Privacy policy

Pippa, a personal scheduling assistant on WhatsApp. Last updated 3 October 2026.

Early-access waitlist

If you join the waitlist, your email address and first name are stored in Loops to personalize early-access invitations and Pippa product updates. If you choose to answer the optional questions, we also store the scheduling tools you use, your scheduling challenges, and what you would like Pippa to help with. We use these answers to understand what to build and how to help you get started. Please avoid including private meeting details or other people's personal information. Joining the waitlist does not connect your Google Calendar or WhatsApp account. Use the unsubscribe link in waitlist emails, or contact us below to request removal. Deleting your bot account does not automatically remove your separate waitlist subscription.

The signup security check uses Cloudflare Turnstile to help detect automated submissions. Pippa uses hashed network and email identifiers for signup rate limits. These checks do not grant access to your Google Calendar, Gmail or WhatsApp.

For work email addresses, Pippa checks the domain's public mail-hosting records through Google Public DNS. Only the domain is sent for this check, not your full email address. Connecting your account still requires Google sign-in.

What it collects

Your name and email address from Google sign-in; your WhatsApp number; an access token for your Google Calendar (stored encrypted); the messages and voice notes you send the bot and its replies (recent chat history); facts you ask it to remember; and contacts you save for arranging meetings.

How it uses your data

Only to answer you: to read, create, change and delete events on your Google Calendar when you ask, to arrange meetings with contacts you invite, and to remember what you told it to remember. Google Calendar data is used for nothing else, is not used to train AI models, and the bot does not sell or share your data for advertising.

Public booking pages

If a host publishes a booking page, visitors can see the host's chosen display name, meeting details and available times. Private calendar event titles and descriptions are not shown. When a visitor confirms a booking, Pippa processes their name and email and shares them with the host and Google Calendar to create the event and request an invitation. Pippa stores booking details and a one-way request fingerprint for duplicate prevention, rather than retaining the visitor's name and email in its booking database. Public bookings do not require a visitor account, Gmail access, or AI processing. Pippa also uses limited request information to prevent abuse and duplicate bookings.

Hosts can pause their page from Connections. Disconnecting Google stops new bookings. Deleting the host's Pippa account removes its booking page and Pippa's stored booking records; it does not automatically delete events already created in Google Calendar. Visitors can contact the address below about their booking data. To change or cancel a meeting, contact the host; public self-service changes are not yet available.

Private meeting coordination

A host can prepare a meeting with two guests and share a different private availability link with each. Pippa stores the guest names, email addresses and time selections for this request. Guests do not connect their calendars. When both guests accept a common option and the host remains free, Pippa creates one Google Calendar event including both guests. Participant email addresses are included in that shared invitation.

Treat each private link as a key: anyone it is forwarded to could respond for that guest. Links expire, and replacing the options invalidates earlier replies. The host can cancel an unbooked request. The first version prepares messages for the host to share; it does not automatically send scheduling outreach. Deleting the host's Pippa account removes its stored coordination records, but not existing Google events.

Scheduling chat

You can paste guest availability, names and email addresses into the signed-in scheduling chat. The conversation is stored with your Pippa account and processed by OpenAI to extract scheduling details. Only share information you have permission to use. Pippa compares the supplied availability with your Google Calendar and shows a proposed meeting. It creates the event and requests invitations only when you confirm the displayed details. Host-provided availability does not mean a guest has RSVP’d. Deleting your Pippa account removes these chats and proposals; existing Google events remain.

Optional Gmail access

If you connect Gmail separately, Pippa can search and read your emails only to answer your requests, for example to find a location in an invitation. It cannot send or delete email. Retrieved email content is processed by OpenAI and may be included in recent chat history. Gmail access is optional and can be revoked through your Google account.

Who processes it

In the web app, microphone recordings are sent to ElevenLabs for transcription. If you choose to play a reply, its text is sent to ElevenLabs to generate speech. Pippa does not save raw web recordings or generated audio. ElevenLabs processing is subject to its own retention policies; this integration does not promise zero retention. Reviewed transcripts and conversations are stored with your Pippa account and processed by OpenAI. Typed chat works without voice.

Messages travel through WhatsApp (Meta). Text and voice notes are processed by OpenAI to understand and answer them. Calendar data comes from Google. The service and its database run on Railway. The operator (Pippa) runs the server and could technically access stored data; he doesn't look at it.

How to leave

Send delete my data to the bot and reply yes: your account, saved facts, contacts, invites and chat history are deleted and the bot's Google access is revoked. You can also remove access at any time at myaccount.google.com/permissions.

Contact

Questions: thsonvt@gmail.com