Hopper

Privacy policy

What Hopper stores, where it is kept, and what never leaves your device.

Last updated 1 October 2026. Applies to Hopper 1.1 and 1.2 for iPhone, iPad, Mac and Apple Watch. The financial figures described below are a 1.2 feature; 1.1 does not have them.

Hopper is made by The Socials LLC, Dubai, United Arab Emirates. In this policy, "we" and "us" mean The Socials LLC, and "you" means the person using the app.

What we store, and where

Everything Hopper keeps on our side lives in a single PostgreSQL database hosted for us by Supabase, in the ap-southeast-2 region, which is Sydney, Australia. Every row carries the id of the account that owns it, and the database refuses to return a row to anyone but its owner.

Your account

• Your email address, which is how you sign in and how we reach you.
• Your password, stored only as a one way hash by the authentication service. Neither we nor the app can read it back.
• A generated account id, plus the sign in and session records the authentication service keeps so that you stay signed in.
• Your time zone, so that "today" means the same day to Hopper as it does to you.

What you put into Hopper

• Captures and ideas: the text you wrote, where it was written from, and when.
• Tasks: title, due date, due time, priority, state, your notes, which venture and category it sits in, and when it was completed.
• Subtasks: the checklist items under a task, and whether each is done.
• Ventures: the names you chose, their colours and the order you put them in.
• Categories: the folder names you chose inside each venture. A category carries a name and nothing else.
• Journal entries: the date, what you wrote, and the energy rating you gave the day.
• Carry records: one row per task per day it stayed open, which is what lets the Day screen say how long something has been carried.
• Activity log: one row for each task you create, complete, reopen, rename, reschedule, move or drop, and each capture you edit or delete, with the task's title and the time it happened.
• Suggestions: when Hopper guesses which venture a capture belongs to, it records the guess, how confident it was, the reason, and what you chose in the end.
• Plans: the lines you write for a week, the one line you write for a month, the themes you write for a year, and the outcomes you name for a quarter, with whether each was met, missed or dropped.
• Financial information you type: for each venture and each month, money in, money out, what the venture paid you, and the balance you enter. Also a budget's planned total and what has been spent against it, and the total value of holdings you enter or that your own investment platform reports. These are monthly totals that you type: Hopper holds no transactions, no card or account numbers, and no bank credentials, and it is not connected to your bank.
• Your settings: your notification preferences and which screens you have showing on which device.

About the financial figures. They are stored exactly as the rest of your data is: in the same database, in the same region, owned by your account, and returned to nobody else. They are shown behind the same device lock as everything else in Hopper. They are never used to advertise to you, never sold, never shared, and never sent to any outside service. If you delete your account they go with it, in the same single action as everything else.

The guessing is a list of keyword rules running inside our own database. Your text is not sent to any outside service to be read, scored, classified or used to train anything.

What stays on your device

Some things never reach our database at all.

• Face ID and Touch ID. Unlocking is handled entirely by your device, which answers Hopper with yes or no and nothing else. Hopper never sees, receives or stores any biometric data, and no face or fingerprint information is ever uploaded.
• Apple Reminders. When you tap Import from Apple Reminders, Hopper reads your open reminders once, on the device, and turns them into Hopper tasks. It does not keep a connection to Reminders, does not read them again afterwards, and never writes to or changes anything in Apple's Reminders app. Only the tasks created from that import are stored, the same as any task you type.
• Notes files. A PDF, Word, RTF, text or Markdown file you drop into Hopper is read on the device. The file itself is never uploaded and is not kept by Hopper. Only the action items you confirm on the review screen are saved as tasks.
• Scanned pages. A scanned PDF with no text in it is read by recognising the text in the page images on the device, using Apple's own on device text recognition. The page images are not uploaded anywhere.
• Your sign in session, which is held in the device Keychain.
• Captures waiting to upload, which are held in a small database file on the device until they go up, then removed.
• Small preferences, such as the email address to fill in next time, whether unlocking with your face is on, and whether the smart lists are showing.
• The widget snapshot, a few task titles the app leaves for the widget to draw, inside the app's own shared container on the device.

No ads, no tracking, no analytics

• Hopper contains no advertising and shows no ads.
• Hopper does no tracking. It does not follow you across other apps or websites, and it collects no advertising identifier. The app's privacy manifests declare no tracking to Apple.
• Hopper has no analytics and no crash reporting service. There is no usage telemetry, no event logging to a third party, and no profiling of you.
• Hopper contains no third party software development kits. It is built on Apple's own frameworks and talks to our database and nothing else.
• We do not sell, rent or trade your data, and we do not share it with anyone for advertising or marketing.

Who else can see it

Your data is handled by us and by the companies that run the infrastructure we use. Today that is one company:

• Supabase, which hosts the database and the authentication service, in Sydney, Australia.

Supabase processes the data only to provide that hosting, on our instructions, under an agreement that requires it to keep the data confidential and to protect it with appropriate security measures.

If we ever add another company to that list, it will be held to the same standard: it must protect your data at least as well as this policy promises, under a written agreement, and it may use the data only to provide the service to us and never for its own purposes. This page will be updated before that happens.

Apple distributes the app, and your purchase or download relationship is with Apple under Apple's own privacy policy. Apple does not receive the contents of your Hopper account from us.

We will also disclose data where the law genuinely requires it, or where it is necessary to protect someone's safety or our legal rights. That has not happened, and if it does we will tell you unless we are forbidden to.

How long we keep it

• What you put into Hopper is kept until you delete it, or until you delete your account. There is no automatic expiry and nothing is quietly archived elsewhere.
• Deleting a capture, a task, a venture or a journal entry in the app removes that row from the database.
• Deleting your account removes everything listed above, in one go, and closes the account itself.
• Deleted rows may survive for a short period in our hosting provider's routine backups before those backups are overwritten in the normal course of their retention cycle. They are not used for anything else.

Deleting your account

You can do this yourself, in the app, on iPhone, iPad or Mac:

1. Open Settings from the home screen.
2. Scroll to Account.
3. Tap Delete account, then confirm.

That removes your account and everything in it: captures, ideas, tasks, subtasks, ventures, categories, journal entries, carry records, activity log, suggestions and settings, along with your sign in records. Hopper then signs you out on that device and clears what was stored there, including captures that had not uploaded yet. Another device you use Hopper on stops syncing straight away and signs itself out soon after. Nothing in Apple Reminders is changed.

It cannot be undone, and we cannot restore a deleted account.

Asking us for your data

Email thesocialsdxb@gmail.com from the address on your account and tell us what you want:

• a copy of the data held for your account,
• a correction to something that is wrong,
• deletion of your account, if you would rather we did it than do it in the app,
• or an answer to any question about this policy.

We will reply, and we aim to do so within 30 days. We may need to check that the request really comes from the account holder before we act on it.

Depending on where you live you may have further rights over your personal data, such as the right to object to processing or to complain to a data protection authority. Write to us first and we will try to put it right.

Security

Traffic between the app and our database is encrypted in transit. The database enforces row level security, so an account can read and write only its own rows. Your session credential is kept in the device Keychain, and on iPhone and iPad you can require Face ID or Touch ID before Hopper will reopen it.

No system is perfect. If we ever discover a breach affecting your data, we will tell you and any authority we are required to tell.

Children

Hopper is not directed at children, and we do not knowingly collect data from anyone under 13. If you believe a child has created an account, email us and we will remove it.

Changes to this policy

If this policy changes, the new version will appear on this page with a new date at the top. Changes that materially affect what we do with your data will be flagged in the app as well.

Contact

The Socials LLC
Dubai, United Arab Emirates
thesocialsdxb@gmail.com