Privacy Policy

PI Press is operated by Yakihonne LLC, 140 E Broadway, Jackson Hole, Wyoming 83001, United States ("we", "us"). We are the controller of the personal data described on this page. You can reach us at info@pipress.xyz.

This page covers the PI Press website and the PI Press mobile app.

What we keep depends on how you sign in.

• Email: your email address. If you set a password, we keep a one-way hash of it (bcrypt), never the password itself.
• Google or Apple: the account identifier, the email address and the name they send us when you approve the sign-in. We do not receive your Google or Apple password.
• Nostr: your public key, and a copy of your public Nostr profile and relay list. Your secret key is never sent to our servers. If you paste it instead of using a browser extension, it stays in your browser, in memory and in an encrypted store on your device.

For every account we also keep a username, your role, whether the account is active, your plan, the assistant model you chose, the date the account was created and the date of your last sign-in.

Each sign-in creates a session that lasts 24 hours. With it we record the browser identification string your browser sent and the network address the request arrived from.

When a new account is created, we record once where it came from. This happens for every new account, whether or not a referral link was used.

• How you arrived: directly, through a referral link, through a QR code, or with an invite code typed into the app, and which link or code it was.
• The sign-in method you used: email, Google, Apple or Nostr.
• Whether you were on the website, the website on a phone, or the mobile app, and the app version.
• The name of your browser and operating system, for example "Chrome · macOS".
• Your country. We work it out on our own server from the network address of the request, using a country database stored on that server. The address is not saved in this record and is not sent to anyone for the lookup.
• The first language your browser asks for, and your time zone.
• If you arrived through a referral link, the name of the website you came from. We keep the site name only, not the page.

If the link you used carries a trial, the trial is added to your account at that moment.

A referral link is a PI Press address ending in /r/ and a short code, made by us and sometimes assigned to a member or a partner (the "link holder").

When you open a referral link and you are not signed in, we count the visit. One visit is recorded per link, per browser, per day. The record holds a scrambled (hashed) form of a random number kept in a cookie in your browser, the date, whether you came by link or QR code, whether you were on the web or a phone, your country, and the name of the website you came from. It does not hold your network address. Programs that fetch a link only to draw a preview of it are not counted.

If you then create an account, the link holder can see, for each person who signed up through their link:

• a first name, or if there is none an email address with the middle hidden (for example m***@gmail.com), or otherwise only "A member";
• the date, the sign-in method, web or app, the browser and operating system, and the country;
• whether a trial was given.

The link holder does not see your full email address, your account, or anything you do in PI Press. Our own administrators see the full record described in section 3 together with the account it belongs to, and can export it as a file.

If you hold a link and we have switched on "Invited by" for it, your display name is shown on the sign-up screen to people who open your link.

A link that has been withdrawn, has passed its end date or has reached its limit still opens the sign-up screen, and no link holder is credited. Nobody is credited for their own account.

• Your conversations with the PI assistant.
• Files you upload: the file, its name, type and size, and the text we extract from it so the assistant can read it.
• Documents, reports, research questions and scenarios you create.
• Your research interests, bookmarks, hidden items, alerts, the researchers you follow, and challenges you raise against claims.
• Researcher identities you connect, such as an ORCID record.
• Messages you send through the contact form or the waiting list: your role, the topic, your email address, the message, and the network address the request arrived from.

• For each request the assistant handles for you: the time, the feature, the model used, the amount of text processed and what it cost in credits. This is how your weekly allowance is counted.
• Actions you take on claims in the feed, such as bookmarking, hiding or rating one.
• A log of which claims were sent to you as notifications, by which channel and when.
• If you use the mobile app with notifications on, the device token needed to deliver them.

When you read a blog or news article, your browser sends a random number it keeps in its own storage. We scramble it with a key that changes every day and use it only to avoid counting the same reader twice that day.

We count page views on the website with a self-hosted, cookieless analytics tool. It records which pages are visited, not who visits them, and sets no cookie. We use no advertising trackers.

• Card payments are handled by Stripe. We keep Stripe's identifier for you and for your saved payment method, the card brand and its last four digits.
• Your full card number is entered with Stripe and does not reach our servers.
• Purchases in the mobile app are handled by Apple or Google. We keep the transaction identifier and the product bought.
• We keep your credit balance and a list of the top-ups and charges made against it.
• Lightning payments ("zaps") are made over the Lightning network. A zap produces a public receipt on Nostr; that is how zaps work.

We set four cookies. All are our own (first-party) and none can be read by scripts on the page.

Your browser also keeps some things on your own device that are not sent to us as cookies: your text-size and reading-width settings, the model you last chose, which onboarding hints you closed, the list of Nostr accounts you used on this browser (public key and public profile), your Nostr secret key in encrypted form if you pasted one, your Lightning wallet connections, and the random number used for article view counts.

These cookies are needed to sign you in and to count referral sign-ups. We set no advertising or analytics cookies, so we do not show a cookie banner.

• To sign you in and keep your account secure.
• To provide the service: answer your questions, read the files you give the assistant, and keep your work.
• To count usage against your plan and to take payment.
• To know where new accounts come from: which links work, web or app, and from which countries.
• To send you the sign-in codes, notices and digests you asked for.
• To answer messages you send us.

We use other companies to run PI Press. They receive only what their part needs:

• Supabase hosts our database.
• Amazon Web Services stores uploaded files.
• OpenRouter, and through it the companies that make the AI models, receives the messages you send the assistant and the text of files you ask it to read, in order to produce the answer. Some features call OpenAI or Anthropic directly.
• Brave Search, or DuckDuckGo when Brave is unavailable, receives the search queries the assistant makes when it looks something up on the web.
• Resend delivers our emails and so receives your email address and the email.
• Stripe, Apple and Google handle payments. Google and Apple also handle sign-in if you choose them.
• Google's notification service delivers notifications to the mobile app.
• A self-hosted analytics tool receives, for each page view, the page address, the site you came from, and your browser, system, screen size, language and country. It does not set a cookie or receive your account.

We do not sell your personal data. Each provider handles what it receives under its own privacy policy and terms. We send only what is needed to answer your request. We may disclose data when the law requires it.

Nostr is a public network. Your Nostr profile, and anything you publish through PI Press to Nostr — such as comments, reactions and zaps — is sent to public relays run by other people. We cannot edit or delete it there, and anyone can read it.

Sessions expire after 24 hours and expired sessions are deleted. You can delete a conversation, an uploaded file or a document yourself at any time. The referral cookie is removed when your account is created.

We keep your data while your account exists. When you delete your account in Settings, we delete it, except records we must keep by law, such as payment records.

You can change your profile and your sign-in methods in Settings. You can ask us for a copy of your data, to correct it or to delete it, by writing to info@pipress.xyz. We answer within 30 days.

Most of the providers listed in section 10 are in the United States, so your data is processed there.

Passwords are stored only as one-way hashes. Sign-in cookies cannot be read by scripts and are sent only over encrypted connections.

PI Press is not intended for people under 13.

When we change this policy we change the date at the top. For a significant change we will tell you by email before it takes effect.

Questions about this page or about your data: info@pipress.xyz. Yakihonne LLC, 140 E Broadway, Jackson Hole, Wyoming 83001, United States.