Our Core Promise
Lipi is built on the belief that you deserve to know what's happening with your AI usage — and that same transparency applies to how we handle your data. This Privacy Policy is written in plain language, not legal obfuscation. We want you to actually read and understand it.
By installing and using Lipi, you agree to the practices described in this policy. If you do not agree, please uninstall the extension. You can do so at any time from your Chrome extensions page (chrome://extensions).
Who We Are
Lipi is a product of Engramium — a technology company built on the pursuit of excellence in AI tools and infrastructure. Engramium is the data controller responsible for your data under this policy.
What This Policy Covers
This Privacy Policy applies to the Lipi Chrome Extension (the "Extension") and any related services, websites, or communications provided by Engramium under the Lipi product brand.
It covers your use of Lipi on all supported platforms including Claude (claude.ai), ChatGPT (chatgpt.com), Gemini (gemini.google.com), Grok (grok.x.com), and any other AI platforms Lipi integrates with in the future.
This policy does not cover the privacy practices of the AI platforms you use (Claude, ChatGPT, Gemini, Grok). Those are governed by their own privacy policies respectively.
What We Collect
Lipi collects two categories of data: data stored locally on your device (never sent to us) and anonymised analytics (never linked to you personally).
4.1 Anonymised Usage Analytics
To improve Lipi and understand how features are used, we collect anonymised, non-identifiable analytics. This data cannot be traced back to any individual user.
| Data Point | What It Tells Us | Personally Identifiable? |
|---|---|---|
| Feature interaction events | Which tabs, buttons, and toggles are used | Never |
| Active tab (Overview/Usage/Settings) | Which sections users spend time in | Never |
| Optimize button click rate | How often Prompt Intelligence is triggered | Never |
| Mode preference (Compress/Optimize/Both) | Which compression mode is most popular | Never |
| Platform detected (Claude/ChatGPT etc.) | Which AI platforms are most used with Lipi | Never |
| Free vs Pro plan | Conversion and upgrade patterns | Never |
| Extension version number | Adoption of updates | Never |
| Error and crash events | Stability and bug identification | Never |
| Country (not city or region) | Broad geographic distribution | Never |
| Session duration (approximate) | General engagement patterns | Never |
4.2 Pro Account Data (Pro subscribers only)
If you subscribe to Lipi Pro, we collect the minimum data necessary to manage your subscription:
| Data Point | Purpose | Stored By |
|---|---|---|
| Email address | Account identification and billing communications | Engramium + Stripe |
| Payment information | Subscription billing | Stripe only — we never see card details |
| Subscription status | Unlocking Pro features in the extension | Engramium |
| Subscription start/end dates | Billing cycle management | Engramium |
| Plan type (Pro Monthly/Annual) | Feature access control | Engramium |
What We Never Collect
This is the most important section of this policy. The following data is never collected, never transmitted to our servers, never stored by Engramium, and never shared with any third party — under any circumstances.
| Data Type | Why We Never Collect It |
|---|---|
| Your prompt content | Your words are yours. Lipi reads them locally to count tokens. They never leave your browser. |
| AI responses and conversations | Your AI conversations are private. We never read, store, or transmit any part of them. |
| Compressed or optimized prompt text | Even after Lipi processes your prompt, the text never reaches our servers. |
| Browsing history | We only activate on supported AI platforms — we never track what other sites you visit. |
| Personal identity information | No name, age, gender, or demographic data is ever collected from free users. |
| IP addresses (stored) | IP addresses are hashed and immediately discarded — never stored or linked to activity. |
| Precise location | We detect country only (for analytics) — never city, region, or GPS coordinates. |
| Device fingerprint | We use no fingerprinting techniques of any kind. |
| Cross-site tracking | Lipi has no tracking pixels, beacons, or cross-site identifiers. |
| Clipboard content | We never read your clipboard unless you explicitly click "Copy" inside Lipi's interface. |
| Token counts or costs per message | These are calculated and displayed locally only — never reported to us. |
| Budget amounts you set | Your financial preferences stay in Chrome local storage — never sent to us. |
| Prompt history entries | Your 20-entry prompt history lives in Chrome local storage on your device only. |
| Session or weekly usage data | Your Claude session data and limit tracking stays entirely local. |
| Cache timer data | Cache window information is read from the page and displayed locally — never stored. |
| Model preferences | Your preferred models and settings are stored locally in Chrome storage only. |
| Switch to Save history | Model switching suggestions and history are never reported to us. |
| Children's data | Lipi is not directed at children under 13. We never knowingly collect their data. |
What Stays on Your Device
Lipi uses Chrome's built-in storage APIs to store your preferences and history locally. This data lives exclusively on your device and is controlled entirely by you. Engramium has no access to it.
| Data Stored Locally | Storage Type | Purpose | You Can Delete It? |
|---|---|---|---|
| Stripe display preferences | chrome.storage.local | Remember your toggle settings | Yes — Settings tab |
| Theme (Light/Dark/Auto) | chrome.storage.local | Remember your appearance preference | Yes — Settings tab |
| Default mode (Compress/Optimize/Both) | chrome.storage.local | Remember your preferred Intelligence mode | Yes — Settings tab |
| Daily/monthly budget limits | chrome.storage.local | Power your budget alert system | Yes — Settings tab |
| Currency preference | chrome.storage.local | Display costs in your preferred currency | Yes — Settings tab |
| Default platform | chrome.storage.local | Open Lipi to your primary AI platform | Yes — Settings tab |
| Preferred cheap model | chrome.storage.local | Power the Switch to Save suggestion | Yes — Settings tab |
| Keyboard shortcut preferences | chrome.storage.local | Custom shortcuts for power users | Yes — Settings tab |
| Prompt history (last 20) | chrome.storage.local | Show your Usage tab history | Yes — Settings → Clear History |
| Session usage data | chrome.storage.local | Track session progress and limits | Yes — Settings → Reset Stats |
| Daily savings accumulator | chrome.storage.local | Track tokens saved today via compression | Yes — resets daily automatically |
| Onboarding completion status | chrome.storage.local | Remember if you've seen the welcome tour | Yes — Settings → Replay Onboarding |
| Pro sync settings (Pro only) | chrome.storage.sync | Sync preferences across your Chrome profiles | Yes — Settings → Clear All |
Why We Collect What We Do
We only collect data we have a clear, legitimate reason for collecting. Here are our legal bases and purposes:
| Data Category | Legal Basis | Purpose |
|---|---|---|
| Anonymised analytics | Legitimate interest | Understand feature usage to improve Lipi |
| Error/crash reports | Legitimate interest | Identify and fix bugs before they affect users |
| Pro email address | Contract performance | Manage your subscription and send billing emails |
| Pro payment data | Contract performance | Process your subscription (handled by Stripe) |
| Pro subscription status | Contract performance | Unlock the features you've paid for |
| Country (analytics only) | Legitimate interest | Understand broad geographic adoption patterns |
We do not use your data for advertising, profiling, behavioural targeting, or any purpose other than those listed above. We do not sell your data. We never will.
Feature-by-Feature Privacy Guide
Here is exactly what happens with your data for every major Lipi feature:
The Lipi Stripe
| Feature | Data Used | Stays Local? | Sent to Engramium? |
|---|---|---|---|
| Live token counter | Chatbox textarea content | Local only | Never |
| Real-time cost estimate | Token count + model pricing table | Local only | Never |
| Session progress bar | Message count from page DOM | Local only | Never |
| Weekly usage bar | Locally stored session history | Local only | Never |
| Messages remaining | Session data from page DOM | Local only | Never |
| Reset countdown timer | Timestamp from API stream (displayed only) | Local only | Never |
| Cache timer | Cache data from Claude API stream | Local only | Never |
| Platform badge | Current URL / page DOM | Local only | Never |
| ✦ Optimize button (click) | Button interaction event | Anonymised event | Anonymised count only |
| Chrome badge counter | Current token count | Local only | Never |
Prompt Intelligence (Optimize + Compress)
| Feature | Data Used | Stays Local? | Sent to Engramium? |
|---|---|---|---|
| Reading from chatbox | Your prompt text | Local only | Never |
| Optimize step (Step 1) | Prompt text sent to AI API of your choice | Goes to AI provider only | Never to Engramium |
| Compress step (Step 2) | Optimized text processed locally OR via AI API | Processed locally where possible | Never to Engramium |
| Apply to Chatbox | Compressed text injected into textarea | Local only | Never |
| Copy to clipboard | Compressed text written to clipboard | Local only | Never |
| Mode selection (Compress/Optimize/Both) | Mode preference saved locally | Local + anonymised | Anonymised mode counts only |
Usage Tab
| Feature | Data Used | Stays Local? | Sent to Engramium? |
|---|---|---|---|
| Prompt history (last 20) | Truncated prompt preview + token count + cost | Local only | Never |
| All models comparison table | Static pricing data bundled with extension | Local only | Never |
| Export usage CSV | Your local prompt history and costs | Downloaded to your device | Never |
| Context window tracker | Conversation length from page DOM | Local only | Never |
| Per-model request counters | Request counts from page DOM | Local only | Never |
Settings Tab
| Feature | Data Used | Stays Local? | Sent to Engramium? |
|---|---|---|---|
| All stripe toggles | Toggle states | Local only | Never |
| Budget limits | Dollar amounts you set | Local only | Never |
| Currency preference | Currency code | Local only | Never |
| Theme preference | Light/Dark/Auto choice | Local only | Never |
| Keyboard shortcuts | Key bindings | Local only | Never |
| Settings sync (Pro) | Preferences synced via chrome.storage.sync | Chrome sync only — not Engramium | Never to Engramium |
| Privacy mode toggle | Disables prompt history storage entirely | Local only | Never |
| Clear history | Deletes local prompt history | Deleted from device | Never transmitted |
| Feedback submission | Your feedback text + extension version | Sent to Engramium support | Yes — with your consent |
Switch to Save
| Feature | Data Used | Stays Local? | Sent to Engramium? |
|---|---|---|---|
| Model cost comparison | Static pricing table bundled with extension | Local only | Never |
| Suggested alternative model | Current model + pricing logic | Local only | Never |
| Switch action (DOM) | Clicks the model selector on the AI platform | Local only | Never |
| Switch event | Anonymised "switch occurred" event | Anonymised | Anonymised count only |
Budget Alerts
| Feature | Data Used | Stays Local? | Sent to Engramium? |
|---|---|---|---|
| Daily spend accumulator | Estimated cost per message × message count | Local only | Never |
| Budget limit comparison | Your budget setting vs accumulated spend | Local only | Never |
| Chrome badge colour change | Budget proximity percentage | Local only | Never |
Third-Party Services
Lipi uses a minimal set of trusted third-party services. We are transparent about every one of them.
| Provider | Purpose | Data Shared | Their Privacy Policy |
|---|---|---|---|
| Stripe | Payment processing for Pro subscriptions | Email + payment details (Pro users only) | stripe.com/privacy |
| AI API Provider (TBD) | Powers the Optimize step in Prompt Intelligence | Your prompt text when you click Optimize | Disclosed in documentation |
| Chrome Web Store (Google) | Extension distribution and updates | Install/update events (Google's own data) | policies.google.com/privacy |
| Error monitoring (TBD) | Anonymous crash reporting | Anonymised error stack traces only | Disclosed when selected |
Data Sharing
We will never sell your data. This is not a policy position — it is a founding principle of Engramium.
Data Retention
| Data Type | Retention Period | How to Delete |
|---|---|---|
| Locally stored preferences | Until you clear them or uninstall | Settings → Clear All / Uninstall extension |
| Prompt history | Until you clear it (max 20 entries) | Settings → Clear History |
| Session usage data | Resets daily automatically | Settings → Reset Stats |
| Anonymised analytics events | 90 days aggregated, then deleted | Cannot be individually deleted (anonymised) |
| Pro email address | Duration of subscription + 90 days | Email privacy@engramium.com to request deletion |
| Pro subscription records | 7 years (legal financial obligation) | Cannot be deleted within legal retention period |
| Support / feedback messages | 2 years from submission | Email privacy@engramium.com to request deletion |
| Error / crash reports | 30 days then auto-deleted | Anonymised — cannot be individually deleted |
Your Rights
Depending on where you are located, you may have the following rights regarding your personal data. We honour all of these regardless of your jurisdiction — because it's the right thing to do.
| Right | What It Means | How to Exercise It |
|---|---|---|
| Right to Access | Request a copy of all personal data we hold about you | Email privacy@engramium.com |
| Right to Correction | Request correction of inaccurate personal data | Email privacy@engramium.com |
| Right to Deletion | Request deletion of your personal data ("right to be forgotten") | Email privacy@engramium.com or uninstall extension |
| Right to Portability | Receive your data in a machine-readable format | Email privacy@engramium.com |
| Right to Object | Object to processing based on legitimate interest | Email privacy@engramium.com |
| Right to Restrict | Request we limit how we use your data | Email privacy@engramium.com |
| Right to Withdraw Consent | Withdraw any consent you have given at any time | Uninstall extension / email us |
| Opt out of analytics | Disable anonymised usage analytics entirely | Settings → Privacy Mode toggle |
| Right to Complain | Lodge a complaint with your local data protection authority | Contact your national DPA |
We will respond to all data rights requests within 30 days. We will never charge a fee for exercising your rights unless a request is manifestly unfounded or excessive.
Children's Privacy
Lipi is not directed at children under the age of 13 (or 16 in the European Union). We do not knowingly collect personal information from children under these ages.
If you are a parent or guardian and believe your child has provided personal information to us, please contact us immediately at privacy@engramium.com. We will promptly delete any such information.
If we become aware that we have inadvertently collected personal information from a child without parental consent, we will take steps to delete it as quickly as possible.
Security
We take the security of your data seriously. Here are the measures we have in place:
Despite these measures, no system is 100% secure. If you discover a security vulnerability in Lipi, please report it responsibly to security@engramium.com. We take all reports seriously and will respond within 48 hours.
Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will:
2. Publish a changelog entry in the Lipi extension update notes
3. For material changes — those that significantly affect your rights or our data practices — we will display a notification inside the Lipi popup and give you at least 30 days before the new policy takes effect
4. For changes that reduce your privacy protections, we will require your explicit consent before the change applies to your data
Your continued use of Lipi after a policy update constitutes acceptance of the updated policy, except where explicit consent is required. Previous versions of this policy are available upon request.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact us. We aim to respond to all enquiries within 5 business days.