Privacy Policy.
Plain-English version: every Peppi is private. We never sell your data, and your conversations are never shared with other users or used to train public models.
1. Overview
This Privacy Policy describes how Peppi ("we," "us," "our") collects, uses, stores, and protects information when you use our SMS-based AI companion service (the "Service"). By using Peppi, you consent to the practices described here.
We employ state-of-the-art encryption and data protection measures to ensure that your interactions are confidential and safeguarded.
2. Information we collect
Account information
When you sign up, we collect your phone number, optional email, and the personalization choices you make (your buddy's name, personality, backstory, and how they know you).
Conversation data
We store the SMS messages you send and the replies Peppi generates so your buddy can remember context and personalize over time.
Connected services
If you connect your Google account, Peppi accesses Google Calendar and Gmail to carry out the actions you ask for. From Calendar we receive event metadata, availability, and Meet link details. From Gmail we read message metadata and content (sender, subject, and message body) when you ask about your mail, send mail on your behalf when you ask us to, and manage messages at your request by marking them read or moving them to trash. We access only what is needed to fulfil the request you made, and we request the narrowest permissions those features require. You can disconnect Google at any time from your account settings, which revokes our access.
Usage & device data
Aggregate usage statistics, error logs, and message-delivery telemetry. No precise location data unless you explicitly share it.
3. How we use your information
- Provide replies, memory, and personalization for your Peppi
- Carry out actions you request (calendar events, web searches, sending email-to-self)
- Bill your subscription and process top-ups
- Improve reliability, fix bugs, and prevent abuse
- Communicate service updates and respond to support requests
4. What we never do
- Sell your personal data to third parties
- Share your conversations with other Peppi users
- Use your conversations to train publicly-available AI models
- Read your messages outside what's required to operate the Service
5. When we share data
We share limited information only with vetted service providers who help us run Peppi: SMS carriers, hosting and infrastructure providers, payment processors, and AI model providers under strict data-processing agreements. We may also disclose information if legally compelled or to protect safety.
6. Google user data and Limited Use
Peppi's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
How we use Google data
We use the Google Calendar and Gmail data you authorize only to provide and improve the user-facing features you asked for. We do not use it for advertising, we do not sell it, and we do not transfer it to third parties except as needed to provide those features, to comply with applicable law, or as part of a merger or acquisition, in each case as permitted by the Limited Use requirements.
Artificial intelligence and machine learning
Peppi uses third-party AI models to interpret your requests and generate replies, so Google data you ask us to act on may be sent to an AI provider for that single purpose. We do not use Google user data to develop, improve, or train generalized or non-personalized artificial intelligence or machine learning models.
Our AI providers are engaged under commercial agreements that prohibit training on our data, and we have disabled the account-level settings that would otherwise allow prompts or responses to be used for model improvement. We do not route Google user data through third-party AI aggregators or inference brokers, and we do not use it to train any model of our own.
Human access
Peppi staff do not read your Google data. Our AI providers retain request and response data for a short period solely for safety and security monitoring under their commercial terms, and it is not used for model training. Beyond that, humans access Google user data only with your explicit consent, where necessary for security purposes such as investigating abuse, or where required by law.
Revoking access
You can disconnect Google from your Peppi account settings at any time, or revoke access directly from your Google Account permissions page. On revocation we stop accessing your Google data and delete the stored authorization credentials.
7. Retention
We retain your conversations for as long as your account is active so your Peppi can remember you. You can ask Peppi to forget specific items at any time, or wipe everything from account settings. After account deletion, we remove personal data within 30 days, except where retention is legally required.
8. Your rights
You can request a copy of your data, correct it, delete it, or restrict processing. Email privacy@peppi.ai and we'll respond within 30 days. Residents of California, the EU/EEA, and the UK have additional rights under CCPA, GDPR, and UK GDPR.
9. Security
We use industry-standard encryption in transit and at rest, role-based access controls, audited infrastructure, and regular security reviews. No system is 100% secure, but we treat your data with the seriousness it deserves.
10. Children
Peppi is for adults 18+. We do not knowingly collect data from anyone under 18. If you believe a minor has signed up, contact privacy@peppi.ai and we'll remove the account.
11. International users
Peppi currently operates from the United States. If you use the Service from outside the US, your data may be transferred to and processed in the US under appropriate safeguards.
12. Changes to this policy
We'll post any changes here and update the "Last updated" date above. Material changes will be communicated by SMS or email.
13. Contact us
Questions, requests, or concerns? Email privacy@peppi.ai or reach out via our contact page.