Privacy policy
The Hippora app keeps your medicines on your iPhone and sends nothing to us. This policy explains that in full, and also covers the few places where we do handle information: when you email us, visit this website, or take part in our research.
Last updated 19 October 2026
Who we are
Hippora is made by Bradley Kirby, trading as Hippora, in the United Kingdom. In data protection law, we are the “controller” for the information described in Part B of this policy.
To contact us about anything in this policy, email support@hippora.co.uk.
Part AThe Hippora app
The app does not collect any information about you. We have no server, no account system and no analytics, and the app makes no connection to us.
Where your information is kept
The medicines you add, the times you set and the doses you record are stored only in the app, on your iPhone. They are encrypted using ChaCha20-Poly1305. The encryption key is kept in your iPhone’s Keychain, on that device only.
We cannot see your information, and we cannot recover it for you.
Phone backups
Your Hippora information is left out of iPhone backups, so a backup to iCloud or to a computer does not contain it. If you set up a new phone from a backup, Hippora starts empty and tells you so.
If you delete the app or lose your phone
Your information is deleted with the app. If you lose your phone, or move to a new one, your Hippora information cannot be moved or recovered. Nobody, including us, has a copy we could give back to you.
Reminders
Reminders are scheduled on your iPhone and are not sent from anywhere else. A reminder shows the medicine’s name and time. You can choose what your lock screen shows in your iPhone’s Settings, under Notifications.
Information Apple may share with us
Apple, not Hippora, runs the App Store and is responsible for the information it collects when you download apps. If you have chosen to share analytics or crash reports with app developers in your iPhone’s settings, Apple may pass us crash reports and download figures. Apple removes details that identify you before sharing them. We use them only to fix problems in the app.
How to stop
Delete the app. Everything it stored on your phone is deleted with it.
Part BEverything else
Hippora the app collects nothing, but we do handle some information outside the app. This part explains what, and why.
When you email us
If you email support@hippora.co.uk, hello@hippora.co.uk or licensing@hippora.co.uk, we receive your email address, your name if you include it, and whatever you write. If you contact us from inside the app, the email also includes your app version, your phone’s software version and your phone model, and nothing else.
We use this only to reply to you and to keep a record of the conversation. Our legal basis is our legitimate interest in answering the people who contact us.
Your message may include information about your health or medicines. Please send only what you are comfortable sharing. If you choose to send it, we use it only to help with your enquiry.
Our email is provided by Google (Google Workspace), which stores it on our behalf.
How long we keep it: up to two years after our last reply in the conversation, then we delete it. If you ask us to delete it sooner, we will.
Safety concerns: if your message reports something that may have affected someone’s medicines, we keep a written summary of what happened in our safety records. The summary does not include your name or email address. We keep it for as long as Hippora is available, so that we can spot patterns and fix problems.
When you visit this website
This website uses no cookies, no analytics and no advertising, and loads nothing from other companies.
The website is served by Cloudflare. To deliver pages and protect the site from attacks, Cloudflare processes technical information such as your IP address and the pages you request. Your browser may also send Cloudflare a report if a page fails to load. Our legal basis is our legitimate interest in running a working, secure website.
If you take part in our research
We sometimes ask people to try Hippora and tell us what they think. Taking part is always your choice. Before a session, we tell you what we will record, how we will use it and how long we will keep it, and we ask for your consent. You can withdraw at any time by emailing us.
Where information is processed
Google and Cloudflare may process information outside the United Kingdom, including in the United States. Where they do, the transfer is protected by safeguards recognised by UK law, such as the UK’s adequacy regulations or the International Data Transfer Addendum.
Your rights
For any information we hold about you, you have the right to:
- ask for a copy of it
- ask us to correct it
- ask us to delete it
- object to how we use it, or ask us to limit it
- withdraw your consent, where we relied on it
To use any of these rights, email support@hippora.co.uk. We will reply within one month.
We hold nothing from the app itself, so there is no app information we could send you or delete. It is on your phone, and you control it.
Children
Hippora is designed for adults keeping track of their own medicines. It is not designed for recording medicines for anyone else, including children.
Changes to this policy
If we change this policy, we will update the date at the top of this page. If a change affects what the app does with your information, we will also say so in the app’s release notes.
Complaints
If you are unhappy with how we have handled your information, please tell us first, so we can try to put it right.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator: ico.org.uk/make-a-complaint, or call 0303 123 1113.