Privacy Policy

Effective date: September 26, 2026 (previous version: July 6, 2026)

HogPilot for PostHog is an independent iPhone and iPad app that connects to your PostHog project using credentials you provide. HogPilot is not affiliated with PostHog Inc. This policy explains what the app stores, what leaves your device, and who processes it.

Data you provide

The app stores your PostHog host, project selection, OAuth tokens or personal API token on your device so it can connect to PostHog. Tokens are kept in the iOS Keychain. They are sent only to the PostHog host you connected, never to HogPilot's own servers.

PostHog project data

HogPilot reads analytics data from your selected PostHog project directly from PostHog and shows it on your device. A cache of your latest snapshot is kept on the device for offline viewing and Home Screen widgets. Favourites and pinned insights sync through your own iCloud account.

HogPilot AI (optional)

The AI tab is used only after you agree to an in-app disclosure. When you ask a question, HogPilot sends your question, the previous turns of that conversation and a summary of the selected project to DeepSeek, a third-party AI provider, through the HogPilot relay (a Cloudflare Worker). The summary contains:

• project name, time range and metric totals, trends and period-over-period changes;
• top event names with counts and top countries with user counts;
• titles of saved insights and names and times of recent events.

No API keys, OAuth tokens, email addresses or individual person profiles are sent. The relay forwards the request and streams the answer back without storing or logging its content; it keeps only short-lived rate-limit counters keyed by an anonymous install identifier and IP address. DeepSeek processes the request under its own privacy policy. Conversation history is stored only on your device and can be cleared with the new-chat button. You can use the rest of HogPilot without AI.

Cloud push alerts (optional)

If you turn on cloud alerts, HogPilot registers your device's Apple push token with the HogPilot relay and gives you a private webhook URL. PostHog sends alert webhooks to that URL, and the relay forwards them to your device through Apple Push Notification service. The relay sees only what PostHog puts in the alert (alert name, value, optional project id) and the push token. Webhook payloads and push tokens are not logged. Registration data is kept until you turn cloud alerts off or the token becomes invalid.

Local notifications

Daily Brief and background alert checks run on your device and use PostHog data fetched with your own credentials.

Ideas board

If you post or vote on an idea, the idea text and an anonymous install identifier are stored on the HogPilot relay (Cloudflare D1) so ideas can be shown to other users and moderated. Do not include personal data in ideas.

Purchases

Purchases are processed by Apple. RevenueCat receives an anonymous app user id and your purchase receipts to unlock Pro. Payment details are handled by Apple, not by HogPilot.

Support

If you email support, your email address and message are used only to respond to your request. Please do not send API tokens, passwords or customer data by email.

Tracking

HogPilot does not track you across apps or websites, does not use advertising SDKs and does not sell personal data.

Your choices

You can disconnect PostHog or delete the app at any time to remove locally stored data. Turn off cloud alerts in Settings to delete relay registration. To ask about data held on the relay, contact us below.

Contact

Questions can be sent to aydmaxx@gmail.com.