Privacy Policy
Pipeline is a career and education planning app. This policy describes what data Pipeline handles, where it goes, and the choices you have. The short version: your plan lives on your device and (when you sign in) in your synced account; we don't run third-party ad or analytics trackers, and we don't sell your data.
Data you give us
- Planning profile. What you tell Pipeline during onboarding and replanning: your school, field of study, career aspiration, interests, concerns, timeline, and weekly availability.
- Your route. Milestones, action steps, check-ins, weekly reviews, streaks, and route revision history.
- Account identity. If you create an account: your email address, or your Google/Apple sign-in identity (name and email). Apple lets you hide your email; Pipeline respects that. Your Google profile photo is imported only if you explicitly choose to import it.
- Public profile. A display name, bio, and photo are optional and only exist if you create them.
Where your data lives
Pipeline is local-first: everything works on your device. When you sign in, your profile, route, streak, and revision history sync to Pipeline's backend (hosted on Supabase) so your plan follows you across devices. Anonymous exploration uses an anonymous account with the same protections.
What's public
If you create a public profile, your display name, bio, and profile photo are visible to other Pipeline users — in Communities posts and replies. Profile photos are served from a publicly readable storage bucket: anyone with the photo's link can view it. Your planning profile and route are never public.
AI processing
Pipeline's route generation, milestone suggestions, and AI Counselor are powered by Anthropic's Claude models, called through Pipeline's own servers. To do this, relevant parts of your planning profile, route, and counselor messages are sent to Anthropic for processing. Under Anthropic's commercial API terms, that data is not used to train their models. Don't include information in your plan or chats that you wouldn't want processed this way.
Purchases
Pipeline Pro subscriptions are processed entirely by Apple. Pipeline never sees your payment details. We receive the verified subscription status (product, active/expired, expiry date) tied to your account so Pro features work across your devices.
Analytics and tracking
Pipeline records a small set of product events (like "onboarding completed") locally on your device to improve the app. There are no third-party analytics or advertising SDKs, no cross-app tracking, and no sale or sharing of personal data for advertising.
School logos
When you search for a school during onboarding, Pipeline asks Google's public favicon service for that school's logo, which means the school's own public web domain (for example stanford.edu) is sent to Google. No account, name, or device identifier is attached — Google sees the request the same way it would any ordinary web request, including your IP address. It is the only third-party service the app contacts; everything else goes to Pipeline's own backend or to Apple.
Notifications
Daily focus and weekly review reminders are optional, scheduled locally on your device, and controlled in Settings. Nothing about them leaves your phone.
Deleting your data
You can delete your account from the Profile tab inside the app. This permanently removes your synced plan data, counselor conversations, uploaded photos, subscription entitlement records, and the account itself from Pipeline's servers, and clears local data from the device. Subscriptions are cancelled separately through your Apple ID settings.
Deletion covers your community activity as well: your posts, your comments, resources you submitted, your community membership, and any reports or blocks you created. Community content is removed outright rather than kept under an anonymous or "deleted user" label. One consequence worth knowing before you delete: replies belong to the post they sit on, so removing your posts also removes replies other people left on them. If you joined the waitlist on our website using the same email address, that entry is deleted too.
Deletion is immediate and cannot be undone. We keep nothing about the account afterwards, so there is no copy to restore and nothing left to request a further erasure of.
Children
Pipeline is for students planning their education and career, and is not directed at children under 13. If you believe a child under 13 has created an account, contact us and we'll delete it.
Changes and contact
If this policy changes materially, the app will say so. Questions or requests: owenosorio13@gmail.com.