What we hold, and how we hold it.

Who we are

Pepper is operated by Centa Partners (we, us, our). Pepper is designed to help households carry less mental load by helping them decide what deserves attention, what can wait, and what can safely be put down for now.

For the purposes of the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), Centa Partners is the entity responsible for the personal information described in this policy.

Website: withpepper.au
Privacy contact: hello@withpepper.au

What Pepper does

Pepper is a household judgment partner. It helps households understand what deserves attention, what can wait, and what can safely be put down.

Pepper is not designed to monitor household members, track behaviour for advertising, or maximise engagement. Pepper is designed to reduce mental load.

Information we collect

Account information

We may collect:

• name
• email address
• account identifiers
• authentication information

Household information

Information provided during onboarding and ongoing use, including:

• household members
• relationships
• ages and life stages
• household responsibilities
• communication preferences
• household priorities
• stress points
• things Pepper should pay attention to
• things Pepper should leave alone

Pepper memory

Pepper may store information that helps it become more useful over time, including household facts, preferences, recurring responsibilities, important dates, recurring stressors, boundaries, correction history, and household priorities.

Pepper keeps these kinds of information separate:

AI-generated judgments are never treated as facts.

Generated content

Pepper may store household understanding summaries, operating views, Sunday reflections, explanations, correction history, and memory updates.

Documents, notes and calendars you share

When you ask Pepper to read something, it processes what you give it so it can turn it into items on your board. This happens today and includes:

• Photos of notes or forms (for example a school note): the image is read by our AI provider and is not stored by Pepper, but the items Pepper reads out of it are kept on your board.
• Text you forward or paste (for example an email you choose to share): processed in the same way.
• Calendar events you add or import: used to work out what each event needs. The event details are kept on your board so Pepper can help you with them.

Sensitive information. Notes, calendars and forms can contain health information, information about children, and other sensitive details. Pepper does not ask for sensitive information it does not need, and you choose what to share. By sharing a note, photo, forwarded text or calendar event, you consent to Pepper processing the information in it, including any sensitive information, to provide the service.

Services you may connect in future

In future you may be able to connect additional accounts (for example an email mailbox). Pepper will only access these with your explicit permission, and we will update this policy before that begins.

What Pepper does not collect

Pepper is designed around data minimisation. We do not intentionally collect information that is not required to provide the service. Pepper is not intended to become a surveillance tool.

How we use information

We use information to:

• provide Pepper
• personalise household understanding
• generate weekly reflections
• generate operating guidance
• remember corrections
• improve future Pepper outputs
• maintain service security
• improve reliability and quality

We will not use your information for materially different purposes without notifying you and, where required, obtaining consent.

AI processing

Pepper uses artificial intelligence to generate summaries, reflections, explanations, and household judgments. This may include sending relevant household context and memory to AI service providers for processing.

• Data is transmitted securely using encrypted server-side API calls.
• We aim to send only information necessary for the task being performed.
• AI-generated outputs are advisory in nature.
• Pepper may be wrong.
• AI-generated outputs are not treated as facts.
• Pepper may retain generated outputs so users can revisit them and so future outputs can be improved.

Pepper currently uses Anthropic's Claude models for AI processing. Anthropic's commercial API does not use customer inputs to train public models.

Legal basis

We collect and handle personal information where reasonably necessary to provide Pepper. This includes:

Consent

When you create an account, complete onboarding, provide household information, or connect optional services.

Contractual necessity

To provide Pepper and associated services.

Legitimate interests

To improve the reliability, quality, and safety of the service.

Legal obligations

Where required under Australian law.

Sharing and disclosure

We do not sell, rent, or trade personal information. Information may be shared only with trusted service providers required to operate Pepper.

If you share your household, the people you invite become members and can see the household's items, who is holding them, and what has been marked done. Inviting someone shares that household information with them.

Information may also be disclosed where required by law.

Data storage and security

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, and disclosure. Measures include:

• encryption in transit (TLS / HTTPS)
• encryption at rest
• row-level security controls
• authenticated access controls
• server-side AI processing
• environment-variable-based secret management

No system can guarantee absolute security. If a notifiable data breach occurs, we will comply with Australian Notifiable Data Breach requirements.

International processing

Some service providers used by Pepper process data outside Australia. In particular, our AI provider (Anthropic) and some infrastructure providers are located in the United States, so household context (and the text or images you ask Pepper to read) may be processed there. Providers may also be located in Australia and the European Union. We take reasonable steps to ensure overseas recipients handle your information consistently with the Australian Privacy Principles; by using Pepper, you acknowledge that your information may be processed overseas as described.

Data retention

We retain personal information only as long as reasonably necessary to provide Pepper, maintain household memory, improve future outputs, meet legal obligations, and maintain security.

Users may request deletion of their data at any time. Where legally permissible, personal information will be deleted or de-identified within a reasonable period following a verified request.

Access, correction and deletion

You may request:

• access to your information
• correction of inaccurate information
• deletion of your information
• export of your information

Requests may be made by contacting hello@withpepper.au. We aim to respond to verified requests within 30 days.

Children

Pepper may store information about household members, including children, where that information is provided by a parent, guardian, or household account holder. Pepper is not intended for children to use independently.

When a note or form is about a child, the structured items Pepper reads from it (for example "permission slip due Friday") are kept on your board even though the original photo is not stored by Pepper. You can review, correct or delete these at any time.

Analytics

Pepper may collect limited analytics to understand product usage and improve reliability. Where possible, analytics are aggregated, analytics are minimised, and unnecessary behavioural tracking is avoided. Pepper is not designed to profile users for advertising purposes.

Quality signals. To understand whether Pepper is useful and where it gets things wrong, we keep a privacy-safe record of signals, not content: for example, that a suggestion was accepted, changed or dismissed, an item's category, an estimated cost, and whether something was completed. This record does not contain your calendar text, note images, email content, personal notes, child names, or medical details. If we ever want to keep a raw example to improve Pepper, that requires your separate, explicit opt-in, and it is off by default.

Changes to this policy

We may update this Privacy Policy from time to time. Where material changes occur we will update the effective date, notify active users where appropriate, and seek consent where required.

Contact

For privacy questions, requests, corrections, deletion requests, or complaints, please get in touch. We read every message. If you make a privacy complaint, we will acknowledge it and aim to respond within 30 days. If you are not satisfied with how we handle it, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.