The short version: the MobileHog app has no servers of its own, contains no analytics or advertising SDKs, and stores your PostHog credentials only on your device. Your PostHog data travels between your phone and PostHog, and nowhere else. We don’t see it.

Controller

7eicher, Digital Studio & Consulting, owner Klaus Siebeneicher
Am Sonnenhang 2, 3243 St. Leonhard am Forst, Austria
Email: klaus@7eicher.net

We are a small business and have not appointed a data protection officer, as we are not required to. Write to the address above with any privacy question.

The app

Your PostHog data is processed on your device

MobileHog requests data directly from PostHog (us.posthog.com, eu.posthog.com, or the self-hosted address you enter) and displays it on your device. That data is never sent to us or to anyone else, so we do not process it as a controller. Your relationship with PostHog, and the data in your PostHog projects, is governed by PostHog’s own terms and privacy policy.

Permissions the app requests

When you connect PostHog, MobileHog asks for these read-only permissions:

user:read
project:read
dashboard:read
insight:read
query:read
error_tracking:read
feature_flag:read
experiment:read
survey:read
session_recording:read
cohort:read
annotation:read

Signing in with a PostHog Cloud account additionally requests openid, profile, email, so the app can show which account you are signed in with. MobileHog never requests write permissions and cannot change anything in your PostHog projects.

Signing in

You sign in on PostHog’s own website, opened in your phone’s system browser. We never see your PostHog password. After you approve access, PostHog redirects to mobilehog.app/oauth/callback, which your phone hands straight to the app. That page loads no analytics and does not read or store the authorization code in its address.

Credentials and cached data on your device

Access tokens and personal API keys are stored in the iOS Keychain or the Android Keystore. They leave your device only to authenticate with PostHog. To load quickly, the app also keeps recent results in its local storage. Choosing “Remove connection” in the app’s settings deletes the credentials and the cached results and, for PostHog Cloud sign-ins, revokes the token with PostHog. Deleting the app removes everything as well.

Our server

When you open the sign-in screen, the app checks that a small public configuration file (mobilehog.app/oauth-client.json) is reachable. This request, like any request to this website, is handled by our host Vercel (see below). It contains no information about you or your PostHog data.

No tracking

The app contains no analytics, crash reporting, advertising or tracking SDKs and does not collect usage data. It does not use your device’s advertising identifier.

App stores and purchases

You download MobileHog from the Apple App Store or Google Play. Apple and Google process data about your download and any purchase under their own privacy policies; we receive only aggregated, anonymous statistics from them. If a paid upgrade is offered, the payment is handled entirely by Apple or Google, and we receive no payment details.

This website

Hosting

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. To deliver the pages, Vercel processes technical request data such as your IP address, the page requested, date and time, and your browser’s user agent, and keeps it in short-lived server logs. The legal basis is our legitimate interest in operating a secure and working website (Art. 6 (1) (f) GDPR). We have a data processing agreement with Vercel. Vercel is certified under the EU-U.S. Data Privacy Framework, on which transfers to the USA are based (Art. 45 GDPR).

Cookies and third parties

This website sets no cookies and stores nothing on your device. Fonts are served from our own domain. No requests go to third parties when you load a page.

Support emails

If you email us, we process your address and message to answer you (Art. 6 (1) (b) GDPR where it concerns using the app, otherwise Art. 6 (1) (f) GDPR). We keep the correspondence as long as needed to handle your request and delete it after three years at the latest, unless retention is required by law.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interest (Art. 15–21 GDPR). Contact us at the address above. You can also lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, dsb.gv.at.

Because the app does not send your PostHog data to us, requests about that data are best directed to PostHog, and requests about downloads or purchases to Apple or Google.

Changes

If what the app or this website does with data changes, this page changes first, and the date above changes with it.