Who we are
Pepper is operated by Centa Partners (we, us, our). Pepper is designed to help households carry less mental load by helping them decide what deserves attention, what can wait, and what can safely be put down for now.
For the purposes of the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), Centa Partners is the entity responsible for the personal information described in this policy.
Website: withpepper.au
Privacy contact: legal@centapartners.com.au
What Pepper does
Pepper is a household judgment partner. It helps households understand what deserves attention, what can wait, and what can safely be put down.
Pepper is not designed to monitor household members, track behaviour for advertising, or maximise engagement. Pepper is designed to reduce mental load.
Information we collect
Account information
We may collect:
- name
- email address
- account identifiers
- authentication information
Household information
Information provided during onboarding and ongoing use, including:
- household members
- relationships
- ages and life stages
- household responsibilities
- communication preferences
- household priorities
- stress points
- things Pepper should pay attention to
- things Pepper should leave alone
Pepper memory
Pepper stores the information you give it and the things it generates, including household facts, preferences, boundaries, household priorities, and your corrections.
Pepper keeps these kinds of information separate:
Facts
What is true about your household.
Preferences
What you have told us you want.
Corrections
When you tell us Pepper got something wrong. Treated as the most authoritative signal.
AI judgments
What Pepper thinks, offered as a view.
AI-generated judgments are never treated as facts.
As Pepper develops, it may begin to notice patterns over time. It does not do this yet. If it does, those patterns will be kept separate from facts and clearly marked as Pepper's inferences.
Generated content
Pepper may store household understanding summaries, operating views, Sunday reflections, and explanations.
Future connected services
If you explicitly connect additional services in the future, Pepper may process information from calendars, email accounts, uploaded documents, invitations, and OCR-scanned content. Pepper will only access these services with your permission.
What Pepper does not collect
Pepper is designed around data minimisation. We do not intentionally collect information that is not required to provide the service. Pepper is not intended to become a surveillance tool.
The lines we will not cross
- ✕ We do not collect unnecessary personal information.
- ✕ We do not sell personal information.
- ✕ We do not use personal information for advertising.
How we use information
We use information to:
- provide Pepper
- personalise household understanding
- generate weekly reflections
- generate operating guidance
- remember corrections
- improve future Pepper outputs
- maintain service security
- improve reliability and quality
We will not use your information for materially different purposes without notifying you and, where required, obtaining consent.
AI processing
Pepper uses artificial intelligence to generate summaries, reflections, explanations, and household judgments. This may include sending relevant household context and memory to AI service providers for processing.
- Data is transmitted securely using encrypted server-side API calls.
- We aim to send only information necessary for the task being performed.
- AI-generated outputs are advisory in nature.
- Pepper may be wrong.
- AI-generated outputs are not treated as facts.
- Pepper may keep recent generated outputs so you can revisit them. Older drafts are removed over time. Generated outputs are Pepper's view, not facts, and are not used to build a profile of you.
Pepper currently uses Anthropic's Claude models for AI processing. Anthropic's commercial API does not use customer inputs to train public models.
Legal basis
We collect and handle personal information where reasonably necessary to provide Pepper. This includes:
Consent
When you create an account, complete onboarding, provide household information, or connect optional services.
Contractual necessity
To provide Pepper and associated services.
Legitimate interests
To improve the reliability, quality, and safety of the service.
Legal obligations
Where required under Australian law.
Sharing and disclosure
We do not sell, rent, or trade personal information. Information may be shared only with trusted service providers required to operate Pepper.
| Service | Purpose |
|---|---|
| Supabase | Database and authentication |
| Anthropic | AI processing |
| Vercel | Hosting and server functions |
| Apple | App distribution |
Pepper does not connect to any calendar or email today. If you choose to connect a calendar in future, that may involve Google or Microsoft. We will name them as active providers here at that time, and only with your explicit permission.
Information may also be disclosed where required by law.
Data storage and security
We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, and disclosure. Measures include:
- encryption in transit (TLS / HTTPS)
- encryption at rest
- row-level security controls
- authenticated access controls
- server-side AI processing
- environment-variable-based secret management
No system can guarantee absolute security. If a notifiable data breach occurs, we will comply with Australian Notifiable Data Breach requirements.
International processing
Some service providers used by Pepper may process data outside Australia. This may include providers located in Australia, the United States, and the European Union. We take reasonable steps to ensure overseas providers maintain appropriate security and privacy standards.
Data retention
We retain personal information only as long as reasonably necessary to provide Pepper, maintain household memory, improve future outputs, meet legal obligations, and maintain security.
Users may request deletion of their data at any time. Where legally permissible, personal information will be deleted or de-identified within a reasonable period following a verified request.
Access, correction and deletion
You may request:
- access to your information
- correction of inaccurate information
- deletion of your information
- export of your information
Requests may be made by contacting legal@centapartners.com.au. We aim to respond to verified requests within 30 days.
Children
Pepper may store information about household members, including children, where that information is provided by a parent, guardian, or household account holder. Pepper is not intended for children to use independently.
Analytics
Pepper does not collect analytics today. We may introduce limited, aggregated analytics in future to understand product usage and improve reliability. If we do, we will name the provider in the providers list above before any collection begins, keep it aggregated and minimal, and avoid unnecessary behavioural tracking. Pepper is not designed to profile users for advertising.
Changes to this policy
We may update this Privacy Policy from time to time. Where material changes occur we will update the effective date, notify active users where appropriate, and seek consent where required.
Contact
For privacy questions, requests, corrections, deletion requests, or complaints, please get in touch. We read every message.