Privacy

Your things stay yours.

Last updated 19 August 2026

Kip is a record of when you last did things. That record is yours. This page says where it lives and what leaves your phone, and it is short because very little does.

The short version

• Kip works with no account. There is nothing to sign up for.
• Your history is stored on your phone, encrypted.
• There is no analytics, no crash reporting, no advertising, and no tracking.
• Kip makes one request to a server, and it says nothing about you.

What is on your phone, and only your phone

Everything you put into Kip — the things you track, when you last did them, the notes you attach, the Spaces you sort them into — is stored in a database on your device. That database is encrypted, and the key that opens it lives in your phone's own secure storage.

We cannot read any of it. Not because we promise not to, but because we do not have it. There is no server holding your history to read.

The one request Kip makes

Kip comes with starter packs — a set for a home, a car, a pet — so the app is useful before you have typed anything. When your phone has a connection, Kip asks our server one question: have any of those packs changed?

That request carries nothing about you. No identifier, no account, nothing you track. Our server sees the internet address the request came from, which is what every server sees when any device asks it anything, and nothing is recorded against it. If the request fails, or you are offline, Kip carries on with the packs built into the app.

Reminders

Kip's reminders are scheduled by your phone, on your phone. There is no push service, no token, and nothing sent to us when one fires. If you never allow notifications, Kip still works — it just cannot tap you on the shoulder.

Your backup

Kip keeps an encrypted backup of your history in its own storage on the device, and that backup is included when your phone backs itself up. So a copy may sit in your iCloud or computer backup, under your own Apple account and Apple's terms. We have no access to it.

The key that opens your data stays in your phone's secure storage and is never uploaded to us. That is why moving to a new phone uses your recovery code rather than a password we hold.

Taking it with you, and deleting it

Settings has Export everything, which hands a file to your phone's share sheet. Where it goes from there is your choice, not ours.

Settings also has Delete everything, which removes your history from the device. Because we never had a copy, there is nothing for us to delete on our side and nothing you need to ask us for.

Children

Kip is not directed at children, and collects nothing from anyone of any age.

What will change, and when

This version of Kip has no accounts, no syncing, no sharing, and no assistant. Those are being built, and each one moves some data off the device on purpose:

• An account, if you choose to make one, with Apple, Google, an email address or a phone number.
• Syncing, which uploads your history so it reaches your other devices.
• A shared Space, which shows the things in it, and who logged them, to the people you invite — that Space and nothing else.
• Kip AI, which sends what you type or say, and the part of your board needed to answer it, to a language model through a server we run. It needs an account.

Every one of those is something you turn on. None of them exists in the version this page describes, and this page will be updated before any of them ships rather than after.

Who is responsible

Kip is made by Michael Parent, in Ontario, Canada.

Questions about this policy, or about your own data, go to mike@readtheworld.today.