Pophie is designed around one idea: process as much as possible on the device, use the cloud only where a feature needs it, and never keep raw audio or video as recordings. This page is the reference for how she handles your data and which controls you have.
Recording & audio/video
Pophie does not keep continuous recordings. She uses her camera, microphone, and other sensors to interact with you, but raw audio and video are never stored as long-term recordings. Depending on the feature, real-time processing happens on the device or in the cloud.
- On-device first. Face recognition, gestures, wake words, and basic environmental awareness are processed locally. Sensor signals are used in the moment and discarded — never kept as a record.
- The cloud processes, not stores. Deeper conversation, visual understanding, and Skills may use the cloud. Raw audio and video are not kept after processing; voice conversations may be transcribed into text, which may become part of long-term memory.
- Closed eyes are an honest boundary. When her eyes are closed, video is not uploaded. Audio may still be processed so you can keep talking with her — closed eyes mean not watching, not not listening.
Your data at a glance
| Data | How Pophie handles it | Your control |
|---|---|---|
| Sensor signals | Processed on the device for instant reactions; used and discarded, never kept as a record. | Guardian Mode stops environment sensing entirely. |
| Voice audio | May be processed in the cloud for conversation; raw audio is never stored long-term. | Conversations may be transcribed; only text can enter memory. |
| Camera video | Processed per feature; raw video is never stored long-term. | Eyes closed = no upload. Privacy Mode blocks all use of images. |
| Photos | Taken only with your permission; stored short-term in a private cloud space and shown in the app. | View, save to your phone, or delete — anytime, in the app. |
| Conversation & memory | Text memories stored with your account to personalize your experience; layered and summarized over time. | Never used to train general AI models. Correct her and she updates. |
| Recognition data | Face photo, short voice samples, and items you introduce — used only for recognition, encrypted and kept minimal. | Retained while you use the service; deleted when you delete your account. |
Privacy modes
You never have to guess what Pophie can see or hear. Each mode has a clear boundary, and she shows you which one she is in.
| Capability | Full Capability | Privacy Mode | Guardian Mode |
|---|---|---|---|
| Voice conversation | |||
| Visual perception | |||
| Proactive photos | |||
| Cloud processing | |||
| Environment sensing | |||
| Turn on | Default | Voice or app | In the app |
| Turn off | — | Voice or app | App only |
Full Capability Mode
- Her everyday state: full voice, vision, and multimodal interaction, including recognizing faces, objects, and who is speaking.
- Cloud features still follow the same principle — raw audio and video are not kept; only necessary text may enter memory.
Privacy Mode
- Blocks all use of images — no visual perception, no visual tracking, no proactive photos, no judgments based on what the camera sees. Voice interaction keeps working.
- Turn on by saying "Pophie, close your eyes" or "Don't look at me", or with one switch in the app. Turn off by saying "Open your eyes" or restoring the previous mode in the app.
- You can choose whether she shows closed eyes in this mode. Even with an open-eye look, visual input stays blocked. The app reflects her privacy state in real time.
Guardian Mode
- Her strongest local privacy state: no cloud interaction, no environment sensing, no voice conversation — only basic motions and instinctive reactions.
- Her pocket light glows pink so the state is always visible.
- Can only be exited from the app, not by voice. After switching back, nothing from the Guardian period is kept or recalled.
Physical privacy gestures
- You can ask her to close her eyes or to turn around at any time.
- When she detects a sensitive moment — like someone changing clothes — she may close her eyes and turn away on her own.
- Turning away gives you a clear physical boundary; closing her eyes is what guarantees video is not uploaded.
Photos & capture
Photos and videos require your explicit permission. You can ask her to take a photo by voice, or opt in to proactive capture in the app, where she picks moments worth remembering.
Before she shoots
- Proactive capture only works if you enable it in the app, and it never triggers in Privacy Mode.
- Before shooting, she gives a "3, 2, 1" heads-up; each proactive capture is followed by a 10-minute cooldown.
Where photos live, and who can see them
- Photos are uploaded to a private cloud space and shown in the app — short-term storage for you to review and manage, not an archive.
- Only family members bound to the same Pophie can see them. Access links are signed and expire; nobody outside can open them.
- You can view, save to your phone, or delete photos from the cloud at any time in the app.
- When a privacy-sensitive situation is detected, she clears her local image cache so sensitive images don't remain on the device.
Memory & personalization
Pophie's memories are text, stored with your account, organized in layers (working, short-term, long-term) and periodically reviewed and summarized — recent things stay vivid, older details get condensed.
What she may remember
- Your name, family, and relationships; preferences, birthdays, and important events.
- Ongoing projects, habits, and the context of your conversations.
How memories are used — and not used
- Memories exist for one purpose: your own Pophie experience. They are not used to train general AI models.
- If you correct something she remembers, she updates it.
- Memories live with your account, not the device: reboots, firmware updates, or a new phone with the same account won't erase them.
What you can delete today
- Photos can be deleted individually in the app.
- You cannot yet browse and delete individual memories in the app. Fuller memory management, deletion, and export are being built — this page will be updated as they ship.
- Deleting your account unlinks it from the device and covers your personal data, including recognition data, under our deletion process.
Data security
- Your information is encrypted in storage and de-identified where possible.
- Each user's data is stored separately, so different people's memories never mix.
- The system attempts to identify and filter obviously sensitive information — such as ID numbers or home addresses — so it does not enter long-term memory.
- In normal product use, your data is handled by automated systems and does not require human review. Any exceptions are governed by our Privacy Policy.
- Third-party AI models and cloud services we rely on are required to follow corresponding data-processing constraints.
- To recognize you, she may keep minimal recognition data (face photo, short voice samples, items you introduce) — used only for recognition, retained while you use the service, deleted when you delete your account.
Children & emotional safety
When Pophie recognizes she is interacting with a child, she switches to a more child-appropriate way of interacting. On top of the safety systems of the underlying AI models, we add our own filtering and safety layers — a companion that builds an emotional bond needs stricter boundaries than a question-answering tool.
Pophie is not a medical, therapeutic, or monitoring device, and her child-friendly behavior is not a substitute for parental supervision. Sleep schedules in the app can help manage usage time.
FAQ
Is Pophie always recording audio and video?
No. She uses her camera, microphone, and sensors to interact, but raw audio and video are never stored as long-term recordings. Depending on the feature, real-time processing happens on the device or in the cloud.
Does anything go to the cloud when her eyes are closed?
Video does not. Audio may still be processed in the cloud so you can keep talking with her. Closed eyes are a video-privacy state, not a full off switch.
What is the difference between closed eyes and Privacy Mode?
Closed eyes mean video is not uploaded. Privacy Mode goes further: it blocks all use of images — no visual perception, tracking, proactive photos, or image-based judgments — while keeping voice interaction.
What is Guardian Mode?
Her strongest local privacy state: no cloud interaction, no environment sensing, no voice conversation — only basic motions and instincts, with a pink pocket light. Nothing from the Guardian period is kept or recalled afterwards.
Are the photos she takes safe?
Photos require your explicit permission. They live in a private cloud space, visible only to family members bound to the same Pophie, behind signed links that expire. You can view, save, or delete them in the app.
Will my data be used to train AI models?
Your memories are used only to support your own Pophie experience. They are not used to train general AI models.
Can employees read my conversations?
In normal product use, your data is handled by automated systems and does not require human review. Any exceptions are governed by our formal Privacy Policy.
Can I delete Pophie's memories?
Photos can be deleted in the app today. Deleting individual memories is not yet available in the app; fuller memory management, deletion, and export are being built, and account deletion covers your personal data.
Questions & contact
For the legal details of how we handle personal information, read the Privacy Policy. If you have a privacy question this page did not answer, write to support@pophie.com.