Privacy Policy

Last updated: 20 October 2026

Hopit is a todo app that reminds you of things when you’re in the right place. This policy explains what we keep, what never leaves your phone, and how to delete everything.

In short

• Your location stays on your phone. Hopit checks where you are on the device itself. We never receive your live or past location.
• We store only what Hopit needs to sync your lists across your devices and with the people you share them with.
• No ads, no tracking across apps or websites, and we don’t sell or rent your data.
• You can delete your account, and everything in it, from the app at any time.

Your location

Location reminders work on your iPhone. iOS tells Hopit when you arrive at or leave a place, and the matching happens on the device. Searches for nearby places (for example “any bookshop”) go from your phone to Apple Maps; they don’t pass through our servers.

Your current position, your movements and your location history are never sent to us. Members of a circle never see each other’s location.

If you choose to save a place (such as Home, Work or a favourite shop), its name, address and the coordinates you picked are stored with your account so they appear on all your devices. Saved places are private to you and are never shared with circle members.

What we store

• Account: your name, email address, profile photo link (if Apple or Google shares one), time zone, language, and a password if you set one (stored only as a secure hash).
• Sign-in: identifiers from Sign in with Apple or Google so we know it’s you, and, for Apple, a token that lets us revoke Hopit’s access when you delete your account. One-time email codes are stored hashed and expire after 10 minutes.
• Your lists: todos and their notes, dates, repeats, priorities, completions, checklist items, and the kind of place or saved place they’re linked to. Reminders you choose to import from Apple’s Reminders app, and links or text you share into Hopit from other apps, become todos like any other.
• Attachments: photos, videos, voice memos, documents and other files you attach to a todo. Photos are re-encoded on your phone and again on our servers, which removes their location and other hidden details. Attachments are stored privately and shown only to you and the people in the todo’s circle.
• Places and categories: the places and custom categories you save, as described above.
• Circles: the circles you create or join, their members, and the shared todos in them.
• Reminder settings: quiet hours, cooldown, nearby radius and similar preferences.
• Push notification tokens: a token per device from Apple so we can send you notifications (for example when someone in your circle adds a todo, or tells the circle they’re going to the supermarket) and quietly tell your other devices to sync, and tokens that let us start, update and end a todo’s Live Activity on your Lock Screen. We don’t use them for anything else.
• Technical logs: IP addresses and request details kept briefly to keep the service secure and to limit abuse.

What stays on your iPhone

Some of Hopit’s features work entirely on your phone. What they handle is never sent to us or to anyone else; only the todo you end up saving syncs, like any other.

• Speaking a todo: when you tap the microphone, what you say is turned into text on your iPhone by Apple’s speech recognition. Nothing is recorded or kept.
• Typing naturally and scanning a list: a sentence like “milk and eggs from the supermarket tomorrow” is understood by Apple’s on-device model, and a photo of a written list is read by Apple’s text recognition, both on your iPhone.
• Calendar events: if you turn on calendar events, Hopit reads today’s events on your iPhone to show them next to your todos. They are never sent to us, and Hopit never changes your calendars.
• Reminders: Hopit reads Apple’s Reminders app only when you choose to import from it, and never changes or deletes your reminders. Only the reminders you import are copied in as todos.

Who can see your data

Your personal todos, places and settings are visible only to you. When you add a todo to a circle, every member of that circle can see it, change it and tick it, and sees your name next to your activity.

We use a small number of service providers to run Hopit: Apple (Sign in with Apple, push notifications, Maps), Google (Sign in with Google, if you use it), our hosting provider, Cloudflare (storage for attachments and sending sign-in codes by email). They process data only on our behalf. We disclose data to authorities only when the law requires it.

Deleting your account

In the app, go to Me › Delete account. Your account is deleted straight away, along with your personal todos and their attachments, places, categories, settings, sign-in tokens and push tokens. If you signed in with Apple, we also ask Apple to revoke Hopit’s access.

You leave every circle you were in. Circles you owned pass to the longest-standing member. Shared todos you created stay in their circle without your name, so the other members don’t lose their lists.

Backups are overwritten on a rolling basis and are gone within 30 days.

Security

Data travels over encrypted connections (HTTPS). Passwords and sign-in codes are stored as hashes, and access to our systems is limited to the people who run Hopit.

Children

Hopit isn’t directed at children under 13, and we don’t knowingly collect their data. If you believe a child has given us data, contact us and we’ll delete it.

Your rights

You can see and change most of your data in the app, export it on request, and delete it at any time. Depending on where you live, you may have further rights (such as access, correction or objection). Write to us to use them.

Changes

If we change this policy in a meaningful way, we’ll let you know in the app before the change takes effect.

Contact

Questions or requests: [email protected].