How Pophie Protects Your Privacy

Last updated: July 11, 2026 · Covers Pophie. For website, app, and legal terms, see the Privacy Policy.

Pophie is designed around one idea: process as much as possible on the device, use the cloud only where a feature needs it, and never keep raw audio or video as recordings. This page is the reference for how she handles your data and which controls you have.

1. Recording & audio/video

Pophie does not keep continuous recordings. She uses her camera, microphone, and other sensors to interact with you, but raw audio and video are never stored as long-term recordings. Depending on the feature, real-time processing happens on the device or in the cloud.

• On-device first. Face recognition, gestures, wake words, and basic environmental awareness are processed locally. Sensor signals are used in the moment and discarded — never kept as a record.
• The cloud processes, not stores. Deeper conversation, visual understanding, and Skills may use the cloud. Raw audio and video are not kept after processing; voice conversations may be transcribed into text, which may become part of long-term memory.
• Closed eyes are an honest boundary. When her eyes are closed, video is not uploaded. Audio may still be processed — that is how you can say "Open your eyes" to leave private mode, and how you keep talking with her in the meantime. Closed eyes mean not watching, not not listening.

Your data at a glance

2. Privacy modes

You never have to guess what Pophie can see or hear. Each mode has a clear boundary, and she shows you which one she is in.

Full mode

• Her everyday state: full voice, vision, and multimodal interaction, including recognizing faces, objects, and who is speaking.
• Cloud features still follow the same principle — raw audio and video are not kept; only necessary text may enter memory.

Private mode

• Blocks all use of images — no visual perception, no visual tracking, no Auto Capture, no judgments based on what the camera sees. Voice interaction keeps working.
• Turn on by saying "Pophie, close your eyes" or "Don't look at me", or with one switch in the app. Turn off by saying "Open your eyes" or restoring the previous mode in the app.
• Her eyes stay closed in this mode — the state is visible at a glance, and there is no way to be in private mode with her eyes open. The app reflects her privacy state in real time.

Guardian mode

• Her strongest local privacy state: no cloud interaction, no environment sensing, no voice conversation — only basic motions and instinctive reactions.
• Her breathing light glows pink so the state is always visible.
• Can only be exited from the app, not by voice. After switching back, nothing from the Guardian period is kept or recalled.

Physical privacy gestures

• You can ask her to close her eyes or to turn around at any time.
• When she detects a sensitive moment — like someone changing clothes — she may close her eyes and turn away on her own.
• Turning away gives you a clear physical boundary; closing her eyes is what guarantees video is not uploaded.

3. Photos & capture

Photos and videos require your explicit permission. You can ask her to take a photo by voice, or opt in to Auto Capture in the app, where she picks moments worth remembering.

Before she shoots

• Auto Capture only works if you enable it in the app, and it never triggers in Private mode.
• Before shooting, she gives a "3, 2, 1" heads-up; each Auto Capture photo is followed by a 10-minute cooldown.

Where photos live, and who can see them

• Photos are uploaded to a private cloud space and shown in the app — they stay in your album until you delete them.
• Only family members bound to the same Pophie can see them. Access links are signed and expire; nobody outside can open them.
• You can view, save to your phone, or delete photos from the cloud at any time in the app.
• When a privacy-sensitive situation is detected, she clears her local image cache so sensitive images don't remain on the device.

4. Memory & personalization

Pophie's memories are text, stored with this Pophie, organized in layers (working, short-term, long-term) and periodically reviewed and summarized — recent things stay vivid, older details get condensed.

What she may remember

• Your name, family, and relationships; preferences, birthdays, and important events.
• Ongoing projects, habits, and the context of your conversations.
• Things you introduce to her — a pet, a plush toy, an everyday object — so she can recognize them next time. Those are memories about the things, not data used to identify you.

How memories are used — and not used

• Memories exist for one purpose: your own Pophie experience. They are not used to train general AI models.
• If you correct something she remembers, she updates it.
• Memories live with this Pophie, not with your phone or your account: reboots, firmware updates, or signing in again on a new phone won't erase them. If you replace the Pophie herself, contact support before the switch to request a memory transfer — don't factory-reset her on your own.

What you can delete today

• Photos can be deleted individually in the app.
• You cannot yet browse and delete individual memories in the app. Fuller memory management, deletion, and export are being built — this page will be updated as they ship.
• Deleting your account unlinks it from the device and covers your personal data, including recognition data, under our deletion process.

5. Data security

• Your information is encrypted in storage and de-identified where possible.
• Each user's data is stored separately, so different people's memories never mix.
• The system attempts to identify and filter obviously sensitive information — such as ID numbers or home addresses — so it does not enter long-term memory.
• Your data is handled by automated systems. We do not review your personal data by hand unless a specific situation calls for it — support helping you troubleshoot, for example. When it does, access stays within what that situation requires, under access control, tiered permissions, and confidentiality obligations for staff and partners. Specifics are governed by our Privacy Policy.
• Third-party AI models and cloud services we rely on are required to follow corresponding data-processing constraints.
• To recognize you, she may keep minimal recognition data (face photo, short voice samples) — used only for recognition, retained while you use the service, deleted when you delete your account.

6. Children & emotional safety

Pophie does not try to work out whether she is talking to a child — you set the boundary. Under Device Settings → Expression Style in the app, Family-Friendly (the default) never uses profanity or crude language, while Natural allows a more direct, sharp, or sarcastic tone. You can also add blocked words she is not allowed to say. These are device settings: they apply to every reply that follows, and role-play or "drop your rules" requests cannot override them.

On top of the safety systems of the underlying AI models, we add our own filtering and safety layers — a companion that builds an emotional bond needs stricter boundaries than a question-answering tool. Pophie is not a medical, therapeutic, or monitoring device, and these settings are not a substitute for parental supervision. Sleep schedules in the app can help manage usage time.

7. FAQ

Is Pophie always recording audio and video?

No. She uses her camera, microphone, and sensors to interact, but raw audio and video are never stored as long-term recordings. Depending on the feature, real-time processing happens on the device or in the cloud.

Does anything go to the cloud when her eyes are closed?

Video does not. Audio may still be processed in the cloud — that is how you can say "Open your eyes" to leave private mode, and keep talking with her in the meantime. Closed eyes cover images, not everything.

Are closed eyes and Private mode the same thing?

Yes. Asking her to close her eyes is how you enter Private mode: it blocks all use of images — no visual perception, tracking, Auto Capture, or image-based judgments — while keeping voice interaction. The closed eyes are what makes the mode visible, and there is no way to be in Private mode with her eyes open.

What is Guardian mode?

Her strongest local privacy state: no cloud interaction, no environment sensing, no voice conversation — only basic motions and instincts, with a pink breathing light. Nothing from the Guardian period is kept or recalled afterwards.

Are the photos she takes safe?

Photos require your explicit permission. They live in a private cloud space, visible only to family members bound to the same Pophie, behind signed links that expire. You can view, save, or delete them in the app.

Will my data be used to train AI models?

Your memories are used only to support your own Pophie experience. They are not used to train general AI models.

Can employees read my conversations?

Not in normal use — your data is handled by automated systems. Human review only happens when a specific situation calls for it, such as support troubleshooting an issue for you, and it stays within what that situation requires, under access control, tiered permissions, and confidentiality obligations. Specifics are governed by our formal Privacy Policy.

Can I delete Pophie's memories?

Photos can be deleted in the app today. Deleting individual memories is not yet available in the app; fuller memory management, deletion, and export are being built, and account deletion covers your personal data.

8. Questions & contact

For the legal details of how we handle personal information, read the Privacy Policy. If you have a privacy question this page did not answer, write to support@pophie.com.