Poppit — Privacy Policy

Poppit stores your medication list, dosing schedules, dose history, and app preferences on your device. This data never leaves your device except as described below.

If you have iCloud enabled, Poppit syncs your medications and dose history to your private iCloud account so you can access them on all your Apple devices. This data is stored in your personal CloudKit private database — we cannot see it, and it is not shared with other users. If iCloud is not available, your data stays on-device only.

Poppit offers an optional AI feature that parses medication descriptions you provide via text, voice, or a photo of a medication label. When you use this feature:

• Your input (text, audio recording, or photo) is sent to our server, which forwards it to OpenAI for processing.
• Our server does not store your input — it is stateless and only relays the request.
• OpenAI processes the input and returns structured medication data. OpenAI’s API does not use your input to train their models. See OpenAI’s data usage policy for details.
• Audio recordings are temporary — they are deleted from your device immediately after processing.
• Using the AI feature is optional. The app shows you what is sent, and you can set up medications manually instead.

When you look up information about a medication, Poppit queries public APIs operated by the U.S. National Institutes of Health (RxNorm, MedlinePlus) and the FDA (OpenFDA). Only the medication name or drug identifier is sent — no personal or health information.

Poppit can send you local reminders to take your medications. These notifications are scheduled entirely on your device and are not sent through any external service. You can enable or disable reminders at any time in the app’s settings.

To understand how Poppit is used and where it falls short, the app sends us a small, fixed list of product events — things like the app being opened for the first time, onboarding being completed, a medication being added, which World you chose, whether you set a medication up by photo, voice or typing, and when a feature fails.

Your medications are never part of this.The list of events the app can send is fixed in the app’s code, and our server independently discards anything that is not on it. There is no field in which a medication name, a dose, a schedule, a note, or your dose history could travel. We do not collect data that identifies you: no name, no email, no account, no Apple ID, no device identifier, and no location.

These events are tagged with an install ID — a random value the app generates the first time it runs, so that a sequence of events can be recognised as coming from one installation rather than many. It is not anonymous data in the strict sense, because those events remain linked to each other; it is simply not connected to your identity. It is not derived from your Apple ID, your device, or anything about you, it is not synced between your devices, and deleting and reinstalling the app replaces it with a new one.

Our analytics processor is PostHog, Inc. (United States), who store these events on our behalf. Your device never contacts PostHog directly — events go to our own server first, which forwards only allow-listed events onward. We also disable PostHog’s location lookup, so your IP address and location are never available to them.

We use this only to improve the app. It is never used for advertising, profiling, or tracking you across other apps or websites, and it is never sold or shared. You can turn it off at any time in Settings → Privacy inside the app; transmission stops immediately when you do.

The section above is about the Poppit app. This page is part of hoagiecorps.com, and we count visits to it — so it is worth saying plainly what that does and does not involve.

We record page visits, which page you landed on, the site that referred you, your browser and device type, and whether you tapped through to the App Store. That is the whole list.

No cookies, and nothing stored on your device. Most websites recognise returning visitors by leaving a cookie behind. This one does not — there is no cookie, no local storage, and therefore no consent banner to dismiss. Instead our analytics provider counts visitors using a one-way fingerprint calculated on their servers, from a salt that is rotated and discarded every day. The practical effect is that we can see how many people visited today, but nobody — including us — can tell that a visitor today is the same person who visited yesterday.

Site visits and app usage are recorded by the same provider, PostHog, Inc. but they cannot be connected to each other. The app identifies itself with a random code that never leaves your device’s copy of Poppit; the website uses the daily fingerprint described above. There is no shared identifier, so visiting this page and using the app are, to us, two unrelated events.

• We do not collect your name, email, or contact information.
• We do not require an account to use Poppit.
• We do not embed third-party analytics, advertising, or crash-reporting SDKs in the app. The usage events described above are sent by our own code, to our own server.
• We do not serve ads or share data with advertisers.
• We do not integrate with Apple Health or HealthKit.
• We do not collect location data.

All network communication uses HTTPS. Your iCloud data is encrypted by Apple in transit and at rest. The OpenAI API key is stored on our server and is never exposed to the app.

You can delete individual medications or dose log entries within the app at any time. Deleting the app removes all local data. If you use iCloud sync, you can remove synced data through your iCloud storage settings.

Poppit is not directed at children under 13. We do not knowingly collect data from children.

We may update this policy from time to time. The effective date at the top of this page indicates when it was last revised.

If you have questions about this policy, contact us at privacy@hoagiecorps.com.