Who we are
PIP NAV is made by Global Welfare Solutions Ltd, a UK company (company number 17124292). We are the data controller for the personal information processed through the PIP NAV app.
Registered address: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ
Data protection contact: privacy@pipnav.com
What PIP NAV does
PIP NAV is an Android app that helps you complete PIP claim and review forms. It guides you through the PIP activities, helps you choose descriptors, and generates draft answers you can use on your form and in assessment preparation.
What data we collect and where it's stored
On your device (not sent to us)
Your claim content stays on your phone. This includes your activity answers, selected descriptors, draft answers (including any AI-generated drafts you save), evidence notes, reasonable adjustments, your Answer Pack, and your Assessment Prep content.
We do not upload, sync, or back up this content to our servers.
In the cloud (minimal)
We store only what's needed to run your account and verify your purchase:
- Your email address and account ID (for login via Supabase Auth)
- Per-claim purchase records — which claims you've unlocked, the product purchased, and the purchase token from Google Play
- Introductory offer status — whether you've seen or used the first-claim offer
We do not store your claim answers, condition details, evidence notes, or any narrative content in the cloud.
When you use AI features (optional)
AI features are entirely optional. If you choose to use them, a limited set of information about a single activity is sent through our secure backend to an AI provider to generate the requested output.
What gets sent: The selected descriptor and points for that activity, your structured responses (frequency, help needed, aids, risks), and short free-text you entered for that activity.
What does not get sent: Your full claim, your Answer Pack, other activities' data, payment details, or personal identifiers.
Important: Please do not include names, addresses, NHS numbers, National Insurance numbers, phone numbers, or email addresses in your free-text answers. If you do, that information could be included in what is sent to the AI provider for that specific request.
The AI provider may temporarily retain request and response data under its standard terms. We do not use the AI provider as a storage service. AI-generated drafts that you choose to keep are stored locally on your device.
How we protect your data
- Auth tokens are stored in hardware-backed secure storage on your device
- On-device claim data is protected by Android platform encryption (when your device has a lock screen enabled)
- All network traffic uses HTTPS/TLS encryption
- Cloud database access is protected by row-level security — you can only access your own records
- AI keys are kept server-side only, never in the app itself
- Our backend does not log sensitive content from AI requests — only structured metadata (timing, status codes)
Legal basis for processing
We process your account and purchase data on the basis of contract — it's necessary to provide the service you've paid for.
Because the app asks about how health conditions affect your daily life, we treat this as special category data. We rely on your explicit consent, which you give through the health data consent screen before creating your first claim. If you use AI features, you give separate consent for AI processing of that data.
Your rights and controls
You can:
- Delete your claim data — go to Settings → Legal → Delete my data. This wipes all claim content, AI drafts, and consent records from your device.
- Delete your account — from the same screen, you can delete your cloud account and all associated purchase records.
- Choose not to use AI — AI features are optional and clearly marked. You can complete your entire claim without them.
- Access your data — your claim content is on your device and accessible to you at all times. For cloud data, contact us.
- Contact us about your data rights — email privacy@pipnav.com
Under UK data protection law, you also have the right to request access to, correction of, or restriction of your personal data, and to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
Third-party services
- Supabase — provides authentication, database hosting for purchase records, and hosts the backend functions that process AI requests
- Google Play / Google — handles in-app purchase billing and purchase verification
- AI provider (OpenAI) — processes limited text to generate draft answers, follow-up questions, and sufficiency evaluations when you trigger AI features
International transfers
Some processing (particularly AI features) may occur outside the UK. Where this happens, we apply appropriate safeguards required under UK data protection law.
Children
PIP NAV is not designed for or directed at children under 16. We do not knowingly collect personal data from children.
Changes to this policy
We may update this privacy policy as the app develops. The "last updated" date at the top of this page will change when we do. For significant changes, we'll provide notice within the app.
Contact
If you have any questions about this privacy policy or how we handle your data:
Email: privacy@pipnav.com
Data controller: Global Welfare Solutions Ltd
App: PIP NAV (Android)