Security

Pip should feel cute, not careless.

Pip asks for sensitive context, so the public site needs plain trust boundaries before anyone connects accounts.

Read-only account data

Pip connects account and transaction data to calculate Spendable Cash Today. The beta product is an insight layer.

No money movement

Pip does not initiate payments, transfers, card payments, ACH transactions, or other money movement.

Server-side credentials

Provider access credentials are handled server-side. Browser code receives short-lived connection artifacts only when needed.

Deletion path

Beta users can ask Pip to delete stored financial data before leaving the product.

What Pip stores in the beta.

Pip stores normalized financial data, account metadata, sync logs, user settings, AI chat context needed for product behavior, and product events needed for beta operations.

Pip does not store bank usernames or passwords. Raw provider payloads should stay minimal and exist only where needed for troubleshooting or normalization.

The current terms say Pip is not financial, tax, investment, credit, or legal advice. The number is a decision-support signal from available data.

Join when the beta opens wider.

Get a note when Pip is ready for more testers.

No spam. Just beta access when Pip is ready for more testers.