Privacy Policy

The short version

HogView is an iOS app that displays analytics and revenue metrics from services you already use — PostHog, RevenueCat, Stripe, Sentry, App Store Connect and Plausible. There is no HogView server, no account, no analytics SDK and no crash reporting. Exactly one thing is collected, and it is the App Store receipt behind the subscription. It is described below.

What HogView does not do

• No accounts. You never register, and there is nothing to sign in to except your own services.
• No backend. There is no HogView server. Nothing you view in the app is sent to the developer.
• No product analytics, no crash reporting, no advertising. The app does not measure how you use it, and there is no advertising or attribution SDK in the binary. Apple's privacy manifest declares tracking as false with no tracking domains.

The one exception: your subscription

HogView Pro is sold through the App Store. Apple takes the payment, and RevenueCat validates the receipt so the app knows whether the subscription is active.

• HogView never calls RevenueCat's logIn(), so the RevenueCat customer is an anonymous identifier with no email address and nothing to join it to.
• Apple's privacy manifest declares exactly one collected data type: Purchase History, marked not linked to you and not used for tracking, collected for app functionality.
• Apple and RevenueCat see that a purchase happened. They do not see your API keys, your metrics, or your name.

Their handling of that record is governed by Apple's privacy policy and RevenueCat's privacy policy, not this one.

What stays on your device

• API keys you supply are stored in the iOS Keychain with WHEN_UNLOCKED_THIS_DEVICE_ONLY protection, which keeps them off backups and off your other devices. They are sent only to the service they belong to, over HTTPS, to fetch your data.
• Metric data — dashboards, charts, cached numbers — is cached on your device so you can read your last-loaded figures without a connection. It is never sent anywhere else.
• Alerts and the daily digest are computed locally on your device from thresholds you set. There is no push server.
• The Home Screen widget reads a shared container holding pre-formatted text only. It never fetches anything and never sees a credential.

Disconnecting a source deletes its credentials and everything cached from it. Deleting the app removes all of it.

Where data goes

The only network traffic HogView produces — apart from the subscription check described above — is direct requests from your device to the services you configured, using yourkeys: exactly the requests those services' own apps or websites would make. Each service's handling of that traffic is governed by its own privacy policy, not this one.

This website

This policy covers the HogView iOS app. This website is operated by SailQuiz and sets an analytics cookie the app does not — your use of it is covered by the website privacy policy. If you give us an email address to be told when HogView ships, we store that address and use it once, for that announcement.

Your rights (GDPR / CCPA)

The developer holds no personal data about you server-side from your use of the app, so there is nothing to access, export, correct or delete on our end. Everything the app knows lives on your device and is yours to delete — disconnect a source, or remove the app.

For the subscription record, Apple and RevenueCat act as processors. Write to [email protected] with any request and we will point you at the right place.

Children's privacy

HogView is a tool for people who run software products. It is not directed at children, it collects nothing that could identify one, and it has no accounts, no messaging and no user-generated content.

Changes

If this policy ever changes — for example if a future version adds opt-in crash reporting — the change will be stated here plainly, with a new effective date.

Contact

Privacy questions: [email protected]
Everything else: [email protected] or the support page.