Privacy

Last updated September 23, 2026.

Pip is built so that it only sees your screen when you ask it to. This page lists exactly what leaves your Mac, where it goes, and what is kept.

When Pip looks at your screen

Only while you hold the Pip hotkey (or when you replay the intro). Nothing runs in the background, and Pip never records video.

When an answer takes several clicks (for example Format, then Text, then Show Ruler), Pip follows along as you click so it can point at each next step. To find it, Pip looks at the names of the controls on screen and, in apps that don't provide names, reads the visible text on your screen. That happens only on your Mac: nothing from it is sent anywhere or saved, and it stops when the steps are done, after a short while without progress, or when you ask something else.

What is sent when you ask a question

• Your voice, streamed while you hold the hotkey, to AssemblyAI to turn it into text.
• A screenshot of each display, your question, the last few questions and answers from this session, and the names of the controls in the front window, menu bar, and Dock (for example "Bold" or "Wi-Fi", never text you typed into fields) to OpenAI, which writes the answer and says where to point.
• The answer text to ElevenLabs, which turns it into speech.

All of these go through Pip's own server on Cloudflare, which checks your plan and forwards the request. Pip's server does not store screenshots, audio, questions, or answers. OpenAI, AssemblyAI, and ElevenLabs process the data under their own API terms and may keep it for a limited time (for example, for abuse monitoring).

What Pip keeps

• Your account: your Firebase user id and email address (from Google sign-in, handled by Google Firebase).
• Your plan: free or Pro, your subscription status, and your Stripe customer id if you subscribe.
• Monthly counts: how many questions you asked, how many characters were spoken, and how many voice sessions you started, used to apply your plan's limits.

On your Mac, Pip keeps your sign-in in the macOS Keychain and your settings (pet theme, hotkey, and so on) in its preferences. The conversation is kept in memory only and is gone when Pip quits.

Payments

Payments are handled entirely by Stripe. Pip never sees or stores your card details.

Analytics

Pip does not collect analytics.

Actions Pip can take

Pip can open a website (web links only) or an app that is already installed, and it shows you where it is going first. It never clicks, types, or moves your mouse.

Deleting your account

In the Pip menu, choose Delete account. This removes your account and usage counts from Pip's server and deletes your sign-in. If you have an active subscription, cancel it first with Manage subscription; Stripe keeps its own billing records as required by law.

Contact

Questions about your data or this policy: support@hipip.app.