Why Pip exists
Receipts are terrible at their one job. Thermal paper fades in months, the drawer fills up, and when you finally need one — a warranty claim, a tax question, "how much did milk cost last year?" — it is gone or unreadable.
The obvious fix, scanning apps, mostly came with a quiet trade: your purchase history becomes the product. Photos uploaded to someone's cloud, data enriched, sold to "partners", ads sharpened against your groceries. We read those privacy policies so you don't have to, and we didn't like them.
So Pip is built the other way around. Text recognition runs on your iPhone. Photos never leave your devices. The one thing sent out — redacted text, for interpretation — is documented in a table anyone can read. And the business model is a subscription, because when you are the customer, you don't have to be the product.
The rules Pip is not allowed to break
These are design constraints, written down before the first screen was drawn. The app is engineered so breaking them would take a rewrite, not a settings change.
- The photo never travels. Our servers have no endpoint that can receive an image. Not "we don't" — we can't.
- Every scan is reviewed by you. AI misreads things. Pip checks its own arithmetic, flags what it is unsure about, and asks — it never silently saves a guess.
- History is never rewritten. A receipt from last March converts at last March's official rate, and your corrections are never overwritten by a sync.
- Leaving is easy. Export everything as a spreadsheet, delete your account from Settings. Your data is not a hostage.
Who builds it
Pip is designed and built by Baloot MY Digital Agency, a native iOS app studio in Malaysia. We build small and deliberate: the person who answers your email is the person who wrote the code running on your phone. No growth team, no ad deals, no investors asking what your receipts are worth.
See what else we make at baloot.my, or say hello at hello@baloot.my.
And the little face?
Pip is a receipt with a face. He cheers when you save, stays politely neutral when you hit a limit, and never appears next to anything serious — deletions and billing are yours alone. Keeping a ledger is housekeeping; Pip's job is to make you not dread it.