Privacy Policy

Overview

Pippa ("we," "us," or "our") operates gopippa.ai, a platform that lets users create animated videos and printed books from children's stories. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

By creating an account or using our services, you agree to the collection and use of information as described in this policy.

Information We Collect

Account Information

When you create an account, we collect:

• Name (optional)
• Email address
• Password (stored as a one-way hash; we cannot read your password)
• Age confirmation (that you are at least 13 years old)

Content You Create

When you use Pippa, we process and store:

• Story text you provide (typed, pasted, or transcribed from audio)
• Audio recordings (voice narration you upload or record)
• Character reference images you upload
• Generated images, videos, and audio created by our AI pipeline
• Project data (storyboard settings, timeline edits, style choices)

Payment Information

Payments are processed by Stripe. We store your subscription plan, card brand, and last four digits for display purposes. We do not store full credit card numbers.

Usage Data

We collect anonymized usage data including pages visited, features used, and generation counts to improve the service. We do not use this data for behavioral advertising.

Children's Privacy and COPPA Compliance

Pippa is designed for use by adults (parents, teachers, and content creators) to create content for children. Pippa is not directed at children under 13.

Age Requirement

You must be at least 13 years old to create a Pippa account. During signup, all users must confirm they meet this age requirement. If we learn that a user under 13 has created an account without parental involvement, we will promptly delete that account and all associated data.

Content Featuring Children

Parents and guardians may create stories that feature their children as characters. By uploading photos or voice recordings of a child, the parent or guardian represents that they have the legal authority to provide this content and consent to its processing. This content is:

• Stored securely in our cloud infrastructure (Cloudflare R2)
• Used only to generate the requested animations and books
• Not shared with third parties for advertising or marketing purposes
• Not used to train AI models
• Deletable at any time through account settings or by contacting us

Voice Recordings

Pippa allows users to upload or record voice narration. If a parent records a child's voice or their own voice reading a story, these recordings are processed by our text-to-speech and lip sync providers (ElevenLabs, OpenAI Whisper) solely to generate the requested content. Voice recordings are not retained by these providers beyond the processing window.

Parental Rights

Parents and guardians have the right to:

• Review all content associated with their account
• Delete any or all content, including character images, voice recordings, and generated media
• Delete their entire account and all associated data
• Request a copy of their data by contacting us at privacy@gopippa.ai

How We Use Your Information

We use the information we collect to:

• Provide and improve the Pippa service
• Generate animated videos, images, and printed books from your stories
• Process payments and manage subscriptions
• Send transactional emails (account verification, generation completion, order status)
• Provide customer support
• Monitor for abuse and enforce our terms of service

We do not sell your personal information. We do not use your data for behavioral advertising. We do not share your content with third parties except as necessary to provide the service (e.g., sending images to AI generation providers, sending book files to our print partner Lulu Press).

Third-Party Services

Pippa uses the following third-party services to operate. Your data is shared with these providers only as necessary to deliver the service:

• AI generation providers (fal.ai, OpenAI, Anthropic): Process text prompts and images to generate content. Inputs are not used for model training under our enterprise agreements.
• ElevenLabs: Text-to-speech and voice cloning. Voice data processed in real-time, not retained.
• Cloudflare R2: Secure storage for generated media and uploaded assets.
• Stripe: Payment processing. Subject to Stripe's Privacy Policy.
• Lulu Press: Print-on-demand book fulfillment. Receives book PDFs and shipping addresses for orders.
• Vercel: Application hosting.
• Neon: Database hosting (PostgreSQL).

Email Communications

We send two kinds of email:

• Transactional: account verification, password resets, receipts, and notifications about your own projects (export ready, job complete, usage alerts). These are necessary to operate the service and we send them to all active accounts.
• Marketing:product updates, new features, tips, and company news. We only send these if you've explicitly opted in at signup or from your preferences. You can unsubscribe at any time via the one-click link in every marketing email, or from the "Email notifications" section of your account settings.

We do not share your email with third parties for their marketing.

Data Retention

Your account data and content are retained as long as your account is active. When you delete your account:

• A 30-day grace period allows you to cancel the deletion
• After 30 days, all account data, projects, generated media, uploaded assets, voice recordings, and character images are permanently deleted
• Payment records may be retained as required by law

You can delete individual projects, characters, or assets at any time through the app without deleting your account.

Data Security

We implement industry-standard security measures to protect your data, including:

• Encrypted data transmission (HTTPS/TLS)
• Hashed passwords (bcrypt with salt)
• Rate limiting on authentication endpoints
• CSRF protection on all mutations
• Secure, HTTP-only session cookies
• Two-factor authentication for administrative access

Your Rights

Depending on your jurisdiction, you may have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your data (available in account settings)
• Export your data (contact privacy@gopippa.ai)
• Object to certain processing activities

To exercise any of these rights, use the tools in your account settings or contact us at privacy@gopippa.ai.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the app. Your continued use of Pippa after changes are posted constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy, our data practices, or your rights, contact us at:

privacy@gopippa.ai

Pippa is operated by Wright Advisors LLC.