Last updated 11 September 2026
hippotext is secure messaging for clinicians, made by HippoText, LLC, in a limited pilot with a single practice. Access is restricted: you join a practice only by invitation from one of its administrators, your email address must be verified, and the app locks behind Face ID or your device passcode.
Your email address and display name, the messages and images you send, and an append-only log of API access recording which account made which request and when. Data is held on Google Cloud in the United States under a Business Associate Agreement with Google.
All traffic runs over TLS. Data at rest on Cloud SQL is encrypted with Google-managed keys — this is platform-level encryption, not application-layer encryption of individual messages. Access is limited per account to conversations you are a member of.
No analytics or tracking SDKs. Notifications never carry message content — only that a message is waiting for you. No advertising, no third-party profiling. We never sell or share your data, and we do not use it to train anything.
You can delete your account from within the app. Your name and email address are removed from our records and the sign-in identity is destroyed. Messages you already sent stay in the practice's threads, attributed to "Deleted user" — they are the practice's clinical record, not yours to withdraw. Audit log entries are append-only and are not deleted.
HippoText, LLC
Questions, access, or deletion requests: andrew@hippotext.dev.