Trust
Privacy
How the iOS app and this static marketing site handle credentials, PostHog data, local caches, and measurement.
The short version
HogScope's developer does not receive, collect, store, or process your PostHog credentials, queries, dashboards, replay data, or cached results through the app.
HogScope has no app-owned backend, proxy, telemetry SDK, remote configuration, push service, cloud sync, or crash-reporting SDK. The iOS app sends API requests directly to the PostHog host you configure.
PostHog handles the OAuth sign-in and consent screen, so HogScope never receives or stores your PostHog password. OAuth access and refresh tokens—or the optional personal API key fallback—are stored in iOS Keychain. Query results and local definitions may be stored in the app's SQLite database when caching is enabled, but credentials are not stored there.
iOS app data flow
OAuth access/refresh tokens or a personal API key in iOS Keychain with device-only accessibility after first unlock.
Direct HTTPS calls from the device to the selected US, EU, or custom PostHog host.
Optional cached responses and saved definitions in a local SQLite database.
What the app does not include
- No PostHog analytics SDK inside the app itself.
- No Firebase, Supabase, Sentry, Amplitude, Segment, or equivalent telemetry service.
- No app-owned server receiving OAuth tokens, the API key, query text, dashboards, replay snapshots, or results.
- No iCloud synchronization of app data.
- No enabled PostHog write operations in the mobile client.
This marketing site
The repository ships this site as static HTML, CSS, and a small first-party interaction script. No analytics library, advertising pixel, cookie banner, form, or external font is bundled.
The interaction script records events in an in-memory browser array and emits a custom browser event for QA. It can forward the same event to an explicitly supplied dataLayer or PostHog browser object if the site owner later adds one. Without such a provider, it does not send analytics over the network or persist them between page loads.
Retention and deletion
The developer retains no PostHog account or analytics data from the app because that data is never sent to or received by a HogScope-operated service.
On the device, credentials remain in Keychain until you disconnect PostHog or explicitly delete Keychain credentials. OAuth access tokens expire, but a refresh token may remain until it is revoked or removed. Cached responses, configuration, and saved definitions remain in the local app database until they are replaced or you use Delete all local data. The cache-duration setting controls when a cached response is treated as stale; it is not an automatic deletion timer.
Removing the app normally removes its local SQLite database. Because iOS Keychain items can survive an app reinstall, use Disconnect PostHog or the Keychain deletion option before uninstalling if you want the credentials removed immediately. This site's in-memory QA events disappear when the page is reloaded or closed.
Third-party services
Your selected PostHog service receives the requests you choose to make and returns the requested analytics data directly to the device. HogScope does not forward that information to another analytics, advertising, or app-owned service. PostHog's privacy terms—or the terms of your self-hosted deployment—govern that service.
Apple processes App Store purchases and subscriptions. HogScope receives verified product and entitlement status through StoreKit, not your payment-card or Apple Account credentials. Apple's privacy terms govern that processing.
Control your local data
Settings includes separate controls to disconnect PostHog, remove Keychain credentials, and delete local SQLite data and saved definitions.
Privacy contact
For privacy questions or requests about HogScope, email Luan@prioritybit.co.za.