Pip Pip privacy policy
Last updated 25 October 2026.
Who we are
Pip Pip is made and run by Alexander Harvey-Falkboo in Sweden. He decides how your data is used, so he is the data controller under the GDPR.
- Contact for anything about your data: [email protected]
- Once Pip Pip is a registered business, this section will name the business and its registration number.
- Supervisory authority in Sweden: Integritetsskyddsmyndigheten (IMY), imy.se. In Denmark: Datatilsynet.
The short version
- No GPS tracking. Pip Pip never uses your phone's position.
- Your data is encrypted and stored in the EU.
- No ads, and we never sell your data.
- Arrivals and questions are deleted after 7 days.
- Families only see each other's details after both have said yes.
- You can download your data or delete your account in the app at any time.
What Pip Pip stores and why
Pip Pip stores only what it needs to tell you your child has arrived. You, the parent, add everything about your children; children don't use the app.
| What | Why | Legal basis (GDPR) |
|---|---|---|
| Your name, phone number and language | To sign you in with an SMS code and show other families who you are | Contract (Art. 6(1)(b)) |
| Your household: name, the parents in it, an optional address | So both parents get the same notifications, and so you can share your address with families you choose | Contract (Art. 6(1)(b)) |
| Your children's first names | So the families your child visits know who is coming | Contract (Art. 6(1)(b)) |
| A note about a child, if you write one | So the host family knows what matters. It may contain health details, so it's only saved after you tick the consent box. We record when you gave consent | Your explicit consent (Art. 9(2)(a) and 6(1)(a)) |
| Connections between households and what each family may see | So only families you've both accepted can reach each other | Contract (Art. 6(1)(b)) |
| Arrivals and questions: which child, which family, when, and the answer | The core of the app: "heading over", "is she with you?", "yes, here" | Contract (Art. 6(1)(b)) |
| A notification token for your phone | To deliver notifications to your device | Contract (Art. 6(1)(b)) |
| Weekly totals, such as how many households were active and how many questions were answered | To see whether Pip Pip works. Totals only, with no names, children or households in them | Not personal data once counted; counting is our legitimate interest (Art. 6(1)(f)) |
| Sign-in attempts and limits | To stop SMS fraud and misuse | Legitimate interest (Art. 6(1)(f)) |
| Your sign-in record: a random user id and when you signed in (no name or phone number) | To keep you signed in on your phone | Contract (Art. 6(1)(b)) |
You can withdraw consent for a note at any time by deleting the note.
What Pip Pip never collects
- Your phone's position, GPS, Wi-Fi or Bluetooth location
- Your contacts, photos or other apps
- Advertising IDs or tracking cookies
- Anything from your children directly
The Pip Pip app has no ads. We never sell your data or use it for advertising.
Who else handles your data
A few companies run parts of Pip Pip for us. They act only on our instructions, under data processing agreements.
| Company | What they do | Where |
|---|---|---|
| Google (Firebase) | Database and server functions | EU region |
| Google (Firebase Authentication) | Keeps your sign-in record: a random user id and sign-in times, no name or phone number | May be stored outside the EU |
| Google (Firebase Cloud Messaging) | Delivers notifications to Android phones | May pass through servers outside the EU |
| Apple (Push Notification service) | Delivers notifications to iPhones | May pass through servers outside the EU |
| 46elks | Sends the SMS sign-in codes | Sweden |
| Cloudflare | Hosts the website, counts website visits (no cookies) and forwards email to [email protected] | Global network |
| Google (Gmail) | The inbox where your emails to us arrive | May be stored outside the EU |
Notifications contain as little as possible: a child's first name, the family's name and the question. When data leaves the EU, it's covered by the EU-US Data Privacy Framework or the EU's standard contractual clauses.
We share nothing with anyone else, unless the law requires it.
How long we keep it
| Data | Kept for |
|---|---|
| Arrivals and questions | 7 days, then deleted automatically |
| Your account, household, children and connections | Until you delete them or your account |
| A connection request nobody answers | 7 days, then deleted automatically |
| Your sign-in record | Until you delete your account |
| A child's note and the consent record | Until you delete the note or the child |
| Weekly totals | Indefinitely (they contain no personal data) |
| Emails you send us | Until the matter is dealt with, then deleted |
| Website visit statistics (no cookies, no names) | Kept by Cloudflare: in full for 7 days, then as a smaller sample. We can see the last 6 months |
| Backups | None during the pilot. If we add backups later, they stay in the EU and this policy will say how long they're kept |
When you delete your account, we delete your data straight away. There are no backup copies during the pilot. If you were the last parent in your household, the household, its children and its connections go too. How to delete your account
Children
Pip Pip is for adults. Children have no accounts and never use the app. Parents add their own children's names and notes, and choose which connected families can see them.
What other families see
Before you've both accepted a connection, the other family sees only your household name, your parents' first names and one phone number: the parent who shared the code, or who asked. That way they can check who is asking. Everything else is shared only after both families say yes. A request nobody answers is deleted after 7 days. A parent you invite into your own household sees, before joining, your household name, who invited them with that parent's number, and your children's names. For each family you choose whether they see your address and phone numbers. For each child you choose whether all connected families see them or only some. When you review a new connection, you also see which families you both already know.
Your rights
You can ask us to:
- show you the data we hold about you, or send you a copy (you can also download it yourself in the app: Privacy and your data, then Download my data)
- correct something that's wrong
- delete your data (you can also delete your account in the app)
- stop or limit how we use it
- withdraw consent for a note, by deleting it
Email [email protected] and we'll answer within one month. If you're unhappy with how we handle your data, you can complain to IMY in Sweden or the data protection authority where you live.
The website
pippipapp.com has no forms and no cookies. We count visits with Cloudflare Web Analytics, which uses no cookies and doesn't follow you to other sites. It shows us totals only: how many visits, which pages, which site sent you there, which country, what kind of device, and how fast the pages load. We do this because it's in our legitimate interest to see whether the site works (Art. 6(1)(f)). Cloudflare, which hosts it, briefly processes your IP address to deliver the page and protect against attacks, which is also our legitimate interest.
Changes to this policy
If we change how we use your data, we'll tell you in the app before the change takes effect. The date at the top shows the latest version.