Effective October 16, 2026
Privacy Policy
Pip & Pebble is a countdown app that lives on your home screen. It doesn't require an account, it doesn't show advertising, it doesn't track you across other apps or websites, and it doesn't sell personal information. It does send a small amount of anonymous usage and crash information to two service providers, described below, so we can find bugs and see which features people use.
Information you provide in the app
You can enter countdown details such as a title, target date, date history, preferred countdown format, onboarding choices, and story collection progress. This information is stored on your device and is shared with the home-screen widget through the platform widget storage mechanisms on iOS and Android. Your countdown title and dates are not sent to us or to our service providers.
Notifications
If you enable notifications, Pip & Pebble may schedule local countdown reminders on your device. These reminders are handled by your device operating system. We don't use a remote notification service to send marketing messages.
Analytics and crash reporting
Pip & Pebble uses two service providers, both acting on our behalf and under their data processing terms with us. They may only use this data to provide their service to us.
- PostHog (PostHog, Inc.) records product analytics: which features are used and how the app is doing across versions.
- Sentry (Functional Software, Inc., doing business as Sentry) records crash and error reports.
Anonymous install ID. The first time you open the app, a random ID is generated and stored on your device. It isn't based on your name, email, Apple ID or Google account, phone number, or your device's advertising ID. PostHog and Sentry both receive it, so a crash report and the usage events from the same install can be matched up. It can't tell us who you are. Reinstalling the app creates a new ID.
What PostHog receives. Each of these moments is recorded as an event with the time it happened, your install ID, and the device details listed below:
- the app was installed, updated, opened, brought to the foreground, or sent to the background
- you finished first-run onboarding
- you created a countdown
- you changed the countdown's target or start date (whether it got shorter or longer, by how many days, and whether any story scenes were removed as a result)
- you changed the countdown time format (which format)
- a Pip & Pebble widget was placed on your home or lock screen (the platform)
- you collected missed story moments (how many)
- you opened a collected scene in the album (which scene, and its day number in the story)
- the day-zero celebration was shown
- you reset the story (whether from Settings or by refreshing faded memories)
- an error was captured by Sentry (the type of error and the ID of the Sentry report)
Every event also carries two counts: the number of days until your countdown's target date, and the number of days since you installed the app. These are counts only. We never send the date itself or the countdown title. If the app was opened from a link, the link is included too; the only links the app uses carry a story chapter and scene, not personal details.
We don't use automatic screen-tap capture, session recordings or screenshots, and we don't use PostHog's advertising or profile-building features.
What Sentry receives. When the app crashes or hits an error, Sentry receives a report with: the error and its stack trace (the app's own code path leading to it), the app version and build, the device model, operating system and version, language and time zone, the device's state at the time (such as free memory and storage, battery level and orientation), a short trail of recent app activity leading up to the error (such as screen changes and log messages), session information (whether a session ended in a crash, and for how long the app ran), and your anonymous install ID. We have switched off Sentry's option to collect default personal information such as names, email addresses or usernames, and the only user information the app gives Sentry is the anonymous install ID.
Device details sent to PostHog with every event. Device model and type, operating system and version, whether the app is running in an emulator, app name, identifier, version and build, language and time zone, screen size, a session ID that changes from time to time as you use the app, and the PostHog SDK version.
Approximate location. When your phone connects to PostHog or Sentry, they receive its IP address. They use it to work out an approximate location (country, and sometimes region or city). We don't ask for or use your device's location, and we don't collect precise location. Both services keep the IP address with the event or crash report it arrived with, and delete it along with that report (see Data retention).
What we don't do. We don't use advertising SDKs or your advertising ID, we don't show you ads, we don't combine this data with data from other companies' apps or websites, we don't sell it, and we don't share it with anyone other than PostHog and Sentry acting as our service providers. We may disclose information if the law requires it.
Where this data goes
PostHog and Sentry store this data in the United States (PostHog US Cloud; Sentry's US region). If you use the app from the European Economic Area, the United Kingdom or Switzerland, your data is transferred to the United States under each provider's data processing agreement with us, which includes standard contractual clauses. Where the law requires a legal basis, ours is our legitimate interest in keeping the app working and understanding how it's used, which we balance against your privacy by keeping the data anonymous, minimal, and limited to the purposes here.
Support requests
If you contact support, we receive the information you choose to send, such as your email address, message, screenshots, device details, or crash information. We use that information to answer your request, troubleshoot issues, and improve the app.
Data retention
- Countdown data remains on your device until you change it, delete it, or uninstall the app.
- PostHog usage events are kept for up to 7 years, then deleted automatically. Ask us and we'll delete yours sooner (see below).
- Sentry crash reports are kept for 30 days, then deleted automatically.
- Support emails are kept only as long as needed for support, record keeping, and legal compliance.
Children's privacy
Pip & Pebble is not directed to children under 13. If you believe a child has provided personal information through a support request, contact us so we can review and delete it where appropriate.
Your choices and deletion requests
- You can edit or delete countdown details in the app, disable notifications in system settings, or remove locally stored app data by uninstalling the app.
- To have your analytics and crash data deleted, email hello@pipandpebble.app from the device you use with the app and include your anonymous install ID, which you can copy from Pip & Pebble's Settings screen ("Anonymous install ID"). We'll delete the matching records in PostHog and Sentry and confirm by email within 30 days. Deleting the app doesn't delete data already sent; reinstalling gives the app a new ID that isn't connected to the old one, so please send your ID before you uninstall.
- If you're in the EEA, the UK or another region with data protection rights, you may also ask for access to, correction of, or a copy of your data, or object to this processing, by emailing the same address. Because the install ID is the only link between you and these records, we can only act on a request that includes it.
- The app doesn't currently have a switch to turn analytics and crash reporting off. If you'd rather not send any, you can stop using the app, or contact us and we'll delete what has been sent.
To find your anonymous install ID, open the app and go to Settings (the countdown's edit screen); the "Anonymous install ID" row shows it, and tapping it copies it to the clipboard so you can paste it into your email.
Contact
For privacy questions or requests, contact Daniel Elliott Lewis at hello@pipandpebble.app.
Changes to this policy
We may update this policy when the app changes. The latest version will be posted on this page with its effective date.