Privacy Policy

Last updated: October 14, 2026

Introduction

HorseBook ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and web dashboard (collectively, the "Service").

Information We Collect

Account Information

When you create an account, we collect your email address and password. You may optionally provide your name, barn name, location, and phone number.

Horse & Medical Data

You may store horse profiles, medical records (vaccinations, deworming, farrier visits, veterinary notes), husbandry records, reproduction data, expenses, and related information. This data is entered by you and stored on your behalf. We treat veterinary and medical records as sensitive health information and apply additional safeguards accordingly.

Documents & Photos

You may upload documents such as registration papers, Coggins tests, health certificates, and invoices. You may also upload photos of your horses. These files are stored securely and accessible only to your account, unless you share them through a link (see "Contracts and Links You Share").

Contact Information

You may store contact details for veterinarians, farriers, and other equine professionals associated with your horses.

Information About Other People

You may enter information about other people — for example, your veterinarian or farrier, the owner of a mare booked to your stallion, a buyer, or a client. You are responsible for having the right to share that information with us. We use it only to provide the Service to you.

Expense Data

You may record expenses related to your horses, including amounts, vendors, categories, and receipt images.

Payment Information

Subscriptions bought on our website are processed by Stripe; subscriptions bought in the iOS app are processed by Apple. We never receive or store your card or bank details. We keep a record of your subscription (plan, status, and dates) and the identifiers Stripe or Apple give us for it.

How We Use AI

HorseBook offers AI-powered document analysis. When you use this feature, document images are transmitted over an encrypted connection to Anthropic's servers, where they are processed by the Claude API. This enables automatic extraction of data such as horse names, dates, and medical details from documents like Coggins tests, registration papers, and veterinary invoices. Images are sent only when you explicitly initiate a scan — we never transmit your documents without your action.

The same applies to our other AI features: text you type or dictate into Quick Entry, and contracts you upload for field placement, are sent to Anthropic only when you use those features. Under Anthropic's commercial API terms, data sent to their API is not used to train their models, and Anthropic keeps it only for a limited period under those terms. You can use HorseBook without any AI feature by entering data manually.

Data Storage

Your data is stored in Supabase (database and file storage) hosted in the United States. Data is encrypted at rest and in transit. Row-level security policies ensure users can only access their own data. The web application is served through Vercel. Both services maintain SOC 2 compliance.

Data Sharing

We do not sell, rent, or trade your personal data. We do not show ads, we do not use cross-app tracking tools, and we do not share your data with advertisers or data brokers.

If you install our iOS app after tapping an ad on the App Store, Apple tells us which of our Apple Ads campaigns led to the install. We use this only to measure our own advertising and do not share it.

We share data only with the service providers we use to run HorseBook, and only what each one needs to do its job for us:

  • Supabase — database, file storage, and sign-in
  • Vercel — hosting for the website and web app
  • PostHog — product analytics: which screens and features are used and what you click, with device, browser, and app-version information, linked to your account, so we can see what works and fix what doesn't. We do not record your sessions.
  • Sentry — crash and error reporting, including technical details about the error and the device or browser it happened on
  • Resend — sending email, such as account emails, reminder digests, and contract receipts
  • Stripe — payment processing for web subscriptions
  • Apple — in-app purchases in the iOS app, push notifications, Sign in with Apple if you use it, and Apple Ads install attribution
  • Google — Sign in with Google if you use it, our support email, and off-site backups (Google Drive)
  • Anthropic — AI document analysis, Quick Entry, and contract field placement (only when you use those features)

Web push notifications, if you turn them on, are delivered through your browser's push service. We may also disclose information if required by law or to protect the rights and safety of our users or others.

Contracts and Links You Share

Some features let you share information with another person through a private link — for example, a breeding contract for a mare owner to review and accept, or a horse's papers. Anyone who has the link can see what it shares until you turn the link off, so share links only with the people you mean to.

A contract you send contains whatever you put in it, which typically includes names, contact details, horse names and registration details, fees, and dates. If you upload your own contract and use AI to place its fields, the document is sent to Anthropic as described under "How We Use AI" above.

When someone accepts a contract through a HorseBook link (they do not need an account), we record the name they type, their email address, whether they signed as the named party or as an authorized agent (and for whom), their confirmation that they are 18 or older or the party's parent or guardian, the date and time, their IP address, their browser's user agent, and which version of the acceptance wording they were shown. When a sender sends a contract, we record the same kind of signing details for the sender. We include the signing record in the copies we email to both parties and make it available to the sender as proof of acceptance. We use it to deliver the contract, record and show the signatures, email each party their copy, and keep the Service secure. The pages that show a contract, an invoice or shared papers through a private link do not use analytics cookies or track the person viewing them. We count how often they are viewed and signed, for the sender's account only. We do not sell this information or use it for marketing.

Contracts and acceptance records are stored in the sender's account and kept until the sender deletes them or deletes their account; deleting the account deletes them (the sender can download them first; each person who accepted one received their own copy by email when they signed), subject to the backups described under "Data Retention." If you accepted a contract and have a question about it, contact the person who sent it, or contact us at support@horsebook.app.

Your Rights

You have the right to:

  • Access — View all data stored in your account at any time through the app
  • Correction — Edit your data at any time through the app
  • Deletion — Delete your account and its data yourself from Settings in the web app or Settings → Account in the iOS app, or ask us at support@horsebook.app
  • Export — Request a copy of your data in a machine-readable format

Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your data within 30 days, except where required by law. Backup copies of the database are kept for up to 7 months and backup copies of uploaded files may be kept longer; backups are used only to restore the Service. We keep a record that an account was deleted, including its email address.

Children's Privacy

HorseBook is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13.

Data Breach Notification

In the unlikely event of a data breach that affects your personal information, we will notify affected users within 72 hours of becoming aware of the breach. Notification will be sent to the email address associated with your account and will include a description of the breach, the types of data involved, and steps we are taking in response.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at support@horsebook.app.