What you can never see
The parts of a patient's Pippa experience that stay private even with full consent, and why.
Even with consent granted, some things are deliberately kept private from you. Being plain about this builds trust with your patients and saves you from looking for data that does not exist. Here is exactly what stays off-limits.
The private journal
Pippa includes a private diary. Journal entries live only on the patient's device. They are never uploaded, never synced to the cloud, and never visible to you, to their guardian, or to anyone else. Consent does not change this. There is no version of the dashboard where a patient's journal appears.
The journal is intentionally designed this way. Patients are told it is private, and a diary that silently synced would break that promise. It uses gentle, guided prompts that stay away from food, calories, weight, and body comparison, so it is a safe place to reflect. When an account is deleted, the local journal goes with it.
The reasons behind coins and streaks
Pippa's pet, coins, and streaks are motivational, not clinical. You will not find an explanation of why a specific reward was given or exactly how a coin total was reached.
- Coin amounts are opaque on purpose. The app never tells the patient (or you) the precise formula behind an award. Making rewards legible invites the kind of score-keeping that is unsafe for eating-disorder recovery.
- Streaks are soft. They are designed to forgive missed days and rest days rather than punish them, so a streak number is not a measure of adherence you should read into.
You do see meal-logging behavior, adherence, weight trend, measures, and chat content once consent is granted. Those are the clinical signals. The gamification layer is there to keep patients engaged, not to be a clinical readout.
Things that are never collected at all
Some data simply never exists to be shown:
- No face or biometric processing. Meal photos are never run through face recognition or any biometric analysis.
- Location is stripped. Photos have their EXIF and GPS data removed before upload, so no location trail is attached to a meal.
If a patient asks what you can see, this page is a good answer: their care data once they consent, and never their private journal or their reward mechanics.