Pip privacy policy
Short version. Pip runs on your own PC. No account is needed, and it has no ads and no analytics. Information leaves your PC only for a feature you choose to use, and then only what that feature needs. BANG DIGITAL does not sell or share your data, and keeps only what an optional Pip account holds (section 2), until you delete it.
Kwa ufupi. Pip inafanya kazi kwenye PC yako. Huhitaji akaunti, na hakuna matangazo wala telemetry. Kinachotoka nje ya PC ni kile tu kinachohitajika na kipengele ulichochagua kutumia. BANG DIGITAL haiuzi wala haigawi data yako, na inahifadhi tu kilicho kwenye akaunti ya Pip ukiamua kuwa nayo (sehemu ya 2), mpaka uifute.
1. Google account (optional)
If you choose Sign in with Google, Pip asks Google for two read-only permissions and uses them only to show you information inside Pip, on your own screen:
| Permission | What Pip reads | Why |
|---|---|---|
calendar.readonlyGoogle Calendar, read only | Titles and times of your events for today and the current month | The Calendar tab: today's timeline, the month view and your next event |
gmail.labelsGmail labels | Only the number of unread emails in your inbox | The unread count on the Mail tab. Pip never reads, lists or opens your emails, senders or subjects |
Sign-in happens in your own browser. Google sends the access tokens to Pip on your PC, where they are stored encrypted with the system's own protection (Windows data protection, or the macOS Keychain). Calendar events and the unread count are held in memory only while Pip shows them. This Google data is never sent to BANG DIGITAL or to anyone else, never sold, never used for advertising, never used to train artificial intelligence models, and never read by people. Signing out in Pip's settings deletes the stored tokens. You can also remove Pip's access at any time at myaccount.google.com/permissions.
Pip's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
2. Pip account (optional)
You can sign in to a Pip account so another PC or Mac with Pip picks up your setup. Pip works fully without one.
| What | Details |
|---|---|
| Sign-in | With Google, asking only who you are (openid email): your Google ID and email address; or with your
email address and a six-digit code that Pip's server sends from no-reply@bang.co.tz. The code is kept in memory for at most
ten minutes. No password is created or stored, and neither sign-in gives access to your calendar or mail. |
| What is kept | Your Pip preferences (language, island look and behaviour, Home layout, Pip's name, colour and hat, tabs, modes, focus guard list, sounds, music switches, shortcut), the text of your Note, your weather town, and your calendar link if you set one. Never: your files, what you copy, your agents' work, chats, Google or Spotify logins. |
| Where | On BANG DIGITAL's own server (pip.bang.co.tz, Vultr), stored under a one-way hash of your Google ID (or of your email address), reached only over HTTPS. Your email is shown to you in Pip but is not stored on the server. Session tokens are stored as hashes. |
| Deleting | Settings, Connections, Delete my Pip account removes everything the server holds for you and signs out every device, at once. Your PCs keep their own settings. |
Your calendar link is private: anyone who has it can read your calendar. Leave it out of Pip, or use Google sign-in for the calendar instead, if you do not want it on the server.
3. Sending files between your phone and your PC
When you choose Get from your phone, Pip makes a private link and QR code that works for one hour, or
until you stop sharing. So that it also works when your phone is not on the same Wi-Fi, the files travel through Pip's
relay at pip.bang.co.tz, encrypted on the way (HTTPS). The relay only passes them along as they move: it
does not save files, does not keep copies, and does not record file names or contents. Anyone who has the link can open
it while it works, so only share it with your own devices.
4. Other features that use the internet
Each of these runs only when you turn it on or use it.
| Feature | What is sent | Sent to |
|---|---|---|
| Weather | The town you type | Open-Meteo |
| Song lyrics | Song title, artist and length | lrclib.net |
| Release year, album and cover of a song | Song title and artist | Apple iTunes Search; for a cover iTunes does not have, Deezer's public search |
| Calendar link (iCal) | Pip downloads the private calendar link you paste | Your calendar provider |
| Spotify devices | Your Spotify login and your list of devices | Spotify |
| Ask about your screen | One screenshot and your question | Claude Code or Codex, using your own account on your PC |
| Chat with Pip | The messages of that chat (up to the last twelve) | Claude Code or Codex, using your own account on your PC |
| License check (at start and every six hours) | A one-way hash of this device's ID (never the ID itself), so the 7-day trial cannot restart; and your Pip account's session when you are signed in, because the license belongs to the account | pip.bang.co.tz |
| Buying Pip | For mobile money, the phone number you type (to send the payment prompt). For a card, nothing passes through Pip: you pay on EvPay's own page | EvPay (EvMak Tanzania), through pip.bang.co.tz |
| Check for updates (at start and every six hours; can be switched off in Settings) | A request for the newest version number. Nothing about you or your PC is sent | pip.bang.co.tz (or GitHub) |
Everything else, including what your AI agents are doing, your notes, copied text, files and settings, stays on your PC.
5. This website
pip.bang.co.tz serves the installer, this page, the update check and the file relay. Like any web server it briefly keeps standard access logs (IP address, time, page requested, browser name) to keep the service working and safe. They are deleted after 14 days and are never shared or sold. The website uses no cookies and no trackers.
6. Children
Pip is a tool for developers and is not directed at children under 13.
7. Your choices
You can use Pip without any of the online features above. You can delete your Pip account, sign out of Google or Spotify, switch off lyrics, the song year and the weather in Settings, and uninstall Pip at any time; uninstalling removes Pip and its changes to your AI agents' settings.
8. Changes and contact
If this policy changes, the new version is published on this page with a new date. Questions about your data: info@bang.co.tz · BANG DIGITAL LTD, Tanzania.