Privacy

Last updated 13 September 2026. Applies to Hapoo for iPhone.

The short version

Hapoo has no account and no sign-in. Instead, your device gets a random identifier the app generates itself, with no name, email or phone number attached to it. Your walks, routes, places and photos stay on your phone. A handful of features — weekly leagues, referrals, the character network, the coach and Hapoo+ — do talk to a server, keyed by that device id, and this page says exactly what each one sends and why, including the few places another company is involved.

What stays on your phone, always

What the server sees

These features need a server to work at all, and every one of them is tied to your device id, never to you by name:

• Weekly leagues. Your device id and a points total, so a weekly cohort of similarly-active walkers can be assembled and ranked. No name is ever attached to a league standing.
• Referrals. A short code tied to your device id, and — once a friend uses it — confirmation that their device logged a genuine first walk.
• The character network. Which character you've met, where, and whether the meet's GPS coordinates were plausible — again, keyed by device id, never a name.
• The coach, for everyone. Free users and subscribers alike: when you message the coach, your question is sent along with the conversation it belongs to (up to the last eight messages, so the reply makes sense) and a short summary of your walking — your streak, distance, level and your dog's name. The coach's replies are written by Google, using the Gemini API, so Google receives those messages and that summary too — but never your device id, location, routes or photos. The app asks your permission before your first message is sent, and questions about poisons, medicines or doses are answered on your phone with a pointer to your vet, without being sent anywhere.
• Hapoo+ purchases. Buying Hapoo+ is handled entirely by Apple. The server only checks Apple's signed proof of purchase to confirm your subscription is active, and never sees your card details.
• Reminders, for Hapoo+ subscribers. Subscribers can get reminder notifications. Sending them needs a push token — the address Apple issues so a notification can reach your phone — which the server holds against your device id. So a reminder has something true to say, the app also sends a short progress summary when you open it — your streak, the badge you're closest to, and how far you are from the next level.
• Basic analytics. Which features get used (e.g. a league promotion, a referral converting), tied to device id, used only to tell whether something we built is actually helping.

Partner rewards

Some rewards in the catalogue come from partner retailers. Tapping one opens an Awin tracking link (Awin is the affiliate network behind these partnerships), so Awin and that retailer see the click. Hapoo adds only a reward ID to that link, never your device ID. Once you're on the retailer's site, their own privacy policy applies.

What we don't do

No advertising, no ad tracking, no selling or sharing data with data brokers, and nothing tied to a real name — because there isn't one on file to tie it to.

Children

Hapoo isn't directed at children and doesn't knowingly collect anything from them.

Your rights, and deleting your data

Under UK GDPR you have rights over personal data an organisation holds about you. Settings → Start Again wipes everything stored on your phone immediately. Because server-side records are keyed by device id rather than an account, we can't look one up from a name or email — email hello@hapoo.app from the address you'd like us to use and we'll help you clear your device-linked server records too.

Changes

If this policy changes in a way that matters, the app will say so rather than quietly updating a page nobody reads.

Contact

London, United Kingdom — hello@hapoo.app