YOUR DATA · UPDATED 29 OCTOBER 2026

Your planner, your information.

Pip is a free planner operated by the site owner. This website is separate from the original personal Pip planner. Contact the operator through Feedback in your planner for questions or data requests.

What we save to run your planner

Pip accounts use Supabase authentication. Your email, encrypted password credentials and display name are processed by Supabase; account emails use Brevo when enabled. Email delivery and password resets are currently paused. Pip does not store plaintext passwords. We use your identifier to store your preferences, schedule, checkmarks, tasks and recent undo history. Your email is used to check administrator permissions; regular account records do not copy it into the planner database. Information is hosted using OpenAI Sites and its Cloudflare infrastructure.

Feedback and administration

Feedback you choose to submit is visible to the owner and authorised administrators. Do not include sensitive information in feedback. Administrators see aggregate account and plan counts, optional usage statistics and feedback. Their dashboard does not show private planner contents. The owner manages administrator access by email.

Usage statistics and opt-out

Usage sharing is enabled for new accounts. Existing saved choices are preserved. You can opt out in Settings to help improve Pip. We then record the UTC days you use the planner and counts of actions such as creating a plan, logging progress or redistributing work, linked to your account identifier. These records contain no task text, names or emails, and the dashboard displays only aggregate counts. Activity records older than 90 days are removed when usage recording runs. Opting out of sharing immediately removes your existing usage records.

Basic current account and saved-plan counts, and the date your account first opened the planner after measurement began, are retained to understand operation of the service. They are separate from optional activity tracking. No third-party analytics, advertising scripts or advertising cookies are installed by this planner. The hosting and sign-in providers process technical information needed to deliver and secure their services.

Your photos and music

Your optional profile picture is resized and centre-cropped in your browser before being stored privately under your account. You can replace or remove it in Settings, and deleting your account data removes stored photos too. They are not included in planner JSON backups. Built-in recorded music is served by Pip with artist attribution; rain and noise are generated on your device. Apple Music and Spotify players load only when you choose to load a link; The selected music provider then processes the player connection under its own policies.

Your study materials

Uploaded documents are stored privately in Cloudflare R2, linked to your account. Only authenticated requests from your account can download them. File names, sizes and task links are stored in the application database. Materials remain linked to study goals when work moves between days. You can remove files from the material library; deleting your account data removes these files too. Documents are not included in JSON backups: download copies separately. Upload only material you have permission to store.

Optional task reminders

When you enable notifications on a device, Pip stores its browser push subscription linked to your account. A server checks due tasks and habits using your chosen time zone. Your browser’s notification provider delivers the push; Pip then loads reminder details securely from your signed-in account. Task titles may appear on your lock screen. Disable reminders for each device in Settings or in your browser. Deleting your planner data removes its push subscriptions; delivery-deduplication records expire after three days. No reminder emails are sent by this feature.

Your controls and deletion

Download your planner backup from Settings. You can also permanently delete your Pip account data there: this removes your planner, undo history, preferences, photos, study materials, feedback and usage records from the active application database. It does not delete your Pip authentication credentials. Signing in again creates a new empty planner. Hosting-provider backups and operational records may follow their own retention processes. An administrator’s access grant remains until the owner removes it.

Your Pip account

You register and sign in directly with your email and password. Confirmation and reset links expire; open them in the browser where you requested them. Essential cookies keep you signed in. Scheduling and redistribution use the planner’s calculations.

Device-only planning and break journal

The optional device-only planner and break journal are stored in your browser and do not sync. Signed-in users can save their Pomodoro rhythm to their account; the active countdown and session count stay on the device. Clearing browser storage removes them. Download your planner backup and journal separately to keep copies. Music players connect to Apple Music or Spotify only when you load a link.

Service availability

Features may change as we learn from feedback. Keep a downloaded copy of information you need. We will update this information before adding advertising or changing how collected information is used.