PiPaFi Privacy Policy

Last updated October 17, 2026.

PiPaFi is developed and published by Ripley Forge LLC. Questions about privacy can be sent to [email protected].

Your inventory

PiPaFi stores item names, photos, notes, locations, containers and specific spots in the app on your device. Storage locations are names you enter, rather than your device’s GPS location. PiPaFi does not require a separate PiPaFi account or password.

Household Sharing on iPhone and iPad

If you create or join a household, PiPaFi stores a shared inventory snapshot, including photos and notes, in Apple CloudKit. Household members use their own iCloud accounts. Private invitations control access; members with write access can edit the shared inventory. Android currently keeps inventory locally and does not offer live household synchronization.

PiPaFi synchronizes household inventory as complete snapshots. It does not automatically merge competing offline edits. Keep independent exported backups before reconciling different device copies.

Backups and retention

PiPaFi keeps up to five recent local recovery snapshots, including photos. Earlier snapshots can retain items you have deleted until later snapshots replace them. Local recovery files are removed when the app is removed. They are not independent protection against losing the device.

You can export and restore a compatible inventory backup. Exported JSON contains inventory and photos and is not password-encrypted by PiPaFi. Protect it with your chosen storage provider’s privacy and security controls. Files exported to another person or provider remain under that recipient’s control; removing the app does not remove those copies.

Android disables its OS cloud backup and device transfer. On iPhone and iPad, operating-system backups may include app data according to your device and iCloud settings. PiPaFi’s local recovery snapshots and household sharing are separate from those OS backups.

Photos and app lock

The camera or system photo picker is used when you choose to add an item photo. Optional app lock asks the operating system to verify your device credentials. PiPaFi does not receive your device passcode or biometric template. App-switcher protection and app lock do not encrypt exported backup files.

Advertising, purchases and diagnostics

PiPaFi for iPhone and iPad has no advertising, tracking, third-party analytics SDK or app-operated analytics server.

The app offers a separate free, one-time 72-hour trial and an optional PiPaFi Full Unlock through Apple’s in-app purchase system. There is no subscription or automatic conversion from the trial to a paid purchase. Apple processes purchases under its own terms. PiPaFi uses verified StoreKit transaction information to determine the original trial date and whether a full unlock is valid. PiPaFi does not receive payment-card details.

If Restore Purchases fails, PiPaFi may display a diagnostic containing error-domain identifiers and numeric codes. This diagnostic excludes account identifiers, receipt contents and transaction contents. The app does not automatically send this displayed diagnostic to Ripley Forge LLC. If you choose to email support, the developer receives your message and any information or attachments you include.

Android purchases and diagnostics

On Android, the 72-hour trial starts only when you choose Start 3-day Trial — Free. The trial is stored locally on your device and does not automatically charge or renew. Full Unlock is a separate, optional one-time purchase processed by Google Play under Google’s terms. PiPaFi does not receive your payment-card details. PiPaFi stores a signed purchase cache locally to verify and restore access, and sends purchase acknowledgments to Google. The bundled Google Play Billing SDK sends billing diagnostics to Google, not to Ripley Forge LLC. These billing operations do not upload your inventory or photos to Ripley Forge LLC.

Deleting inventory and shared copies

You can delete individual items in the app. Local recovery snapshots and exported copies may still contain earlier data. There is no dedicated PiPaFi delete-account flow because PiPaFi does not create its own accounts.

PiPaFi does not currently provide a dedicated control to erase the complete iCloud household. Removing the app does not delete that shared household or copies held by other members. Owners can manage invitations through Household Sharing → Invite or Manage People. Contact support if you need help understanding which copies remain before removing data.

Support and website hosting

If you email support, the developer receives your address, message and any attachments you choose to send. Do not send private inventory or full backups by default. You can contact support to request removal of messages you have sent.

This website uses Cloudflare Pages. Cloudflare can process technical request information, such as IP addresses and request headers, to deliver and secure the website under its own service and privacy terms. These pages do not include advertising, analytics scripts, a contact form or tracking cookies added by Ripley Forge LLC. This website does not receive your PiPaFi inventory unless you separately choose to send information to support.