Privacy Policy
Most of your Pip record stays on your device. When you agree to an AI scan or Ask Pip AI answer, Pip clearly tells you what will be sent and why.
This policy covers the Pip iPhone app, pippeptide.com, and support correspondence. “We”, “us”, and “our” mean Unakin Ltd, company number 14570755, the developer of Pip and the controller for the information described below.
Registered office: Flat 25, Ironworks 58 Dace Road, London, United Kingdom, E3 2NX. Privacy contact: ollie@unakin.ai.
Guided capture creates front, left, back, and right body photos. Pip can also keep the height, weight, age range, body-sex answer, focus goal, activity context, daily pulse, scans, 3D bodies, treatment records, notes, food and workout entries, Skin Story face photos, and Journey entries that you choose to add. Skin Story photos are analysed on your iPhone. Treatment logging is a record of what you enter; Pip does not prescribe or recommend treatment.
With permission, Pip reads your latest body-weight sample from Apple Health, including its date and source, and your workouts from the last 14 days. It does not read steps or body fat. Pip never writes to Apple Health. Motion is used for live capture guidance and is not saved.
Local photos, 3D bodies, and records are stored in Pip's private app storage with iOS file protection and excluded from device backups. Pip does not sync them to iCloud. Removing Pip or using Delete all can make local data permanently unavailable, so export first if you want a copy.
iPhone Build 61 uses AI processing for completed four-photo scans. Before the first upload, the scan screen says that Pip will send your four photos and basic body details to AI services, names OpenAI and Meshy, explains that Meshy's copy is deleted once the 3D body is saved on your iPhone, and labels the results as AI estimates rather than medical measurements. It links to this policy. Nothing is uploaded until you choose “Agree & start scan”.
Pip prepares a separate analysis copy of each photo on your iPhone by removing metadata and background and masking the head. Those four prepared images, plus your entered height, weight, age range, body-sex answer and the source of the weight, travel through Pip's Railway service to OpenAI. OpenAI returns bounded exterior-body estimates and visible-shape observations. Pip does not send your name, treatment log, symptoms, notes, or Journey entries with the body-analysis request.
A second process sends the four full photos through Railway to Meshy to create your textured 3D body. These photos can include your face, head, hair, clothes, and visible surroundings. Meshy's copy is deleted once the 3D body is saved on your iPhone. A server sweep also removes Meshy's copies of failed or withdrawn jobs, and of completed jobs older than 7 days. Pip keeps a necessary anonymous job record to enforce the weekly scan limit and record deletion. Separately, your iPhone fits its own body model on the device for measurements and outlines.
Pip uses anonymous installation and request identifiers to protect these calls and record consent or deletion. The body-analysis service does not keep the submitted photos or result content in Pip's database. OpenAI requests are configured with store: false; OpenAI may still retain limited abuse-monitoring data under its applicable service terms.
Questions about your own Pip record are answered on your device. If you separately agree to AI answers, Pip may send OpenAI, through Railway, your question and only the relevant details needed to answer it. Answers about medicines may use live web search limited to an approved list of trusted sources. Pip does not send photos, scan geometry, treatment logs, or your full Pip database. Ask Pip will not choose a dose, help obtain research peptides, or diagnose, and urgent symptoms receive a fixed safety response.
When Ask Pip is on and Pip speaks, the text of the line Pip is about to say is sent to Google (Gemini) to turn it into speech. Only that text is sent, never photos, scan data or health data. You can turn Pip's voice off.
If you turn on AI meal reading, the text of a meal you type or say is sent through Railway to Anthropic to estimate protein and calories. Your voice recording is never sent. Without it, Pip uses a food list on your device.
The Apple App Store handles payment. RevenueCat verifies the membership entitlement and may receive a random customer identifier, purchase history or store purchase token, platform, app version, locale, currency, and first- or last-seen timestamps. Pip does not send RevenueCat body photos, health data, treatment entries, notes, questions, or Journey data.
AppsFlyer's privacy-focused Strict SDK helps Pip understand an app install, app session, and funnel steps such as whether onboarding was completed, a scan was completed, the paywall was viewed, or membership was bought. It may process an AppsFlyer installation identifier and basic app, device, and attribution context. Pip does not enable cross-app tracking or send AppsFlyer photos, body or health data, treatments, symptoms, notes, questions, or Journey entries.
If you email us, we receive your email address, message, and the device or app details you include. Please do not send body photos, health records, medication documents, or a Body Story export to ordinary support email.
Members can create a 3D before-and-after link that opens on pippeptide.com/story. The link is encrypted on your iPhone, so Pip's server stores it without being able to see inside. The face is hidden and measurements are off by default. Links expire after 1, 7, or 30 days, and you can revoke one or all of them in Settings → Data & privacy → Shared links.
Cloudflare delivers and protects this website. It may process IP address, request headers, device and browser details, timestamps, requested pages, and security events. It may set the strictly necessary __cf_bm bot-management cookie, which expires after 30 minutes of inactivity. We do not use advertising pixels, cross-site tracking, or product-analytics cookies on pippeptide.com.
Pip does not make automated decisions that have legal or similarly significant effects on you.
Apple, RevenueCat, AppsFlyer, Railway, OpenAI, Meshy, Anthropic, and Cloudflare provide the services described above. They may process limited service information outside the UK or European Economic Area using their own applicable safeguards and privacy terms. Pip does not use these providers for advertising or cross-app tracking.
Local records remain until you delete them or remove Pip. Meshy's copy of your photos and 3D body is deleted once the 3D body is saved on your iPhone; copies from failed or withdrawn jobs, and completed jobs older than 7 days, are removed by a server sweep. Share links expire on the date you choose or when you revoke them. OpenAI applies its service and abuse-monitoring retention terms despite store: false. AppsFlyer, RevenueCat, Apple, Anthropic, Cloudflare, and Railway retain necessary service records under their configured, contractual, or legal requirements. We normally keep support messages only as needed to resolve the request and for up to 12 months afterwards, unless security, law, or a dispute reasonably requires longer.
Remote scan deletion may briefly show as pending while Pip verifies that service copies are gone. Deleting Pip data cannot delete an original Apple Health sample, an App Store transaction, a record a provider must retain by law, or a copy you previously exported.
Depending on where you live, you may have rights to access, correct, erase, restrict, object to, or receive a copy of personal data held by us, and to withdraw consent. Contact ollie@unakin.ai. We may need proportionate information to verify the request.
You can complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint, or to the relevant authority where you live or work.
Pip is a personal progress-record tool, not a medical device. Photo and AI outputs are estimates, not clinical measurements. Any displayed body-fat range, waist estimate, fat-free mass range, 3D body, or visible comparison can be wrong for an individual. Pip has not completed an independent DXA or tape-measure validation study. Do not use Pip to diagnose, prescribe, select a dose, or make another health or treatment decision. See the Methodology & Accuracy statement.
Pip is not designed for children. We will update this policy and provide any additional notice required before materially changing how sensitive information is used.
Unakin Ltd · Company number 14570755
Flat 25, Ironworks 58 Dace Road, London, United Kingdom, E3 2NX
For privacy questions or service-data requests, email ollie@unakin.ai.
