Pip keeps your secrets 🤫
This is our privacy policy — first the friendly version, then the details. Effective July 12, 2026.
The short version
- 🐛 Kids never have accounts. A kid profile is a nickname and an avatar emoji — no email, no birthday, no photo.
- 🚫 No ads, no trackers, no selling data. Not in the kid experience, not anywhere.
- 👨👧 One grown-up account holds the whole family's reading — that account is how a parent gives (and withdraws) consent.
- 📦 Export everything with one button, and delete everything with another. Both are real and complete.
What we collect, and why
Grown-up account: your email address and a password. Sign-in is handled by AWS Cognito — your password is never visible to us. Your email is used for the verification code and account recovery, nothing else.
Family PIN: stored scrambled (hashed) — it protects settings, editing, and the book shop from curious young readers.
Reader profiles: a name (a nickname is perfect) and an avatar emoji. That's the whole list — we ask for nothing else about your kids, on purpose.
Reading data: the books you log (title, author, pages, ISBN, cover link), reading sessions (dates, pages, minutes), star ratings, and earned badges. This is your family's reading story, and it exists so you can look back on it.
What we never do
No advertising. No third-party analytics or trackers. No selling or sharing your data. No social features, followers, or leaderboards. No kid email addresses, ever. The kid experience never shows shopping links or leaves the app.
Kids and consent
Children use Chapterpillar through profiles inside a parent's account — they never have credentials of their own. Creating the account and adding reader profiles is how a parent or guardian gives consent for this data to exist; deleting a profile (or the whole account) withdraws it, immediately and completely. We collect the minimum needed for the product to work — this is our approach to COPPA and GDPR-K by construction, not by checkbox.
Book covers and lookups
Book covers are loaded directly from Open Library and Google Books — when a cover displays, those services see your device's network address, like any image on the web. Scanning a barcode or looking up an ISBN sends that ISBN to the same services to fetch title and author. We chose these sources because they're open, free, and require no account.
Book shopping links
Behind the grown-up PIN (and only there), Chapterpillar shows book recommendations with links to Amazon. As an Amazon Associate, Chapterpillar earns from qualifying purchases. Once you're on Amazon, Amazon's own privacy policy and cookies apply — nothing about your family's reading is sent with the link beyond the book you clicked.
Where your data lives
On Amazon Web Services in the EU (Ireland region), encrypted at rest. There is no Chapterpillar office full of servers — and no employee dashboard browsing family data.
Your tools
In grown-up settings you can: export your family's complete data as a JSON file, delete a reader's profile and every book with it, or delete the entire account — which removes every trace, including your login. These aren't support tickets; they're buttons, and they work immediately.
Changes and contact
If this policy changes in a way that matters, we'll say so plainly on this page before it takes effect. Questions? hello@chapterpillar.com — a human reads it.