Last updated 2026-10-18. Pip Prep is run by Yiu Ming Cheung, a sole trader trading as Snaplex Agentic (ABN 16 792 448 795), in Australia. Questions: pip@pipprep.com.au.
Pip Prep is a learning app with NAPLAN-style practice for Australian children in Years 2 and 3 (about 7 to 9 years old), offered in Australia only. A child looks after Pip the capybara by answering questions; a parent or carer holds the account. We handle personal information under the Australian Privacy Principles.
| What | Why | Where it is kept |
|---|---|---|
| Parent or carer email address | To send a six-digit sign-in code, to send one reminder before a Google Play free trial ends and the first payment is taken, and to know which family a child belongs to. | Our server. |
| Child nickname and year level | To pick questions at the right level and greet the child by the name the family chose. | The device, and our server once a parent signs in. |
| Learning activity: answers, right or wrong, hints used, time taken and practice-test results; and Pip's progress in the app: growth, gems, clothes and decorations, game best scores and story progress | To choose the next questions, show the parent's report, and grow Pip. | The device. On the Family plan, also our server as a cloud save; the last 20 versions are kept so a bad save can be undone. |
| Writing practice | The app shows a NAPLAN-style prompt and a 40-minute clock. Your child writes on paper. | Nothing from the page is collected. A save from an earlier version of the app may still hold writing that was marked from a photo then (the words read from the page, marks and comments); it stays in the save until the account is deleted. |
| "Report this answer": the words reported and any note | So a person can read what Pip said and fix it. | Our server. |
| Google Play purchase: a purchase token, the plan, its state and renewal date, whether it renews, the price it renews at, whether a free trial is running, and an account identifier we make from our own records (not your email) | To check with Google that the Family plan was paid for, and to follow renewals and cancellations. | Our server and Google Play. Google takes the payment; we never see card details. |
| Sign-in tokens and device pairing codes, and when each paired device was added and last used | To keep a child's device signed in without a password, and to let a parent sign every device out. | Our server keeps only a hash of each one. |
| Internet (IP) address or email address, with a count of requests in the hour | To stop floods of sign-in codes, licence codes and error reports. | Our server. |
| Crash reports: what failed and where in the code, the app version, device model, system, screen size and language (in a browser, the page and browser), and, when the device is paired to a child, a random account number | To find and fix bugs. | Sentry (see below). Crash reports are set up to leave out email addresses and the contents of requests to our server. |
Each service below receives only what it needs for its job, under its own privacy terms.
Nobody else. We do not sell, rent or share personal information for advertising. The privacy laws of Singapore, the United States and Japan are not the same as Australia's.
Pip Prep is made for children aged about 7 to 9, used with a parent's account. From a child we collect only a nickname (which can be anything), a year level, how they went on the questions, and their progress in Pip's games. There is no chat, and nothing in Pip Prep connects your child with other people. If you think a child has given us more than this, email us and we will delete it.
Everything travels over HTTPS. Sign-in codes stop working after 10 minutes and are stored only as keyed hashes. Sign-in tokens and pairing codes are stored only as hashes, and a parent can sign every device out from the app. Access to the production database is limited to the people who run the service. The Android app lists microphone access because of a voice feature that is switched off. Pip Prep never turns the microphone on, and nothing is recorded.
| What | How long |
|---|---|
| Sign-in codes | 24 hours after they are sent. |
| Request counts by internet address or email address | 7 days. |
| Signed-out or expired sign-ins, and expired pairing codes | 30 days. |
| Daily counters for a device that was never paired to an account | 90 days. |
| "Report this answer": the words, the note, and which family and child sent it | 12 months. After that we keep only a count of what was reported, and when. Deleting the account removes the family and child from a report at once. |
| Email address, child profiles, cloud saves and their history, device pairings and purchase records | Until you delete the account. |
| Progress on a device | Until you reset progress or remove the app. |
| Crash reports and error summaries | Sentry keeps crash reports for its standard period; error summaries stay in our private code repository as a record of the fix. |
| Our server's technical logs (which part of the server was called, when, and the result; this can include an internet address) | Kept by Railway for a limited period under its own settings. |
When this policy changes, we update this page and the date at the top.
NAPLAN is a trademark of ACARA. Pip Prep is not affiliated with, endorsed by or authorised by ACARA.