purchases, handle refunds and disputes, and meet accounting duties. Some keep an account or installation identifier after account deletion.
- Replay-prevention markers: short fingerprints of past requests and retired keys, kept to stop old requests being reused. They contain no task or conversation text.
- Support email: kept up to 12 months after your issue is closed, unless you ask us to delete it sooner.
Deletion runs in scheduled batches, so removal can take longer than these periods during an outage or backlog. Backups held by our providers expire on their own schedules.
10. Your choices and rights
In the app you can change cloud replies, "Don't send my notes", usage statistics, session history, camera and microphone permissions, and reminders.
- My data lets you export your work, delete local work, and delete statistics sent without an account.
- Delete account and data (in Account) deletes your account and its linked server records, this installation's server records, and the account data and diagnostics on your phone. It also asks RevenueCat to delete your purchase profile and, for Apple sign-in, asks Apple to disconnect Pipfern. If Apple does not confirm, the app tells you how to finish it in iPhone Settings.
Deleting your account or the app does not cancel an App Store subscription. Cancel in iPhone Settings › your name › Subscriptions.
You can also email support@pipfern.com to ask for access to, a copy of, correction of or deletion of information we hold about you. We may ask for proportionate information to confirm the request is yours, but never your password. We respond within 45 days and will explain any reason we cannot fully comply. If we decline, you can reply to appeal and we will review the decision. Depending on where you live, you may have further rights under your state's law.
11. Sharing
We use these service providers only to run Pipfern:
- Supabase: sign-in, server functions, database and the request, feedback, statistics and security records described above.
- Google (Gemini API): the content of cloud requests you allow.
- Google Sign-In: sign-in, when you choose it.
- Apple: App Store purchases, Sign in with Apple, App Attest and device features.
- RevenueCat: purchase confirmation and restoring access.
- Namecheap Private Email: support email.
- Vercel: hosts our website and support pages.
We do not sell your personal information, share it for cross-context behavioral advertising, or use it to build advertising profiles. Pipfern has no ads or third-party tracking. We may disclose information when the law requires it, to protect people's safety or our rights, or to investigate fraud or security problems. If the business is sold or merged, information may transfer with it under this policy.
12. Security and location
We protect information with encrypted connections, access controls, and iPhone Keychain and data protection. No system is perfectly secure. If a breach affects your personal information, we will notify you as the law requires.
Our providers may process information in the United States and other countries where they operate.
13. Age
Pipfern is for adults aged 18 and older. The app asks iOS for your age range where available, or asks you to confirm your age. If you believe someone under 18 has used Pipfern, contact us and we will delete their information.
14. Changes
We will post changes here with a new effective date and tell you in the app about material changes. If a change needs your permission, such as a new kind of data sent to the cloud, we will ask you again rather than rely on this policy.
ClearCare Platform LLC · support@pipfern.com · pipfern.com/support