LogHog
Privacy policy
Last updated 21 September 2026
The short version
- LogHog keeps what you put into it so it can show it back to you, on each of your devices. That is what it is for, and all it is for.
- There are no adverts, no tracking and no analytics, and nothing is ever sold.
- Ask AI sends what it needs to Google’s Gemini, and only after you have said yes. Google does not use it to train its models.
- You can delete your account, and everything in it, from inside the app at any time.
1. Who we are
LogHog is made and run by Louis Whyte, a sole trader in London (“we”, “us”). We are the data controller for the information described here. You can reach us at [email protected].
2. What LogHog keeps
Your account
Your email address and password (stored scrambled by our database provider, so nobody, including us, can read it), when you signed up, and the permissions you have given: the health information consent you tick when you create an account, and whether you have allowed Ask AI.
What you add
Everything you enter in the modules: bookings (with venues, guests, amounts, notes and attached files), balances, habits, trackers, checklists, recipes, intake, your watchlist and your reading list. This can include other people’s names, such as your guests or people who owe you money. We keep those only as part of your records and never contact them.
Your settings
Your name, your dashboard, your module settings and the note LogHog’s AI keeps about your preferences, which you can read and edit in Settings. If you make a calendar feed (Settings, Bookings, Calendar), LogHog creates a private web link that calendar apps such as Google Calendar can subscribe to, and anyone who has that link can see your bookings. You can reset the link at any time, which stops the old one working. The feed is separate from LogHog’s Apple Calendar sync on iPhone (section 3), which happens on the phone itself and uses no link.
Your subscription
Whether you subscribe to LogHog Premium, and when it renews or ends. Card details go straight to the payment provider (Stripe on the website, Apple in the iPhone app). We never see them.
Messages you send us
Anything you email us, and any suggestion or problem report you send from the app, along with the app version and the kind of device it came from.
Diagnostics
When something goes wrong, the app records what failed, on which page, and your account ID, so the fault can be found. It does not record the contents of your records. The server also notes each call it makes to an outside service on your behalf: which service, when, how long it took and, for Ask AI, how large and how costly the request was. It does not note what you asked.
3. What stays on your phone
- Apple Calendar. If you allow it, LogHog reads your calendar on the phone to show your events beside your bookings, and adds your bookings to a calendar there. Your calendar events are never sent to LogHog. This is not the calendar feed described in section 2.
- Contacts. If you allow it, LogHog reads names only (no numbers, emails or addresses), on the phone, to suggest names as you type a guest, someone who owes you money, or who recommended a film or book. It asks the first time you tap one of those boxes, not before. Only the names you actually use are saved. When a guest you save matches someone in your contacts, or you link a name to a contact yourself, LogHog also keeps the phone’s reference to that contact, so renaming them in Contacts renames them in LogHog too.
- Camera and photos. A barcode is read on the phone. A photo you attach to Ask AI is sent to Gemini with that message (see section 5) and is not kept by LogHog.
- Files attached to bookings stay on the phone they were added on, unless you have LogHog Premium, which backs them up to your account.
- Using LogHog on iPhone without an account keeps everything on the phone. Nothing is sent to us until you sign in.
4. Health information
Some of what you can log is health information: food and drink, alcohol, caffeine, weight, blood pressure, or anything else you choose to track. LogHog only ever has what you add yourself. It reads nothing from Apple Health or any other app or device, so if you never log anything like this, it holds none. The law treats this as a special category of personal data, so we keep it only with your explicit consent, which you give when you create an account. We use it only to show it back to you. It is never used for anything else and never shared, apart from the providers in section 6 that store and carry it, and Gemini if you ask Ask AI about it.
You can take back that consent at any time by deleting the records concerned, or your whole account.
5. Ask AI
Ask AI is part of LogHog Premium. It asks your permission the first time you use it. When you send a message, LogHog sends your message, any photo you attach, the records it needs to answer (usually the ones in the module you are using) and your AI preferences note to Google’s Gemini service, through our server.
- Google does not use any of it to train its models. Under its terms for paid services, it may keep it for a short time to detect abuse.
- LogHog does not keep the conversation. It is gone when you leave the page. Only the preferences note you can see in Settings is kept.
- You can withdraw your permission in Settings, under LogHog AI. Ask AI will then ask again before it sends anything.
- AI answers can be wrong. They are not medical, nutritional or financial advice.
6. Who else handles your data
These companies do work for us, under contracts that only let them use your data to provide that work. “Straight from your device” means that service sees your device’s internet address, as any website you load does. “Through our server” means it sees our server’s address, not yours, and only what is needed for the request.
| Who | What for |
|---|---|
| Supabase | Stores your account, your records, your settings and your booking files. |
| Cloudflare | Hosts the website, runs the LogHog server that passes requests to the other services, and receives email sent to loghog.co.uk. |
| Google Gemini | Ask AI, only after you allow it (section 5), through our server. |
| Google Maps | Venue search in Bookings: what you type in the venue box, straight from your device. |
| Google Books | Book search in Reading List: what you search for, through our server. |
| Google Fonts | The website’s typefaces, loaded straight from your device. |
| Stripe | Payments on the website. |
| Apple | The App Store, and payments in the iPhone app. |
| RevenueCat | Keeps track of subscriptions bought in the iPhone app. |
| Resend | Sends account emails, such as confirming your address or resetting your password. |
| Google (Gmail) | Email you send to [email protected], and a copy of any suggestion you send from the app, is received and answered from a Gmail account. |
| GitHub | Keeps the weekly backup of the database, privately. |
| Open Food Facts | Food search and barcode look-ups in Intake and Checklists, straight from your device. |
| Movie of the Night | Film search and where to watch, through our server. Posters load straight from your device. |
| TVmaze | TV search and episode dates, through our server. Pictures load straight from your device. |
| Open Library | Book covers, straight from your device. |
Some of these companies process data outside the UK, including in the United States. Where they do, the transfer is covered by safeguards the UK recognises, such as the UK–US data bridge or the UK’s international data transfer addendum.
7. How long we keep it
- Your account and records: for as long as you have the account.
- Something you delete: gone from our database straight away. A note that it was deleted, with no contents, is kept for 30 days so your other devices can remove it too.
- Your whole account: when you delete it in the app (Settings, Account, Delete account), your records, files, settings and account are removed at once, and any website subscription is cancelled.
- Backups: a copy of the database is taken each week and kept for 90 days, so something deleted can remain in a backup for up to 90 days. Backups are private and used only to restore LogHog after a failure.
- Diagnostics: error reports for 30 days; the record of calls to outside services for 180 days.
- Emails and suggestions: for as long as they are useful. Ask and we will delete them.
- Payments: Stripe and Apple keep their own records for as long as tax law requires.
8. Why we are allowed to
Under UK data protection law we rely on:
- Providing the service you signed up for (a contract with you): your account, your records, your settings and your subscription.
- Your explicit consent: health information, and sending your data to Gemini through Ask AI.
- Our legitimate interest in keeping LogHog working and secure: diagnostics, backups and the limits that stop the service being abused.
- The law: records of payments.
9. Your rights
You can:
- see and correct your information, which you can do yourself in the app;
- delete it, record by record or all at once by deleting your account in the app;
- have a copy of everything we hold about you, in a common format: email us and we will send it within a month;
- object to or ask us to limit how we use it;
- withdraw a consent at any time: Ask AI in Settings, health information by deleting it;
- complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would like the chance to put it right first, so please tell us too.
10. Keeping it safe
Everything travels encrypted. The database lets each account read only its own records, booking files are private to their owner, and payment details never reach us. No system is perfectly secure, and if something went wrong that put your data at risk, we would tell you and the ICO as the law requires.
11. Children
LogHog is not meant for children under 13, and we do not knowingly keep their information. If you think a child has made an account, tell us and we will delete it.
12. Changes to this policy
The date at the top says when this policy last changed. If we change it in a way that matters, we will tell you in the app or by email before the change takes effect.