LogHog

Privacy policy

Last updated 11 November 2026

1. Who we are

LogHog is made and run by Louis Whyte, a sole trader in London (“we”, “us”). We are the data controller for the information described here, registered with the Information Commissioner’s Office (ICO) under registration number ZC261033. You can reach us at [email protected].

2. What LogHog keeps

Your account

Your email address and password (stored scrambled by our database provider, so nobody, including us, can read it), when you signed up, and the permissions you have given: the health information consent you tick when you create an account, and whether you have allowed Ask AI.

If you log in with Google or Apple, you have no LogHog password unless you add one. Instead we keep the email address Google or Apple gives us, the ID it uses for you, and, if Google sends them, your name and a link to your Google profile picture (LogHog does not show or use either). We never see your Google or Apple password. If the email is one you already use for LogHog, you log in to that same account. Apple lets you hide your real email address: if you do, Apple gives us a private address that passes our emails on to you, and that becomes your account’s email. When you delete an account you log in to with Apple, the iPhone app also tells Apple, so LogHog no longer has access to your Apple ID.

What you add

Everything you enter in the modules: bookings (with venues, guests, amounts, notes and attached files), balances, habits, trackers, checklists, recipes, intake, your watchlist, your reading list, your places (with where each one is, and any photos you keep of it), your workouts (exercises, routines and the sets you finish, with weights and reps), your countdowns and your tables (whatever rows and columns you choose to keep in them). This can include other people’s names, such as your guests or people who owe you money. We keep those only as part of your records and never contact them.

Things you share

If you share a list, the people you let in can see it, and change it if you allow that, and they see your email address. When you ask to join someone else’s, they see your email address before they decide whether to let you in. A shared list stays its owner’s: what the people on it add is kept with it, and if the owner stops sharing it or deletes it, it goes from everyone’s devices, along with anything they added. On a shared list, the owner and the people who can change it see who added each item: the name you give in Settings (Your name), or, to the owner only, your email address if you have not given one. People who can only view it do not see this. If the owner allows Ask AI on a shared list, the people on it can send it to Gemini when they use Ask AI (section 5). If you report something shared with you, we keep the report and your email address so we can look into it.

A Places list can be shared in the same way. The people on it see its places, with each place’s ratings and fields in that list. Notes belong to a list, so the notes you write in one list are never shown with another. The list’s owner chooses whether its notes, photos, Want to go or Been, and who recommended a place are shown too. Photos added to a shared list are kept with its owner’s account. When someone who can change a list you share searches Google for it, those searches and the places they pick count towards your own monthly Places allowance and your map’s limit, and LogHog keeps the positions of the list’s places up to date for everyone on it, for the 30 days Google allows (section 7).

If you turn on being told when someone asks to join, Apple gives LogHog a code for your iPhone, which we keep so our server can send that one kind of notification. It is deleted when you sign out.

Your settings

Your name, your dashboard, your module settings and the note LogHog’s AI keeps about your preferences, which you can read and edit in Settings. If you make a calendar feed (Settings, Bookings, Calendar), LogHog creates a private web link that calendar apps such as Google Calendar can subscribe to, and anyone who has that link can see your bookings. You can reset the link at any time, which stops the old one working. The feed is separate from LogHog’s Apple Calendar sync on iPhone (section 3), which happens on the phone itself and uses no link.

Your subscription

Whether you subscribe to LogHog Premium, and when it renews or ends. Card details go straight to the payment provider (Stripe on the website, Apple in the iPhone app). We never see them.

Messages you send us

Anything you email us, and any suggestion or problem report you send from the app, along with the app version and the kind of device it came from.

Diagnostics

When something goes wrong, the app records what failed, on which page, and your account ID, so the fault can be found. It does not record the contents of your records. The server also notes each call it makes to an outside service on your behalf: which service, when, how long it took and, for Ask AI, how large and how costly the request was. It does not note what you asked.

3. What stays on your phone

• Apple Calendar. If you allow it, LogHog reads your calendar on the phone to show your events beside your bookings, and adds your bookings to a calendar there. Your calendar events are never sent to LogHog. This is not the calendar feed described in section 2.
• Contacts. If you allow it, LogHog reads names only (no numbers, emails or addresses), on the phone, to suggest names as you type a guest, someone who owes you money, or who recommended a film or book. It asks the first time you tap one of those boxes, not before. Only the names you actually use are saved. When a guest you save matches someone in your contacts, or you link a name to a contact yourself, LogHog also keeps the phone’s reference to that contact, so renaming them in Contacts renames them in LogHog too.
• Camera and photos. A barcode is read on the phone. A photo you attach to Ask AI is sent to Gemini with that message (see section 5) and is not kept by LogHog.
• Location. If you allow it, Places reads where you are on the phone, to put the nearest places first and show you on its map. It asks the first time you tap to find yourself, not before. Once you have allowed it, Places’ tiles on Home read it too, to show the nearest places. The last place the phone found you is kept on the phone, so distances show straight away the next time you open Places or Home; it never goes to your account or to us, and it is forgotten when you sign out, when someone else signs in on the phone, or when you turn location off. Where you are is saved to your account only if you tap Use where I am, which saves a place at that spot. When you search for a place, your position goes with the search (or, if Places does not know where you are, the middle of the map), so that nearby places come first and each result can show how far away it is. The search goes to Google through our server, which does not keep the position. Instead of where you are, Places can measure from a postcode you type: it is looked up by postcodes.io, and the last three you used are kept on the phone only, forgotten when you sign out or someone else signs in.
• Reminders, Live Activities and the Countdowns widget are made by the phone itself. LogHog uses no push service, so nothing about them is sent to us or anyone else. They can show a booking’s name, a recipe step, a countdown’s title or what a reminder is about on your Lock Screen and Home Screen, where anyone holding the phone can see them. To feed the widget, LogHog keeps a copy of your countdowns in a space on the phone that only LogHog and its widget can read.
• A workout in progress. The exercises and sets you have planned but not yet done stay on the phone; each set is saved to your account when you tick it.
• Files attached to bookings, and photos of places, stay on the phone they were added on, unless you have LogHog Premium, which backs them up to your account.
• Using LogHog on iPhone without an account keeps everything on the phone. Nothing is sent to us until you sign in.

4. Health information

Some of what you can log is health information: food and drink, alcohol, caffeine, weight, blood pressure, your workouts, or anything else you choose to track or keep in a table. LogHog only ever has what you add yourself. It reads nothing from Apple Health or any other app or device, so if you never log anything like this, it holds none. The law treats this as a special category of personal data, so we keep it only with your explicit consent, which you give when you create an account. We use it only to show it back to you. It is never used for anything else and never shared, apart from the providers in section 6 that store and carry it, and Gemini if you ask Ask AI about it.

You can take back that consent at any time by deleting the records concerned, or your whole account.

5. Ask AI

Ask AI is part of LogHog Premium. It asks your permission the first time you use it. When you send a message, LogHog sends your message, any photo you attach, the records it needs to answer (usually the ones in the module you are using) and your AI preferences note to Google’s Gemini service, through our server.

• Google does not use any of it to train its models. Under its terms for paid services, it may keep it for a short time to detect abuse.
• LogHog does not keep the conversation. It is gone when you leave the page. Only the preferences note you can see in Settings is kept.
• You can withdraw your permission in Settings, under LogHog Premium. Ask AI will then ask again before it sends anything.
• A list someone has shared with you is only sent if its owner has allowed Ask AI on it.
• AI answers can be wrong. They are not medical, nutritional or financial advice.

6. Who else handles your data

These companies do work for us, under contracts that only let them use your data to provide that work. “Straight from your device” means that service sees your device’s internet address, as any website you load does. “Through our server” means it sees our server’s address, not yours, and only what is needed for the request.

Some of these companies process data outside the UK, including in the United States. Where they do, the transfer is covered by safeguards the UK recognises, such as the UK–US data bridge or the UK’s international data transfer addendum.

7. How long we keep it

• Your account and records: for as long as you have the account.
• Places found on Google: Google’s terms let us keep a place’s position and address for 30 days. Places looks them up again before then while you are using the list, and anything older is cleared from your account each night. The place’s name, your notes and Google’s reference for it are kept.
• Something you delete: gone from our database straight away. A note that it was deleted, with no contents, is kept for 30 days so your other devices can remove it too.
• Your whole account: when you delete it in the app (Settings, Account, Delete account), your records, files, settings and account are removed at once, and any website subscription is cancelled.
• Backups: a copy of the database is taken each week and kept for 35 days, so something deleted can remain in a backup for up to 35 days. Backups are encrypted, private and used only to restore LogHog after a failure.
• Diagnostics: error reports for 30 days; the record of calls to outside services for 180 days.
• Reports about something shared: for as long as we need them to deal with what was reported.
• Emails and suggestions: for as long as they are useful. Ask and we will delete them.
• Payments: Stripe and Apple keep their own records for as long as tax law requires.

8. Why we are allowed to

Under UK data protection law we rely on:

• Providing the service you signed up for (a contract with you): your account, your records, your settings and your subscription.
• Your explicit consent: health information, and sending your data to Gemini through Ask AI.
• Our legitimate interest in keeping LogHog working and secure: diagnostics, backups and the limits that stop the service being abused.
• The law: records of payments.

9. Your rights

You can:

• see and correct your information, which you can do yourself in the app;
• delete it, record by record or all at once by deleting your account in the app;
• have a copy of everything we hold about you, in a common format: email us and we will send it within a month;
• object to or ask us to limit how we use it;
• withdraw a consent at any time: Ask AI in Settings, health information by deleting it;
• complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would like the chance to put it right first, so please tell us too.

10. Keeping it safe

Everything travels encrypted. The database lets each account read only its own records, booking files are private to their owner, and payment details never reach us. No system is perfectly secure, and if something went wrong that put your data at risk, we would tell you and the ICO as the law requires.

11. Children

LogHog is not meant for children under 13, and we do not knowingly keep their information. If you think a child has made an account, tell us and we will delete it.

12. Changes to this policy

The date at the top says when this policy last changed. If we change it in a way that matters, we will tell you in the app or by email before the change takes effect.