Privacy

Last updated 3 October 2026

log the hog is a workout log run by one person for a small group of friends and coworkers. It is not a business, it sells nothing, and it has no advertisers. This page says what it keeps, who can see it, and how to get rid of it.

What is stored

• Your account: a username and a one-way hash of your password (never the password itself). Optionally a bio, location, height and profile photo. No email address, phone number or real name is asked for.
• If you sign in with Apple or Google: an id for your Apple or Google account, and the name and email address they give us. With Apple the email may be a private relay address that Apple forwards. Your name and email are never shown to anyone. If you sign in with Google and have no profile photo yet, your Google photo becomes your profile photo; you can change or remove it.
• Your log: exercises, sets, reps, weights, dates, tags, presets, notes, and workout times. If you use daily tracking, the values you enter (sleep, body weight, mood and so on).
• Runs, walks and rides you record: the GPS route, distance, pace and splits. Location is used only while a recording is in progress, and only after you allow it.
• Steps: a daily step count, read from your phone's motion sensor and, if you allow it, from Apple Health (steps only, including from an Apple Watch).
• What you share: posts, captions, photos, short looping clips (still frames only, with no sound), yaps, ideas, comments, likes, taps, stories, who you follow, and, on the website, messages.
• Music you attach to a post: the song's name, artist, artwork link and Apple's preview link. The song itself is never stored here.
• Whether you are training right now: starting a workout or a recording marks you as active on the people list until you stop, or for three hours at most.
• Game scores from the daily games.
• Sign-in and push: a hash of each device's sign-in token, and, if you allow notifications, the push token Apple gives that device.
• Reports and blocks: what you report and why, and who you have blocked.

Apple Health

The app only reads your step count from Apple Health. It never writes to Health and reads nothing else. Health data is used to show your steps to you and, unless you hide them, to the people you share with. It is never used for advertising, never sold, and never given to anyone.

What is not collected

• No analytics, tracking or crash reporting of any kind, and no third-party code in the app.
• No advertising, and nothing is sold, rented or traded.
• No access to your photo library. Photos and clips are taken with the camera inside the app, or picked with iOS's own picker, which hands over only what you choose.
• No location outside a recording you started.

Who can see what

Assume anything you post is public. The feed and profiles can be read by anyone who visits the website, without an account, so posts, captions, photos, usernames and the workouts attached to them can be seen by anyone with the link.

• Your calendar and full log follow the setting in Settings: anyone, followers only, or only you.
• Daily tracking values (sleep, body weight and the rest) are only ever shown to you.
• A posted run shows a map of its route with the first and last stretch left off, so it doesn't start at your front door. You can also leave the map off a post altogether.
• Your step count appears on the steps board unless you turn on "Hide my steps from the board" in Settings.
• Daily puzzles like Guess Who are made from public logs.
• If you block someone, you and they stop seeing each other's posts, comments, profiles and activity.

Who else is involved

Nothing is shared with anyone except the services needed to run it:

• DigitalOcean hosts the server and the database, in the United States.
• Apple delivers push notifications, which means the notification text passes through Apple's push service. When you search for a song, the search goes to Apple's iTunes Search, and playing a preview streams it from Apple.
• Apple and Google, only if you sign in with them. They confirm who you are, and Google's server is asked once for your profile photo.

Where it lives

One database on a single server in the United States, reached only over HTTPS. Nightly backups are kept for seven days and then deleted.

Deleting your data

You can delete any workout, post, photo, comment or run yourself, at any time. To delete your whole account, use Delete account in Settings, in the app or on the website. It removes your account and everything attached to it straight away: your log, posts, photos, runs, steps, comments, likes, follows and devices. Copies in the backups are gone within seven days.

Children

log the hog is not meant for children under 13, and does not knowingly keep anything from them.

Changes

If what is collected or who it goes to ever changes, this page changes with it, and the date at the top moves.

Contact

Questions about any of this: hello@logthehog.com.