Privacy Policy

About this policy

Everything is Something ("we", "us", "our") is a sole trader operating in Victoria, Australia. This Privacy Policy explains how we collect, use, store and disclose personal information when you use Pip and any other products or services we operate (collectively, the Services).

By using the Services, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Services.

We are committed to complying with applicable privacy laws, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Where you are located in another jurisdiction, additional or different privacy rights may apply to you — we describe these where relevant below.

---

What information we collect

Information you provide directly

• Your email address, when you submit it to receive a taste code or create an account
• Profile and preference data you provide when setting up or completing a taste profile
• Payment information, when you subscribe to Pip+. Payment transactions are processed directly by Apple (App Store) or Google (Google Play). Subscription status, purchase receipts, and entitlement data are then passed to RevenueCat, our subscription management platform, which communicates that information to us. Neither we nor RevenueCat store your payment card details

Information collected automatically

• Usage data, including features used, recommendations generated, interactions, and session activity
• Device and browser information, including browser type, operating system, and screen resolution
• Approximate location inferred from your IP address
• Referral source and session identifiers

Information from third parties

• Apple App Store and Google Play may provide us with limited transaction and subscription status data associated with your account, such as whether a subscription is active. This is subject to their respective privacy policies.

We do not collect sensitive information (as defined under the Privacy Act), such as health, financial, or biometric data, and we ask that you do not submit any.

---

How we use your information

We use the information we collect to:

• Provide, operate and improve the Services, including generating personalised taste profiles and recommendations. Your taste preferences and profile data are transmitted to the Anthropic Claude API to generate your results — this is the AI component of Pip's recommendation engine, which works alongside our own algorithmic matching
• For Pip+ users who use combined recommendations, both participating users' taste profile data is processed together to generate shared results. See the Terms of Use for more detail on this feature
• Where you have explicitly enabled a public profile in your account settings (off by default), display your taste profile, taste code, and recent activity to other users of the Services. Turning your profile private at any time will remove your information from other users' view
• Manage your account and subscription status
• Process and verify subscription status via the App Store or Google Play
• Deliver your taste code and related communications you have opted into
• Analyse aggregate usage patterns to understand and improve product performance
• Detect and prevent abuse, fraud or misuse of the Services
• Comply with our legal obligations

We will not use your personal information for purposes materially different from those described above without your consent.

---

Email communications

If you provide your email address, we will use it to deliver your taste code, confirm your account, and send transactional messages related to your use of the Services (such as subscription receipts and account notices). These communications are necessary to operate the Services and are not subject to opt-out while your account is active.

We may also send product updates, curation recommendations, and other marketing communications about Everything is Something. You control these separately via the notification preferences in your account settings — they are off by default and will only be sent if you have opted in. You can withdraw that consent at any time through your settings or by following the unsubscribe link in any email.

---

Third-party services

To operate the Services, we use the following third-party providers that may process your data:

We take reasonable care in selecting third-party providers. We do not sell your personal information to any third party.

---

International data transfers

We operate globally and your personal information may be transferred to and stored on servers located outside your country of residence, including in the United States. By using the Services, you acknowledge and consent to this transfer. We take reasonable steps to ensure that providers handling your data maintain appropriate protections.

If you are in the European Economic Area, United Kingdom or Switzerland: We rely on standard contractual clauses or other lawful transfer mechanisms when transferring personal data outside these regions. You may have additional rights under the GDPR or UK GDPR — see "Your rights" below.

If you are in California: You may have additional rights under the California Consumer Privacy Act (CCPA) — see "Your rights" below.

---

Data storage and security

We implement reasonable technical and organisational measures to protect your personal information from unauthorised access, disclosure, alteration or destruction. However, no transmission or storage method is completely secure and we cannot guarantee absolute security. We will notify you of any data breach as required by applicable law.

---

Data retention

We retain personal information for as long as necessary to provide the Services and fulfil the purposes described in this policy, or as required by law. If you delete your account or request deletion of your data, we will remove your personal information within a reasonable timeframe, except where retention is required for legal or accounting purposes.

---

Your rights

Depending on your location, you may have the following rights regarding your personal information:

• Access — request a copy of the personal information we hold about you
• Correction — request correction of inaccurate or incomplete information
• Deletion — request deletion of your personal information
• Portability — request your data in a structured, machine-readable format (where applicable)
• Objection / restriction — object to or request restriction of certain processing activities
• Withdraw consent — where processing is based on consent, withdraw it at any time

To exercise any of these rights, contact us at the address below. We will respond within a reasonable timeframe and in accordance with applicable law.

Australian users: If you are unsatisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner at oaic.gov.au.

EEA / UK users: You may also have the right to lodge a complaint with your local data protection supervisory authority.

---

Cookies and tracking

We may use cookies, local storage and similar tracking technologies to operate the Services and collect usage data. You can configure your browser to refuse cookies, though this may affect the functionality of the Services.

---

Children and minors

The Services are intended for users aged 16 and over, consistent with Australian legislation restricting access to certain online platforms for under-16s. We do not knowingly collect personal information from anyone under the age of 16. If you are the parent or guardian of a minor who has created an account, please contact us and we will close it and remove their data.

Please also note that Pip recommends content across all classifications, including material rated for mature or adult audiences. We do not currently apply age-based content filtering to recommendations. Parents and guardians should be aware of this if a minor in their care is using the Services.

---

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last revised" date at the top of this document. Your continued use of the Services after any update constitutes acceptance of the revised policy.

---

Contact

For privacy-related questions, access requests, or complaints: