Pip: Gift Lists · Privacy
Privacy policy
Last updated 12 October 2026
Pip keeps the people you shop for, their occasions and their wish lists on your iPhone and in your own private iCloud. There is no account, no advertising and no analytics. The only thing that reaches our server is the product search for a wish, such as “lego race car”, with no names or lists attached.
This is saved in the app’s storage on your iPhone and synced through Apple’s CloudKit to the private database in your own iCloud account, so it is available on your other devices and after a reinstall. Your private iCloud database is accessible only to your Apple Account. Ramirez Labs cannot see, read or export it.
On your iPhone. Turning a wish into a search, ranking results, suggesting gift ideas, writing card notes, reading scanned lists and text message screenshots, and Pip’s own lines all use Apple’s on-device Foundation Models and Vision frameworks. None of it is sent to us, to Apple or to any AI service.
To show real prices, Pip sends our price server:
The server looks the search up through Bright Data, a data provider that retrieves public Google Shopping results, and returns products from trusted retailers. Searches and their results are cached on the server for up to two days so repeat searches are fast, then discarded. Like most web services, our hosting provider may briefly keep standard request logs, including IP addresses, for security and reliability. We never receive or store the names, occasions, profiles or lists in the app.
Camera. Used only when you choose to scan a paper wish list. The page is read on your iPhone and the image is not saved or uploaded.
Photos and screenshots. When you scan a photo of a list or pick screenshots of a conversation, you choose them in Apple’s photo picker, so Pip only sees the images you select. They are read on your iPhone to find the wishes and are not saved or uploaded. Pasting a copied message works the same way.
If you import from Contacts, you pick people in Apple’s contact picker, so Pip only sees the contacts you choose. From each it saves the name, photo, birthday, anniversaries and job title into that person’s profile. A birth year is used only to set an age group and is not stored.
If you turn on Lock with Face ID in Pip’s Settings, Pip asks for Face ID, Touch ID or your passcode each time you open it and hides your lists in the app switcher. iOS handles the check entirely; Pip never receives or stores biometric data, it only learns whether the check passed.
Pip does not sell anything or handle payments for gifts. Tapping Buy opens the retailer’s website, and from then on that retailer’s own privacy policy applies. If Pip offers an optional upgrade, payment is handled by Apple through the App Store; we never see your payment details.
Pip is made for adults buying gifts. Parents may add information about their own children, such as a name, interests and clothing sizes, to plan gifts. That information stays on the parent’s iPhone and in the parent’s private iCloud and is never sent to us. Pip is not directed at children under 13.
Swipe left on a person to delete them along with their occasions and gift ideas, or open Settings in Pip and tap Erase all my data to delete everything from your iPhone and your iCloud on all your devices. You can also remove the app’s iCloud data in the iPhone Settings app, under your name, iCloud, then Manage Storage. Server-side search caches expire on their own within two days.
Any changes will be posted on this page with an updated date. If a future version handles data differently, this policy will say so before that version ships.
Questions about this policy: support@ramirezlabs.app