Privacy Policy

The Short Version

Who We Are

PiPar is operated by NEX Oy, a company registered in Finland. We're committed to protecting your privacy and being transparent about how we handle your data.

What We Collect

Information You Provide

• Email address: For account creation, authentication, and subscription management
• Google Calendar data: When you grant permission, for calendar sync features
• Forwarded emails: Only emails you explicitly forward to your PiPar address. See the "Email Forwarding" section below.

Automatically Collected

• Usage logs: Anonymized data including timestamps, AI service types used, and response times
• Subscription info: Subscription type, expiration dates, credit balance
• Location data (when enabled): Used in real time for location-aware AI requests and user-defined location alerts. See the "Location Data" section below for details. Not stored on our servers.

We do not collect your name, physical address, phone number, or other personal identifiers beyond your email. PiPar does not read your phone's contact list, photo gallery, or your Gmail inbox.

What Stays on Your Device

By default, all your personal content is stored locally on your phone:

• Chat history and conversations
• Notes and documents
• Tasks and calendar events
• Images and voice recordings
• Mails forwarded to app and sent mails
• Persona memories
• All user-created content

This data never leaves your device except when you use AI features (sent to AI providers for processing), when you choose to back up to your own Google Drive, or when you enable optional cloud sync (see the "Cloud Sync" section below).

Backup

You can back up your data to your own Google Drive. If enabled, PiPar creates a folder called "PiParAppData" with subfolders for each device you use. Backups are stored in your Google Drive, not on our servers. You control when to back up and restore.

Cloud Sync (Optional)

PiPar offers an optional cloud sync feature that lets you access your content across multiple devices, including the PiPar web client. Cloud sync is disabled by default and must be explicitly enabled by you.

Purpose

Cloud sync exists for one reason: to make your PiPar content available on devices other than the one where it was created — primarily the web client at piparapp.com. Without cloud sync, your content stays only on the device where it was created.

What Gets Synced

When you enable cloud sync and push your data, the following content is uploaded to our servers:

• Chat history and conversations
• Notes and documents
• Tasks and calendar events
• Mails forwarded to app and sent mails
• Persona memories
• Voice recordings
• Images attached to your content

Where It's Stored

Synced data is stored on Google Cloud Platform infrastructure within the European Union, operated by NEX Oy. Data is encrypted in transit (TLS) and at rest using Google Cloud's standard server-side encryption.

Your Control

You are in full control of cloud sync at all times:

• Enable / disable: Turn cloud sync on or off anytime from App Settings → Cloud Sync
• Push: Push your local data to the cloud when you want to make it available on other devices
• Delete all cloud data: Wipe all your synced content from our servers at any time. Local data on your devices is not affected by this action.
• Account deletion: Deleting your account also permanently deletes all cloud-synced data

Retention

Cloud-synced data is retained until you delete it or delete your account. We do not automatically expire or purge synced content.

Cloud Sync vs. Google Drive Backup

Cloud sync is separate from the optional Google Drive backup feature described above. Google Drive backup stores data in your own Google Drive account; cloud sync stores data on PiPar's servers to enable cross-device access via the web client. You can use either, both, or neither.

Email Forwarding (Optional)

PiPar offers an optional feature that lets you forward emails to a dedicated PiPar address so you can interact with email content using the app or through your AI personas (for example, asking a persona to summarize, draft a reply, or extract action items). PiPar does not read your Gmail or any other email account directly — only emails you explicitly forward are processed.

How It Works

Email forwarding is handled through Mailgun, an email infrastructure provider. When you forward an email to your PiPar address:

• The email is received by Mailgun and relayed to PiPar's backend
• PiPar parses the email content (subject, body, sender, attachments) and makes it available to you and your AI personas
• The parsed content is stored on your device, or in cloud sync if enabled, like any other PiPar content

Sending Emails

PiPar can also send emails on your behalf — for example, replies to forwarded messages drafted with help from an AI persona. Outbound emails are sent through Mailgun from your PiPar address. The recipient, subject, and content are determined by you; PiPar does not send emails without your explicit action and you must accept message before it is sent.

Third-Party Data

Forwarded emails may contain personal data of people other than yourself — typically the original sender, other recipients, and anyone mentioned in the message. By forwarding an email to PiPar, you confirm that you have the right to do so under applicable law. PiPar processes this content only to provide the requested AI functionality and does not retain it on our servers beyond the active session, unless you have enabled cloud sync.

Mailgun as a Sub-Processor

Mailgun (operated by Sinch) acts as a data processor on our behalf for email reception. Email infrastructure is hosted in the European Union. Mailgun's privacy practices are governed by their own privacy policy.

Your Control

• Email forwarding only happens when you choose to forward an email to your PiPar address
• You can stop forwarding at any time — simply stop sending emails to your PiPar address
• Forwarded email content can be deleted like any other PiPar content

What We Store on Our Servers

Temporary (during active sessions)

The currently active chat conversation, including any forwarded email content being processed, is temporarily stored to enable real-time AI interactions. This is automatically deleted when you close the chat or when the session times out.

Permanent

Minimal account data: email address, subscription type, expiration date, and credit balance.

Optional (only if you enable cloud sync)

If you enable cloud sync, the content listed in the "Cloud Sync" section above is also stored on our servers until you delete it.

Third-Party AI Services

PiPar uses these AI providers:

• Anthropic (Claude)
• OpenAI (GPT)
• Google (Gemini)
• Mistral AI
• Deepseek

When you use AI features, your prompts and content are sent to these services for processing. We use API endpoints that do not train on your data.

We select models based on what best serves PiPar's functionality. We may add, change, or discontinue specific models at any time.

GDPR Compliance

NEX Oy is based in Finland and operates under GDPR. This applies to all data processed through our Service, including data sent to third-party AI providers. Because you access these services through PiPar, GDPR protections apply regardless of where the provider's servers are located.

Google Calendar Integration

When you grant permission, PiPar synchronizes your calendar data to your device. This data:

• Is stored locally on your device
• May be included in chat context for calendar-related questions
• Is NOT permanently stored on our servers

You can revoke access anytime through your Google Account settings.

Voice Features

Voice recordings are converted to text for processing. The audio is not permanently stored on our servers — only the text transcription, and that stays on your device unless you enable cloud sync (in which case voice recordings are also synced as described above).

Location Data

PiPar uses your device's location to enable two specific features:

Foreground Location (while using the app)

When you make a request that benefits from knowing where you are — for example, "find the closest gas station that's open" or "what's the weather here" — PiPar includes your current location in the prompt sent to the AI provider so it can give you a relevant answer.

• Location is only included when the feature is actively used
• Location is sent only to the AI providers listed in the "Third-Party AI Services" section above
• Location is not stored on our servers
• Location is not used for advertising or shared with any other third party

Background Location (location-based alerts)

If you create a location-based alert (for example, "remind me to call home when I leave the office"), PiPar monitors your location in the background to detect when you enter or exit the geographic area you defined for that alert.

• Background location is only used to evaluate alerts you have explicitly created
• Background location data is processed on your device and is not sent to our servers
• Background location is not sent to AI providers
• If you delete all location-based alerts, background location monitoring stops

Your Control

You can disable location sharing at any time from App Settings → AI Services → Enable User Location Sharing. When disabled:

• PiPar will no longer include your location in AI requests
• Existing location-based alerts will be paused until re-enabled

You can also revoke location permission entirely through your device's system settings.

Data Retention

• Local data: Stays on your device until you delete it
• Active chat data: Deleted when session ends or times out
• Forwarded email content: Processed in active session only; persists on our servers only if cloud sync is enabled
• Account data: Retained while account is active, deleted 30 days after account deletion
• Usage logs: Retained for 90 days, then deleted
• Cloud-synced data: Retained until you delete it or delete your account
• Location data: Not retained — used in real time only and never stored on our servers

Your Rights

You have the right to:

• Access: Request a copy of data stored on our backend
• Rectification: Update your information
• Erasure: Request deletion of your account and backend data
• Portability: Export your locally stored content anytime
• Object: Object to processing based on legitimate interests
• Withdraw consent: Stop using the service anytime

To exercise these rights, contact us at pipar@nexii.fi. We'll respond within one month.

Data Security

• Local data is protected by your device's security
• Backend data is stored on secure Google Cloud infrastructure within the European Union
• Temporary chat data is encrypted in transit and automatically purged
• Cloud-synced data is encrypted in transit (TLS) and at rest
• All communications use encryption

Children's Privacy

PiPar is not intended for children under 13. We do not knowingly collect information from children.

Changes to This Policy

We may update this policy. Changes will be posted with an updated date. Continued use after changes constitutes acceptance.

Contact Us