Pepper

Security & your controls

Your family’s information.
Your say.

Choose what you share, what Pepper saves and when she can contact you. You can change your mind.

Private access.
Practical protection.

Send HOME in WhatsApp to open your dashboard. Treat the private link like a key: keep it to yourself.

Short-lived links
Sign-in links expire after 15 minutes and can be used once. Browser sessions expire after one hour.
Protected connections
Pepper uses HTTPS connections and encrypts stored email connection credentials. You sign in with Google or Microsoft; Pepper doesn’t ask for your password.
Read-only email
Connecting Gmail or personal Outlook / Hotmail is optional. The permission covers your mailbox; Pepper uses school matching rules to select messages. She cannot send, change or delete emails.

What you share

Send only what you need.

Use Pepper without connecting email by sharing notices yourself. If you connect Gmail or personal Outlook / Hotmail, manage school sender addresses and domains in Home → Settings → School email.

Email access

Pause or disconnect.

Pause automatic email checks in Settings. To remove the connection, use School email or send DISCONNECT EMAIL. Pepper removes stored credentials and requests revocation from Google where available. For Microsoft, remove Pepper’s permission separately in your Microsoft account settings.

Saved plans and reference notes remain. You can also remove access in your Google Account connections ↗ or Microsoft account permissions ↗.

Saved information

Correct it. Remove it.

Tell Pepper what needs changing. In Home, remove saved events or tasks and mark tasks done.

Morning briefings

Choose when you hear.

In Pepper Home under Reminders, choose every morning or only when needed, set a UK morning time, or switch briefings off. You can also send STOP BRIEFINGS.

Browser access

Sign out anywhere.

In Settings, use Sign out for this browser, or Sign out everywhere to end all browser sessions and cancel outstanding sign-in links.

Signing out leaves your school email connection and briefing settings in place.

A fresh start

Clear Pepper’s memory.

Send /forget as a separate WhatsApp message. For a sole owner, it clears the family profile, saved plans, chat history and associated email records. In a shared family, an invited adult leaves and clears their private Pepper chat; shared plans remain with the owner. The owner removes the other adult before clearing the family.

This doesn’t delete messages in WhatsApp. Provider backups and other service records follow their own retention rules. Deletion details →

Know where information goes.

Meta delivers WhatsApp messages. OpenAI processes shared notices, matching school email content and selected public pages linked from those emails to help Pepper extract details and answer questions. Supabase stores saved information, and Vercel hosts Pepper.

Original images, PDFs and email attachment files aren’t saved in Pepper’s database. Saved summaries and reference notes can contain personal information; provider retention policies still apply.

Read the privacy policy →

Need a hand?

We’re here to help.

For access, privacy or security concerns, email hello@trainerx.ai. Please don’t send passwords, private sign-in links or unnecessary family details.