PIPO

Legal

Terms of Service

Version 2026-08-01 · in effect from 1 August 2026 · written in English

These terms are the agreement between you and the person who sold you your PIPO. They are written in plain English on purpose - if a clause below is unclear, that is a fault worth reporting, not fine print you are expected to lose to.

Read section 2 first. PIPO is a companion toy. It is not a medical device, not a therapist, and not a way to reach help in an emergency. Everything else here is ordinary commercial housekeeping; section 2 is the part that matters for your safety.

What is on this page

1. Who this agreement is with

In these terms, "we", "us" and "PIPO" mean [SELLER LEGAL NAME - DECIDE BEFORE LAUNCH], [SOLE TRADER / COMPANY + REGISTRATION NUMBER], of [FULL POSTAL ADDRESS]. "You" means the person who bought a PIPO, or who holds an account on this site.

These terms cover three things together, because in practice you cannot separate them: the physical PIPO you own, the firmware running on it, and this website and its online services.

You accept these terms when you create an account. We record the version you accepted and the moment you accepted it. If we later change the terms in a way that matters, we ask again against the new version rather than assuming your old answer still applies - see section 19.

2. What PIPO is, and what it is not

PIPO is a desk toy with a personality. It is sold for entertainment and companionship, and that is the whole of what it is.

PIPO is not a medical device. It is not a therapist, a counsellor, a carer, a health monitor, a safety device, or a way to reach emergency services. Nothing it says is medical, psychological, legal or financial advice, and nothing it says should be relied on to make a decision about your health or safety - or anyone else's.

Do not use PIPO as support in a crisis

PIPO cannot recognise an emergency, cannot call anyone, and cannot get you help. It has no way to know that something is wrong. If you are in danger, thinking about harming yourself, or worried about someone else, please contact your local emergency number or a crisis line in your country now. The international directory at findahelpline.com lists free, confidential services by country.

Our cloud service deliberately refuses to improvise around self-harm: when the context of a moment contains that kind of language, the request is rejected and your PIPO falls back to a short, human-written line. That is a safety measure, not a support feature. It does not mean anyone was alerted, because nobody was.

Companionship is not care

Some people will use PIPO as company during a difficult period, and we are glad if it helps. It is still a toy. It must not be relied on as a substitute for professional care, for medication reminders, for supervision of a child, an elderly person or anyone who is unwell, or for any other duty where a failure would matter.

PIPO is also not a security camera, not a baby monitor, and not a recorder. It is not built, tested or certified for any of those uses, and using it as one is a use we do not permit (section 11).

3. Age, and using PIPO with children

  • Accounts: you must be at least 16 years old to create an account on this site. If you are younger, a parent or guardian must hold the account and accept these terms on your behalf; the device can then be used by you under their supervision.
  • The device itself: PIPO is suitable for ages 8 and up. It contains small parts and a rechargeable battery and is not a toy for children under three.
  • Supervision: younger users should be supervised, in particular for charging, for anything involving the microphone, and for the cloud-generated lines described in section 9, which are not human-written and are not reviewed before you see them.
  • Parents and guardians are responsible for what happens under their account, including any use by a child, and can turn the cloud features off entirely from the dashboard at any time.

We do not knowingly create accounts for people under the minimum age. If you believe a child has created one, contact us (section 22) and we will close it and delete the data.

4. Your account is bound to your device

There is no software-only sign-up. An account exists to manage PIPOs you own, and creating one requires a live 6-digit pairing code shown on the screen of a genuine PIPO that you are physically holding.

  • One owner at a time. A unit is bound to a single account. Binding a unit to a new account requires unbinding it from the old one first.
  • Your credentials are yours to protect. You are responsible for activity under your account. Use a password you do not use anywhere else.
  • Possession is the proof. Because pairing requires reading a code off the device's own screen, anyone holding your PIPO for a few minutes can attempt to claim it once it is unbound. Treat the device like a key.
  • We may need to verify ownership. For support actions such as force-unbinding a unit, we may ask for proof of purchase. We would rather annoy a real owner than hand a stranger someone else's robot.

5. Selling, giving away, losing or breaking a PIPO

If you sell it or give it away

Unlink the unit from your dashboard before it changes hands. Unlinking frees the device immediately, and the next owner claims it by reading a fresh code off its screen. If you forget, the new owner cannot pair it and will have to come back to you - we will not force-unbind a unit on the word of whoever is currently holding it.

The physical device is yours to resell. Your account, and any paid add-ons attached to it, are not transferable on their own (section 12).

If it is lost or stolen

Unlink it from your dashboard, which cuts its connection to your account, and tell us. We can revoke the unit outright, after which it can no longer authenticate with our service at all. A revoked unit still powers on and still has its personality; it simply cannot come back online under anyone's account. Revocation is not reversible on request from a person we cannot verify.

If it breaks

Your account, your level and history, and any add-ons stay with your account, not with the broken unit. If you replace the PIPO, unlink the old one and pair the new one. Note that progression (level and EXP) is kept by the device itself, so a replacement unit starts fresh - the bond is stored in the robot, which is part of the point of it.

Warranty and repair are covered in section 14.

6. Personality is fixed at manufacture

Each PIPO is built as exactly one of six characters - Sunny, Gentle, Tricky, Bashful, Clingy or Aloof - and stays that character for its whole life.

Personality cannot be changed. Not from this website, not from the device, not by support, not by asking nicely, and not by a firmware update. The database itself refuses the change. A different personality means a different PIPO.

We state this as a term rather than a footnote because it is a deliberate product decision and part of what you are buying: the personality you chose is the one that unit has. Choosing the "wrong" one is not a defect and is not grounds for a warranty claim, though it may be covered by the return window in section 14.

7. Firmware updates happen automatically

Your PIPO asks our service whether a newer build exists and installs it by itself, without asking you first. By using the device you agree to receive these updates.

  • Why automatic: a network-connected device with a known security hole is a problem for its owner and for everyone else on that network. Updates that fix security or safety issues are not optional.
  • How it is made safe: a new build is written into a spare slot while the current one keeps running, and its signature is verified before it is trusted. If the new build fails to come up, the device rolls back to the previous one on its own.
  • What updates may change: fixes, new expressions, new behaviour, and occasionally the removal of a feature that we cannot keep supporting. We will not use an update to change a unit's personality (section 6).
  • Modified firmware: you may not install firmware we did not publish, and doing so ends any warranty and any obligation of ours to support that unit. If you flash it, you own the result.

8. Cloud features can change or end

Some features need our servers: cloud-generated lines, the dashboard, OTA updates, and any future paid add-ons. These are provided on an ongoing basis without a separate subscription, and they are not guaranteed forever.

Your PIPO keeps working offline. Its personality, expressions, moods, reactions, level and sounds all run on the device itself. If our servers go away tomorrow - or you simply never connect it to WiFi - you still own a working companion. That is a design commitment, and it is why we are comfortable being honest about the paragraph below.

  • We may change or discontinue cloud features at any time, including because a supplier withdraws a service, because costs stop making sense, or because we stop operating.
  • Notice: where we are shutting a cloud feature down permanently and it is practical to do so, we will try to give at least 30 days' notice by email to the address on your account. Emergency changes for security or abuse take effect immediately.
  • Fair use: cloud generation is metered per device per day, and heavy or automated use can be rate-limited or switched off on a unit without affecting the rest of your account.
  • Availability: the service is provided as-is with no uptime guarantee. Because the cloud is never in the critical path, an outage means your PIPO is a little more repetitive, not that it stops working.

Ending a cloud feature is not a defect in the hardware and does not on its own entitle you to a refund of the purchase price, except where the law where you live says otherwise.

9. AI-generated replies

When cloud lines are switched on, some of what PIPO says is generated by a third-party AI model rather than written by a person.

  • It can be wrong. Generated text may be inaccurate, out of date, nonsensical, or simply not what a person would have said. We give no warranty of accuracy, reliability, suitability or good taste, and you should not rely on anything PIPO says as fact.
  • It can be unexpected. We filter aggressively before and after generation, and we cap length, tone and topic. Filters are not perfect. If your PIPO says something inappropriate, please report it (section 22) - that is how the filters improve.
  • It is not advice. Nothing generated is medical, psychological, legal, financial or safety advice, whatever it sounds like. See section 2.
  • It is not a person. PIPO is software with a personality. It has no feelings, no memory of you beyond a level counter and a mood number, and it is instructed never to claim to be human.
  • Repetition is the fallback. If generation fails, is refused, or is switched off, PIPO uses lines written by a person. Nothing breaks.
  • You can turn it off. One switch in your dashboard stops your unit sending anything to a cloud AI service at all.

What is actually sent to the AI provider is described precisely in our Privacy Policy. In short: a handful of numbers and labels describing the moment, plus lines PIPO itself recently said - never a recording, and never anything you said.

10. The microphone and other people

PIPO has a microphone. It is used on the device to notice its wake word and a short list of fixed commands. It does not record, and audio does not leave the device - the Privacy Policy explains exactly how that works.

Even so, a listening device in a shared space is your responsibility:

  • Tell the people who live or work with you that PIPO has a microphone, and respect it if they would rather it were muted.
  • Do not place a PIPO where its microphone would capture people who have not been told about it - a meeting room, a shared office, a clinic, a classroom.
  • Some countries and workplaces have strict rules about listening devices. Following the ones that apply where you are is on you, not on us.
  • Do not use PIPO to monitor, record or surveil anyone. That is a prohibited use (section 11).

PIPO also answers a small number of read-only requests on your local network so that other things on your desk can see its state and poke it. Anyone already on that network can reach those. Keep your WiFi private, and do not put a PIPO on a public or guest network you do not control.

11. Acceptable use

The device is yours. The service is shared, and the design has to hold for everyone.

You may not

  • Reverse engineer or extract secrets. No decompiling, disassembling, dumping flash, extracting keys, or otherwise deriving the source or the credentials of the firmware or the service, except to the narrow extent that this cannot lawfully be prohibited where you live (for example for interoperability under EU law).
  • Clone or impersonate a device. Do not build, sell, or use anything that presents itself to our service as a PIPO it is not. Do not share, publish or sell a device secret.
  • Resell access. The account and the online service are for your own PIPOs. Do not resell, sublicense, rent out, or provide access to the service as part of a product or service of your own.
  • Automate or scrape it. No bots, farms, scripted request loops, or use of our endpoints as a general-purpose AI or moderation API. Cloud generation is metered per device for exactly this reason.
  • Attack it. No probing for holes, credential stuffing, denial of service, or attempts to reach other people's accounts, devices or data.
  • Circumvent limits. Do not evade rate limits, quotas, revocation, or the personality lock.
  • Abuse the safety filters. Do not use PIPO to generate content that is illegal, hateful, sexual, harassing, or harmful, and do not attempt to jailbreak the model through the device's inputs.
  • Use it for anything critical. No use in medical, care, safety, security, monitoring, industrial or transport settings. See section 2.
  • Misrepresent it. Do not present PIPO as a medical, therapeutic, safety or monitoring product to anyone else, including in a resale listing.

Security research done in good faith is welcome - tell us first (section 22) and stay away from other people's devices and data. We will not pursue someone who reports a real hole responsibly.

Breaking these rules can cost you access to the online service, and in serious cases the revocation of a unit's ability to connect. It does not take away the physical device you paid for, which will continue to work offline.

12. Paid add-ons

We may sell optional extras - props, expressions, animations and similar - delivered over the internet to units bound to your account.

  • Licensed, not sold. An add-on is a personal, non-exclusive, non-transferable licence to use it on PIPOs bound to your account. You do not own the content itself.
  • Tied to the account. Entitlements follow your account, not a specific unit. Selling a device does not transfer them, and they cannot be sold, gifted or traded separately.
  • They can become unavailable. An add-on may stop being offered, or stop working, if a service it depends on ends (section 8). Where an add-on you paid for is withdrawn within a reasonable time of purchase, contact us and we will deal with it fairly.
  • Digital delivery and refunds. Because add-ons are delivered immediately, statutory cancellation rights for digital content may be lost once delivery starts - where the law where you live requires your explicit acknowledgement of that, we ask for it at purchase.
  • Nothing in an add-on changes personality (section 6).

No add-ons are on sale as of version 2026-08-01 of these terms. This section exists so that the rules are set before the first one ships, not written afterwards to suit us.

13. Hardware, batteries and safety

PIPO is a small electronic device with a rechargeable lithium battery. Ordinary sense applies, and the following are conditions of use:

  • Charge it with a standard USB power source that meets the specification in the manual. Do not use a damaged cable or an unbranded fast charger.
  • Do not puncture, crush, drop, disassemble, submerge or heat the device or its battery. It is not waterproof and it is not splash-proof.
  • Keep it in normal indoor temperatures, out of direct sun, and away from water, sinks and bathrooms.
  • Stop using it and disconnect it if it becomes hot, swollen, deformed, or smells wrong, and contact us.
  • It contains small parts. Keep it away from children under three and from pets that chew.
  • Do not open the case. There is nothing user-serviceable inside, and opening it ends the warranty.
  • Dispose of it as electronic waste under your local rules. Do not put the battery in household rubbish.

Radio and certification. PIPO uses 2.4 GHz WiFi. Its regulatory status is [CERTIFICATION STATUS - FCC / CE / SDPPI - DECIDE BEFORE SELLING ABROAD]. If you import a unit into a country where it is not certified, you are the importer and that is your responsibility.

14. Buying, delivery, import duties and returns

Price and taxes

Prices are as shown at the point of sale, in the currency shown there. Where you are buying from outside [SELLER COUNTRY], the price does not include import duty, VAT/GST, customs handling or courier brokerage fees. Those are charged by your own country and are payable by you. We cannot estimate them, cannot pay them for you, and will not mark a parcel as a gift or under-declare its value.

Delivery and risk

Delivery estimates are estimates. Risk of loss passes to you on delivery to the address you gave us, or on collection by a forwarder you appointed. If a parcel arrives damaged, tell us within 7 days with photographs.

Returns

You may return an unused PIPO in its original condition within 14 days of delivery for a refund of the purchase price, less return shipping, unless the law where you live gives you something better - in which case that law wins. [RETURNS POLICY DETAIL - WHO PAYS RETURN SHIPPING - DECIDE BEFORE LAUNCH]

Warranty

We warrant the hardware against manufacturing defects for 12 months from delivery. If a unit fails in that period through no fault of yours, we will repair it, replace it, or refund it, at our choice. The warranty does not cover accidental damage, water, drops, opened cases, modified firmware, battery wear from normal use, or cosmetic marks.

Statutory consumer rights - including the legal guarantee of conformity in the EU and equivalent protections elsewhere - apply in addition to this warranty and are not reduced by it.

15. Warranty disclaimer

Beyond the hardware warranty in section 14 and anything the law where you live requires, the online service, the firmware, and everything PIPO says are provided "as is" and "as available", without warranties of any kind, whether express or implied - including any implied warranty of merchantability, fitness for a particular purpose, accuracy, or non-infringement.

We do not warrant that the service will be uninterrupted, timely, secure or error-free, that generated lines will be accurate or appropriate, or that defects will be corrected.

Some jurisdictions do not allow the exclusion of implied warranties. Where that is the case, the exclusions above apply only to the extent permitted, and your statutory rights are unaffected.

16. Limitation of liability

The cap: our total liability to you, for everything arising out of or connected with PIPO, the firmware, the service and these terms taken together, is limited to the amount you actually paid for the PIPO unit and any add-ons concerned. That is the whole of it.

What we are not liable for

To the fullest extent the law allows, we are not liable for indirect, incidental, special, consequential, punitive or exemplary damages, nor for:

  • lost profits, lost revenue, lost business, lost opportunity or lost goodwill;
  • loss or corruption of data, including a unit's level, EXP or history;
  • emotional distress or attachment to a device or a character;
  • any decision taken in reliance on something PIPO said;
  • the unavailability, change or discontinuation of any cloud feature (section 8);
  • anything caused by third-party services, networks, or the AI provider;
  • anything caused by your own modification of the device or its firmware;
  • use of PIPO in a way section 2 or section 11 tells you not to.

What is never excluded

Nothing in these terms limits or excludes our liability for death or personal injury caused by our negligence, for fraud or fraudulent misrepresentation, for defective products where liability cannot lawfully be excluded, or for anything else that the law where you live does not permit to be limited. If a court finds any limitation here unenforceable, the rest still stands.

This section is the part of these terms most likely to be tested, and it is deliberately written to be honest rather than maximal: an unreasonable cap is one a court can strike out entirely, which would leave us with no cap at all.

17. Your responsibility to us

If someone brings a claim against us because of how you used PIPO - a use prohibited by section 11, a breach of a law about listening devices or privacy, a resale in which you described PIPO as something it is not, or content you caused it to generate - you agree to cover the reasonable losses, damages and legal costs that result.

This does not apply to a consumer to the extent that the law where you live does not permit it, and it never covers a claim caused by our own breach.

18. Suspension and termination

  • You can leave any time. Unlink your devices and ask us to delete your account (see the Privacy Policy). Your PIPO keeps working offline.
  • We can suspend or close an account that breaks section 11, that is being used to attack the service, or where we are required to by law. Where it is proportionate, we will warn first.
  • We can revoke a unit whose device secret is known to be compromised, that is reported stolen, or that is being used to abuse the service. A revoked unit cannot connect; it still works offline.
  • What survives: sections 15, 16, 17 and 20 continue to apply after an account ends.
  • No refund on termination for cause. Closing an account for a breach of these terms does not entitle you to a refund of the hardware or of any add-on.

19. Changes to these terms

These terms are versioned. The version you are reading is 2026-08-01, in effect from 1 August 2026.

  • When we accept your signup we record which version you accepted and when.
  • If we change these terms in a way that affects your rights or obligations, we publish a new version and ask you to accept it the next time you sign in. A previous acceptance is never silently carried forward onto new text.
  • Corrections that do not change meaning - typos, formatting, clearer wording - can be made without a new version.
  • If you do not accept a new version, you can stop using the online service. Your PIPO continues to work offline, and the terms you already accepted continue to govern what happened before.

20. Governing law and disputes

These terms are governed by the laws of [GOVERNING LAW - e.g. THE REPUBLIC OF INDONESIA - DECIDE BEFORE LAUNCH], without regard to conflict-of-laws rules. Disputes will be brought before the courts of [COURTS / VENUE - e.g. JAKARTA, INDONESIA].

If you are a consumer, this choice does not take away the protection of the mandatory consumer law of the country where you live, and it does not stop you bringing a claim in your own local courts where that law gives you the right to. EU and UK consumers keep every right their own law gives them.

Before going to court

Please contact us first (section 22). Most problems are a support question wearing a suit, and we would rather fix your PIPO than argue about it. If we cannot resolve it within 30 days, either of us may take it further.

The English text of these terms is the operative version. A translation is offered for convenience only; if the two disagree, the English controls.

21. General

  • Whole agreement. These terms, the Privacy Policy, and anything shown to you at the point of sale are the entire agreement between us about PIPO, and replace any earlier discussion.
  • Severability. If a clause is found unenforceable, it is cut back only as far as needed and the rest continues in force.
  • No waiver. If we do not enforce something immediately, we have not given up the right to enforce it later.
  • Assignment. You may not transfer your rights under these terms without our consent. We may transfer ours if the business is sold, provided your rights are not reduced.
  • No third-party rights. Nobody other than you and us can enforce these terms.
  • Force majeure. Neither of us is liable for a delay or failure caused by something genuinely outside our control - a natural disaster, a war, an outage at an upstream provider, or a government restriction.
  • Export and sanctions. You may not export, re-export or use a PIPO in breach of applicable export-control or sanctions law.
  • Notices. We contact you at the email address on your account. Keep it current: a notice we send there counts as delivered.

22. How to contact us

Seller
[SELLER LEGAL NAME]
Email
[SUPPORT EMAIL]
Postal address
[FULL POSTAL ADDRESS]
Security reports
[SECURITY EMAIL]

For anything about your data specifically, see the Privacy Policy, which has its own contact details and explains how to ask for a copy of your data or have it deleted.

Version 2026-08-01 · in effect from 1 August 2026 · Privacy Policy · Home