Privacy Policy

Last updated: 24 September 2026

Before publishing: replace [LEGAL NAME], [SERVICE ADDRESS] and [VOIP NUMBER] throughout, and delete this box. Remove the "Crash diagnostics" section entirely if crash reporting does not ship in the first release.

Pip is a photo-cleaning app made by Mitchcreates. This policy explains what Pip does with your information. The short version: your photos never leave your phone, and Pip has no servers that read your camera roll.

1. Who is responsible

The controller for the purposes of the General Data Protection Regulation (GDPR / DSGVO) is:

[LEGAL NAME], trading as Mitchcreates
[SERVICE ADDRESS]
Germany
Email: hello@pip.pics
Phone: [VOIP NUMBER]

2. Your photos and videos

Pip asks for access to the photos and videos on your device so it can show them to you, help you decide what to keep, and delete the ones you choose.

Your photos are never uploaded. Pip has no server, no cloud storage, and no account system. There is no network code in the app that transmits image data anywhere.
Analysis happens on your device. Finding duplicates, similar shots, and blurry photos is done locally on your phone.
Deletion is always confirmed by you. Pip never deletes anything on its own. Your phone's operating system shows its own confirmation dialog before any photo is removed.
Technical results are cached locally. To avoid re-analysing your library every time, Pip stores small technical values (such as image fingerprints and sharpness scores) in a database on your device. This never includes the images themselves and never leaves your phone. You can erase it at any time from Settings.

Legal basis: performance of a contract under Art. 6(1)(b) GDPR. Photo access is what makes the app function, and it is used for nothing else.

3. Photo access permissions

On Android, Pip requests access to your photo and video library. You may grant full access or select only specific photos. Pip works either way, though features that scan your whole library can only consider the photos you have granted access to. You can change or withdraw this permission at any time in your device settings.

4. Crash diagnostics

To find and fix crashes, Pip collects anonymous technical crash reports. These contain the type of error, where in the app it happened, your device model, and your operating system version. They never contain your photos, your photo filenames, or anything that identifies you personally.

Legal basis: legitimate interest under Art. 6(1)(f) GDPR, specifically keeping the app stable and safe to use on a wide range of devices.

5. What Pip does not do

No ad networks, and no advertising identifiers.
No behavioural or marketing analytics.
No accounts, no sign-up, no email collection inside the app.
No selling or sharing of personal data with third parties.
No tracking across other apps or websites.

6. How long data is kept

Everything Pip stores lives on your device and is deleted when you uninstall the app.

7. Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability, and objection. Because Pip stores your data on your own device and holds no personal profile about you, most of these are exercised directly: uninstalling the app erases everything Pip stored.

For any privacy question, contact hello@pip.pics. You also have the right to lodge a complaint with a supervisory authority. The competent authority here is the Hamburgische Beauftragte fuer Datenschutz und Informationsfreiheit.

8. Children

Pip is not directed at children under 13 and does not knowingly collect personal data from them.

9. Changes to this policy

If this policy changes in a way that affects you, the date at the top will be updated and the change will be noted in the app's release notes.

10. Contact

Questions about privacy: hello@pip.pics.