Privacy Policy

1. Who we are

Hippora provides a private reflective application and this website. Hippora is independently operated under the name Hippora, with its website at hippora.org. Based in North End, Portsmouth, Hampshire, England, PO2 9EA. For the identity and contact details of the person responsible for processing personal data, contact us using the email address below. If you have a question about this policy, write to info@hippora.org and a person will answer.

2. What we collect

Account information, such as your email address, name where provided, and account identifier, is processed to provide sign-in and your account. Journal entries, conversation history, voice memories, and other reflections are stored on your device; general cloud backup for these features is not enabled. Future Letters can be saved in a sealed cloud vault with associated metadata. When you use AI conversations, the messages and relevant context, which may include memory summaries, are transmitted to the AI service to generate a response. We also process subscription status, voice usage allowances, and technical diagnostics to operate the app.

3. The sensitive things you write

People bring Hippora their health, their relationships, their beliefs and their worst nights. Some of that counts as special category data under European law. We treat all of it the same way: it is used only to personalise your reflection, power your memory and let the mentor understand you. It is never sold, never shared with advertisers, and never used to build a profile of you for anyone other than you.

4. What we never collect

We do not collect your contacts, your location, your browsing history outside Hippora, or advertising identifiers. We do not buy data about you from anyone.

5. Why we hold it

To provide Hippora's conversations, memory features, Future Letters, subscriptions, and support for the service. Relevant information is processed for account access, feature delivery, usage allowances, and diagnostics.

6. What we never do with it

We do not sell personal information or use your reflections for advertising. Hippora does not operate an advertising or cross-app tracking model. AI requests are processed by service providers under their applicable terms; details of their processing and retention practices are available in their published policies.

7. Legal basis

We process your content to perform the contract you entered into when you created an account. Where we rely on consent, such as for optional emails or for sending your words to our AI providers, you can withdraw it at any time.

8. AI processing and the providers we use

Hippora is an AI thinking partner. AI processing is how it works, and it cannot do what it does without it. Before any of your words leave Hippora for the first time, we ask you to agree to AI processing and we explain what will be shared. Nothing is sent to an AI provider until you agree. Because AI is the whole of the product, declining means you cannot continue into Hippora, and withdrawing later means Hippora can no longer act as your mentor.

The following AI services are described in Hippora’s processing disclosures. Information shared depends on the features you use and the context required to provide them.

Anthropic, PBC generates the mentor's replies. It receives the message you wrote or the transcript of what you said, together with the memories and recent conversation context needed to answer you well. Hippora uses Anthropic's commercial API, under which your inputs and outputs are not used to train Anthropic's models. The provider’s current retention and processing terms are described in its privacy documentation. Anthropic's privacy policy is at anthropic.com/legal/privacy.

Eleven Labs, Inc. powers voice, and only when you use it. It receives the text of Hippora's reply when you use spoken responses, so that the reply can be read aloud. Speech recognition runs on your device. Information sent for speech generation is handled under the provider's applicable terms. Its privacy policy is at elevenlabs.io/privacy.

We will update this policy when material information about our AI providers changes.

Your choices:

• Nothing is sent to Anthropic or ElevenLabs until you agree on the AI processing screen.
• Because AI is the whole of the product, declining means you cannot continue into Hippora.
• You can withdraw consent at any time in Settings, under AI Data and Privacy. After that, nothing further is sent to either provider.
• Voice is separate. If you never use voice, nothing is ever sent to ElevenLabs.
• You can delete your account using the available app controls or contact us for help. Account deletion is intended to remove your account and associated personal content. Limited service records or backups may remain temporarily or where required by law; contact us with any questions about your request.

9. Everyone else who touches your data

Other services supporting Hippora include Firebase for authentication, the sealed Future Letters vault, and diagnostics, and RevenueCat for subscription status and entitlements. Cloudflare helps route AI requests. These services process information relevant to their roles, subject to their respective terms. Contact us if you would like further information.

10. Where your data goes

Some AI processing may involve transfers outside the United Kingdom and European Economic Area, including processing by US-based service providers. The applicable transfer safeguards depend on the provider, its current agreements, and the service configuration. Contact Hippora for details of the safeguards applicable to your information.

11. Retention

Journal entries, conversation history, and voice memories are stored on your device rather than in a general cloud backup. Sealed Future Letters and their metadata are stored through Firebase. Firebase also supports account access and voice usage records, while RevenueCat supports subscription entitlements. When you use AI conversations, your messages and relevant context are sent for processing by Anthropic; when you use spoken replies, reply text is sent to ElevenLabs. These providers handle requests under their applicable terms. When you delete your account, Hippora's deletion process is intended to remove your account and associated personal content. Some service records and backups may remain temporarily or where retention is required by law. Contact us if you have questions about a deletion request.

12. Your rights

You can access, correct, export, restrict and erase your data. Some controls are available in the app, and you can contact us to exercise your data protection rights. You can withdraw consent to AI processing at any time, after which nothing further is sent to our AI providers. You may also complain to your local data protection authority.

13. Children

Hippora is intended for adults aged eighteen and over. We do not knowingly collect data from anyone under eighteen. This also reflects the terms of the AI providers described in section 8, which are themselves restricted to adults. If we learn that an account belongs to a child, we will close it and delete the content.

14. Changes

We will publish updates to this policy and provide additional notice where required by law.

15. Contact

Privacy questions: info@hippora.org
Data protection requests: info@hippora.org

A person answers both. If you are in the European Economic Area or the United Kingdom, you also have the right to complain to your local data protection authority.