Privacy Policy

1. Who we are

Hippora provides a private reflective application and this website. The data controller is [LEGAL ENTITY NAME], [REGISTERED ADDRESS]. If you have a question about this policy, write to info@hippora.org and a person will answer.

2. What we collect

Account details you give us, which is an email address and, if you choose, a first name. The reflections, journal entries and voice recordings you create. The memories Hippora derives from those. Basic technical data needed to run a service securely, such as error logs and sign in events.

3. The sensitive things you write

People bring Hippora their health, their relationships, their beliefs and their worst nights. Some of that counts as special category data under European law. We treat all of it the same way: it is used only to personalise your reflection, power your memory and let the mentor understand you. It is never sold, never shared with advertisers, and never used to build a profile of you for anyone other than you.

4. What we never collect

We do not collect your contacts, your location, your browsing history outside Hippora, or advertising identifiers. We do not buy data about you from anyone.

5. Why we hold it

To provide the service you asked for, and for no other purpose. Your reflections exist so that Hippora can remember them for you. That is the entire reason.

6. What we never do with it

We do not sell it. We do not share it with advertisers or data brokers. We do not use it to train artificial intelligence models, and neither do the AI providers we use, which is a contractual commitment and not a setting you have to find. We do not read it to improve the product.

7. Legal basis

We process your content to perform the contract you entered into when you created an account. Where we rely on consent, such as for optional emails or for sending your words to our AI providers, you can withdraw it at any time.

8. AI processing and the providers we use

Hippora is an AI thinking partner. AI processing is how it works, and it cannot do what it does without it. Before any of your words leave Hippora for the first time, we ask you to agree to AI processing and we explain what will be shared. Nothing is sent to an AI provider until you agree. Because AI is the whole of the product, declining means you cannot continue into Hippora, and withdrawing later means Hippora can no longer act as your mentor.

We use two AI providers. Each receives only what is needed to produce a single response, and neither may use your content for its own purposes.

Anthropic, PBC generates the mentor's replies. It receives the message you wrote or the transcript of what you said, together with the memories and recent conversation context needed to answer you well. Hippora uses Anthropic's commercial API, under which your inputs and outputs are not used to train Anthropic's models. Anthropic normally deletes API inputs and outputs within thirty days, with longer retention only where required for safety, policy enforcement or legal compliance. Anthropic's privacy policy is at anthropic.com/legal/privacy.

Eleven Labs, Inc. powers voice, and only when you use it. It receives your voice audio to turn speech into text, and the text of Hippora's reply to turn it back into speech. We have switched off ElevenLabs' optional use of newly submitted data for general model improvement. ElevenLabs does reserve the right to moderate inputs and outputs for safety and fraud prevention, and states that it will not keep data it generates about your voice for longer than three years after your last interaction. Its privacy policy is at elevenlabs.io/privacy.

If we ever add or change an AI provider, we will update this section and email every account before it takes effect.

Your choices:

• Nothing is sent to Anthropic or ElevenLabs until you agree on the AI processing screen.
• Because AI is the whole of the product, declining means you cannot continue into Hippora.
• You can withdraw consent at any time in Settings, under AI Data and Privacy. After that, nothing further is sent to either provider.
• Voice is separate. If you never use voice, nothing is ever sent to ElevenLabs.
• You can delete your account and everything in it at any time in Settings, under Delete account.

9. Everyone else who touches your data

Beyond the two AI providers above, we use a small number of processors to run the service: cloud hosting and storage, payment processing through the app stores, and error reporting. Each is bound by contract, each is limited to the minimum necessary, and none may use your content for its own purposes. We will name any of them on request and we will never hide behind the phrase "trusted partners".

10. Where your data goes

Your content is encrypted in transit and at rest. Both of our AI providers are United States companies, so using Hippora means some of your content is transferred outside the European Economic Area and the United Kingdom. Anthropic relies on adequacy decisions and standard contractual clauses for those transfers. ElevenLabs is certified under the EU to US and Swiss to US Data Privacy Framework and the UK Extension, and maintains hosting in the United States, the Netherlands and Singapore, with personal data ultimately stored in the United States.

11. Retention

We keep your content until you delete it or close your account. Deleted content leaves live systems immediately and backups within thirty days. Our AI providers retain what passes through them according to their own published policies, described in section 8.

12. Your rights

You can access, correct, export, restrict and erase your data. Most of these are self serve inside the app and take effect at once. You can withdraw consent to AI processing at any time, after which nothing further is sent to our AI providers. You may also complain to your local data protection authority.

13. Children

Hippora is intended for adults aged eighteen and over. We do not knowingly collect data from anyone under eighteen. This also reflects the terms of the AI providers described in section 8, which are themselves restricted to adults. If we learn that an account belongs to a child, we will close it and delete the content.

14. Changes

If this policy changes in any way that affects you, we will email every account before the change takes effect. We will not rely on you noticing a new date at the top of a page.

15. Contact

Privacy questions: info@hippora.org
Data protection requests: info@hippora.org

A person answers both. If you are in the European Economic Area or the United Kingdom, you also have the right to complain to your local data protection authority.