Dr. Hopps← Back to Dr. Hopps

Legal

Privacy Policy

Effective date: August 4, 2026

The short version

Your rabbit’s health record stays on your phone. The daily log, your rabbit’s profile, your saved conversations and the short list of facts Dr. Hopps remembers are stored in the app itself — we never receive them and there is no account they are attached to. What does leave your device is the question you ask, at the moment you ask it, because answering it needs a language model. Photos you check are analysed and thrown away in the same request; we keep no copy. We do not sell personal data, and we do not use your questions or photos to train AI models.

1. Who is responsible for your data

This policy covers the Dr. Hopps website (drhopps.ai) and the Dr. Hopps mobile app (“the service”). The data controller for the purposes of the UK GDPR and the EU General Data Protection Regulation is EPIC CHANNELS LTD, a private company limited by shares registered in England and Wales under company number 16566980, registered office 128 City Road, London EC1V 2NX, United Kingdom. Contact: support@drhopps.ai.

2. What stays on your phone and never reaches us

The mobile app keeps the following in the app’s own storage on your device. It is not uploaded, not backed up to us, and not readable by us:

  • Your rabbit’s profile — the name, age band, diet and signs you entered during setup.
  • The daily log — every entry in the tracker, and the verdicts computed from it. The rules that produce those verdicts run on the device, with no network call.
  • Saved conversations — your chat history, kept so you can reread it or show it to a vet. A past conversation is never re-sent to the model.
  • Remembered facts — a short list of standing facts about your rabbit (for example an allergy or a weight). You can see the whole list in the app and delete any line, or all of them, at any time. Only these short facts are attached to a new question, never an old conversation.
  • Reminders — the daily reminder is scheduled by your phone. No server is involved and we do not know whether it fired.

Deleting the app deletes all of it. There is no copy anywhere else.

3. What is sent when you ask a question

To answer, the service sends the text of your question — plus, if you have any, the short remembered facts and the rabbit-profile line described above — to the processors listed in section 4. The Food Scanner sends the photo you took. The Emergency triage sends your answers to its questions. The vet finder sends the location or search term you type.

Photos are not stored. A food photo is analysed and discarded within the same request; a tracker photo is counted and discarded within the same request. Neither we nor the app keeps the image.

4. Who processes it, and why

Anthropic (Claude)
The text of your question, the remembered facts, and any photo you submit to the Food Scanner.
Generates the answer. Anthropic does not train its models on data submitted through its API.
Pl@ntNet
Food photos only.
Identifies the plant species, so the safety verdict is about the right plant.
Cloudflare (Workers AI)
The text of your question.
Turns it into a search vector so the answer can cite real veterinary sources.
Supabase
The veterinary source corpus; and, for signed-out visitors, your IP address.
Hosts the sources the answers cite. The IP address is stored only to allow one free question per network.
Clerk
Your email address and name, if you create an account on the website.
Runs sign-in. The mobile app has no account and sends none of this.
Google Places
The location or search term you enter in the vet finder.
Returns nearby veterinary practices.
Vercel
Standard server request logs, including IP address.
Hosting, security and abuse prevention.
PostHog
Anonymous product events in the app (which screen you reached), if enabled.
Shows us where the app is confusing. It carries no rabbit data, no chat content and no name. It is currently switched off; this policy will be updated before it is switched on.

These are processors acting on our instructions, not independent controllers of your data. Some of them are located outside the EU/EEA; transfers rely on the European Commission’s Standard Contractual Clauses.

5. Legal bases

We process your question and any photo to perform the contract you enter into by using the service (GDPR Art. 6(1)(b)) — without sending it, there is no answer. Account data is processed on the same basis. Server logs and the per-IP free-question record are processed under our legitimate interest (Art. 6(1)(f)) in keeping the service available and preventing abuse. Product analytics, if ever switched on, will run on consent (Art. 6(1)(a)) that you can withdraw.

6. How long it is kept

  • Photos: not kept — discarded within the request that analysed them.
  • Questions and answers: not stored on our servers. Processors may retain them briefly for abuse monitoring under their own policies.
  • The per-IP free-question record: a single timestamp, rolling 24-hour window.
  • Account data: until you delete your account.
  • Server logs: for the retention period of our hosting provider.
  • Everything on your phone: until you delete it in the app, or delete the app.

7. Your rights

If you are in the EU/EEA or the UK you have the right to access, correct, delete, restrict and object to the processing of your personal data, and to receive it in a portable form. To exercise any of them, write to support@drhopps.ai. You can also complain to your national data-protection authority; in Hungary that is the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH).

Most deletion is immediate and in your hands: the remembered facts and each saved conversation have a delete control in the app, and removing the app removes the rest. Website accounts can be deleted from your account settings or by writing to the address above.

8. Children

The service is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has given us data, write to us and we will delete it.

9. Security

Traffic runs over TLS. Server-side data sits in access-controlled managed services with row-level security enabled and no public read access. No system is perfectly secure, and we do not claim otherwise — which is part of why the health record stays on your device rather than on ours.

10. Changes

If this policy changes materially we will update the effective date above and, where the change affects you, say so in the service. Continuing to use Dr. Hopps after a change means you accept the updated policy.

11. Contact

Questions about privacy, or a request to exercise your rights: support@drhopps.ai

Dr. Hopps is an AI companion for rabbit owners. It is not a veterinary clinic and is not affiliated with any veterinary regulatory body. See also our Terms of Service.