Privacy Policy

My Day with Pip is made by Atharsoft Software Design - FZCO. This policy explains what the app collects, why, who helps us run it, how long we keep it and how you delete it.

Last updated: 5 November 2026

The short version

• A parent sets up the family. Children never create an account and are never asked for an e-mail address.
• We collect only what the app needs to run your child's day: routines, progress and the photos you ask for.
• No ads. No tracking. No third-party analytics. We never sell or rent data.
• Check photos are deleted after 7 days.
• You can delete the whole family account inside the app at any time.

Who this policy is for

My Day with Pip is a daily routine app for children aged 5 to 9 and their parents or guardians ("you"). The parent creates and controls every child profile. The child uses the app on a device that the parent connects with a one-time code.

What we collect from the parent

• E-mail address and password. To create and sign in to the family account. The password is stored only as a secure hash.
• Family settings. Routines, steps, schedules, school days and holidays, allowed games, play-time limits, notification choices and the Grown-ups PIN (stored only as a hash).
• Study entries you add. Weekly spelling word lists and school grades you log.
• Purchase status. Whether your family has an active subscription, which plan, and when it renews or ends. Apple handles the payment; we never see your card or Apple ID details.
• Push notification token. A code from Apple that lets us send notifications (for example "a check is waiting") to the parent's device, together with the device model.

What the parent tells us about the child

• First name or nickname, age or birth date, and optionally gender and an avatar sticker.
• Time zone and language, so the day starts at the right time and the app speaks the right language.

What is created while the child uses the app

• Routine and play data. Steps completed, timers, stars, stickers, streaks, play time used, and progress in the games (coloring, Pond Pop, Pip's Quiz, Storybook).
• Coloring pictures the child finishes, so they appear in the gallery for you.
• Check photos. Only for steps where you chose a photo check. The child takes a photo of the task (for example a made bed). The photo is downscaled on the device before upload.
• Spelling results for the word lists you set.

Error reports

When the app crashes or hits an error, it sends us a short report: the error message, the screen, the app version and the iOS version. Reports contain no device identifiers and no advertising identifiers. If someone is signed in, the report is attached to the account number so we can fix the problem. Reports are deleted after 30 days.

What we do not collect

We do not collect location, contacts, advertising identifiers, browsing history, voice recordings or health data. We do not use cookies on our web pages. We do not build profiles for advertising.

How we use the information

• To run the app: show the right routine at the right time, keep stars and progress, sync between the parent's and the child's devices.
• To check photos: you approve them yourself, or, on Family Plus, Pip's coach looks at them (see below).
• To send the notifications you turned on, to the parent's device only.
• To manage your subscription and the number of child profiles your plan includes.
• To fix errors and keep the service secure.
• To answer you when you contact support.

We never use your family's data for advertising, and we never sell or share it for anyone else's marketing.

Pip's coach and photos (Family Plus)

On the Family Plus plan, you can choose "Pip's coach" for a step. When the child takes the photo for that step, we send the photo and the task description to an AI model (Anthropic Claude, reached through the OpenRouter service) to get a short answer: done, try again, or unsure. The model returns one friendly sentence for the child. If the model is unsure or unavailable, the check waits for you instead. A check is never rejected without a clear result, and you can always override it.

Photos are sent to the AI model only for Pip's coach steps on Family Plus. On the Family plan, and for every other photo step, only you see the photo. Under these providers' terms for business customers, the photos are not used to train their models.

All check photos are deleted from our storage 7 days after they are taken.

Who helps us run the service

We share data only with the service providers that run parts of the app for us, and only what each one needs:

• Our hosting provider runs the servers and the database that store your family's data.
• Cloudflare (R2) stores check photos and coloring pictures.
• Apple processes purchases and delivers push notifications.
• Expo passes push notifications from our server to Apple.
• RevenueCat tells us whether a subscription is active. It receives a family number and the purchase receipt from Apple, never the child's name.
• OpenRouter and Anthropic process check photos for Pip's coach on Family Plus, as described above.

These providers may process data outside your country. We do not share data with anyone else unless the law requires it.

Children's privacy

My Day with Pip is built for children and follows the rules for children's apps, including the US Children's Online Privacy Protection Act (COPPA) and the children's provisions of the EU and UK GDPR.

• Only a parent can create a family account and the child profiles in it. The app does not let a child create an account or enter an e-mail address.
• By creating a child profile and choosing photo checks, the parent gives consent for the data described in this policy to be collected from the child's use of the app.
• The child's side of the app has no ads, no chat, no links out of the app and no way to share anything publicly.
• Purchases, links to web pages, sharing and account deletion are behind a parental gate.
• A parent can review the child's data in the app (Today, progress, photos), correct it in the settings, and delete it at any time.

How long we keep data

• Check photos: 7 days, then deleted automatically.
• Error reports: 30 days.
• Everything else: as long as the family account exists.
• When you delete the account, we delete the family's data from our servers right away. Copies in backups are removed when the backups are replaced, within 30 days.

Deleting your data

• Whole family: in the app, go to Settings, then Account, then "Delete family account". This deletes every child profile, routines, progress, photos, coloring pictures, word lists, grades, notification tokens, the subscription record and every grown-up account in the family.
• One child: in the app, go to Settings, then Family, then "Remove" with the child's name. This deletes that child's profile, routines, progress, photos, coloring pictures, word lists and grades; a device signed in as that child goes back to the welcome screen.
• Subscription: deleting the account does not cancel an Apple subscription. Cancel it in the iPhone or iPad Settings, under your Apple ID, then Subscriptions.

You can also write to us and we will delete your data for you.

Your rights

You can ask us to show you, correct, export or delete the data we hold about your family, or to stop processing it. Write to hello@mydaywithpip.com from the e-mail address of the family account. We answer within 30 days. If you live in the EU or UK, you can also complain to your local data protection authority.

Security

Data travels encrypted (HTTPS). Passwords and PINs are stored only as secure hashes. Photos are stored in private storage and can only be opened by your family's accounts.

Changes to this policy

If we change this policy, we update the date at the top. If the change is important, we tell you in the app before it takes effect.

Contact

• Atharsoft Software Design - FZCO
• E-mail: hello@mydaywithpip.com