PipPrivacy
Privacy notice
Last updated 9 October 2026
Pip teaches children to solve real engineering problems through games. This notice explains what we collect, why, and the choices you have. It is written for parents, carers and teachers. If anything is unclear, write to us at support@pipstemgames.com.
Who we are
Pip Engineering is a trading name of Cyber Phoenix Ltd, a company registered in England and Wales, with its registered office at 124-128 City Road, London, EC1V 2NX ("Pip", "we"). We run the Pip app and this website. Contact: support@pipstemgames.com, or write to us at the address above. For family accounts we are the data controller. For school accounts, the school is the controller of its pupils' data and we act as its processor, following the school's instructions.
Children's privacy comes first
- A child never has an email address, password or public profile with us. Adults create accounts; children get a nickname and an avatar.
- We do not show adverts to children, sell children's data, or build advertising profiles.
- We ask a parent or carer to set up the account and to add each child. That is how we get parental consent for children under 13 in the US (COPPA) and under 13 in the UK (UK GDPR).
- We keep the information we hold about a child to what the games need to work.
What we collect and why
| Information | Why we use it | Legal basis |
|---|---|---|
| Parent or teacher: email address, password (stored only as a secure hash), display name | To create and secure your account and contact you about it | Contract |
| Child profile: nickname, avatar, age band (not a date of birth) | To personalise the games and pick suitable difficulty | Contract, with parental consent |
| Game progress: which games are played, stars, levels, settings | To save progress and sync it between devices | Contract |
| School: school name, school URN, class lists, assignments | To run classroom features for the school | Contract with the school |
| Subscription: plan, status, renewal date, Stripe customer reference | To unlock Pro and manage billing. We never see or store your full card number | Contract and legal obligation (tax records) |
| Cookie choices: your selection, a random ID, the date and page | To prove and respect your choices | Legal obligation |
| Technical logs: IP address, browser and page requests | To keep the site secure and working | Legitimate interests |
We do not use analytics or advertising cookies today. If that ever changes, they will stay off until you opt in.
Who we share it with
We use a small number of service providers who process data only on our instructions:
- Supabase: database and sign-in. Data is stored in the EU (Frankfurt).
- Netlify: hosts this website.
- Stripe: takes payments and runs the billing portal.
We do not sell personal data. Where a provider is outside the UK or EEA, we rely on approved safeguards such as the UK International Data Transfer Addendum or standard contractual clauses.
How long we keep it
- Account and child data: until you delete the child or the account. We then erase it within 30 days, except records we must keep by law.
- School data: for the life of the school's subscription, then deleted or returned within 60 days of the end of the contract unless the school asks us to act sooner.
- Payment records: for 6 years, as tax law requires.
- Consent records: for 3 years.
- Inactive family accounts with no active subscription: we email a warning, then delete the account after 24 months with no sign-in.
Your rights
You can download a copy of your data or delete your account yourself from your account page. You can also ask to see, correct, export or delete your data, to object to or restrict how we use it, and to withdraw consent at any time. Parents can see, change and delete everything about their child from the account page, or ask us to do it. To make a request, email support@pipstemgames.com. We reply within one month. If you are unhappy, you can complain to the UK Information Commissioner's Office (ico.org.uk), or to your local data protection authority.
California and other US states: we do not sell or share personal information for cross-context behavioural advertising, and we honour Global Privacy Control signals.
Security
Data is encrypted in transit and at rest. Access to every record is limited by database rules so a family can only reach its own children, and a teacher only the pupils in their classes. Passwords are hashed.
Cookies
See our cookie notice for the full list, and use Cookie settings to change your choices at any time.
Changes
If we change this notice in a way that matters, we will tell account holders by email before it takes effect.