Splot is a personal space for the records you choose to keep, including meals, movement, and everyday notes. This policy describes how we handle information when you use our website, app, account services, and assistant connections (the “Services”).
This draft is being finalized before public launch. It describes the intended privacy commitments for Splot; it is not a request for consent to process health information.
1. Who is responsible for your information
The operator of Splot is responsible for deciding why and how personal information is processed and acts as its data controller.
Operator details: The operator’s full legal name, establishment country, and contact address must be added before this policy takes effect.
For privacy questions or requests, contact privacy@splot.health.
2. Information you choose to keep
Account information. We process your email address, account identifier, authentication information, any profile name you supply, and account creation details. Our authentication provider handles sign-in credentials and sessions.
Personal records. We process records you submit through available features. Meal records include food names, amounts, nutrition values, meal times, time zones, and notes. Splot is also being developed to support gym workouts, sets and repetitions, running and other exercise, activities based on videos, daily notes, and related links. Where introduced, optional measurements, routes, and attachments will be covered by the information and permissions presented with those features. Describing a planned feature here does not mean it is already available or that we collect its data today.
Health and other sensitive information. Food, exercise, body measurements, and notes can reveal physical or mental health, injuries, symptoms, disabilities, or other intimate information. A route can reveal your home or places you visit. Even ordinary entries can reveal sensitive patterns when combined. We treat identifiable records of this kind as sensitive rather than assuming they are harmless because you entered them yourself.
You decide what to record. Avoid including another person’s private information unless you have a lawful reason and the necessary permission. Please do not send passwords, payment-card details, or identity documents in journal entries or ordinary support emails.
Support messages. If you contact us, we receive your contact details and the information you include. Share only the records needed to explain your request.
3. Information from devices and other services
Technical information. Requests to our website, authentication service, and backend expose information such as IP address, request time, browser or app information, and technical errors to the systems handling them. We use necessary operational information to deliver the Services, troubleshoot failures, and protect accounts. This is separate from recording your browsing behavior for advertising.
Assistant connections. When you connect an assistant, we process connection identifiers, authorization information, and the tool requests and record changes it submits. We receive the information sent to Splot through those requests, not automatic access to all your conversations with that assistant.
Linked media. When a YouTube preview is displayed in the app, your device requests the video’s metadata and thumbnail from YouTube/Google. Those requests disclose the video identifier and ordinary connection information, including your IP address, even without playing the video. Opening a link takes you to the third party’s service. Its own privacy policy applies there.
Future imports and device permissions. If we add health-platform imports, wearable connections, precise location recording, camera access, or other device integrations, we will explain the source, data types, and purpose before enabling collection and request the permissions and consent required for that feature. This policy does not authorize unrestricted access to your device or other accounts.
4. Why we use information
We use information to maintain your account; save, organize, retrieve, and update your records; carry out assistant requests you authorize; respond to support and privacy requests; maintain security and reliability; and meet applicable legal obligations.
We do not sell your personal information, use your health records for targeted advertising, or train our own or another provider’s general-purpose AI models on your journal. We do not provide your records to employers, insurers, or data brokers for their independent use. Sharing with an assistant you connect is described below and is subject to that provider’s own practices.
Product improvements should use technical information, feedback, or information that has been effectively anonymized, rather than repurposing the contents of your private journal. Removing your name alone does not make a health record anonymous.
Splot does not use your records to make solely automated decisions that have legal or similarly significant effects on you, such as decisions about insurance, employment, credit, or medical treatment.
5. Legal grounds and sensitive-data consent
Where EU or UK data-protection law applies, we distinguish the legal ground for ordinary personal information from the additional condition needed for health information:
- Providing the service: We process ordinary account information and service requests as necessary to perform our agreement with you or take steps you request before entering it.
- Security and support: We rely on legitimate interests for proportionate fraud prevention, technical reliability, and handling inquiries, taking account of your privacy and reasonable expectations. This is not a general authorization to reuse health records.
- Legal requirements: We process information where necessary to meet a legal obligation. Where health information is involved, an applicable additional legal condition is also required.
- Optional and sensitive processing: We will obtain specific, explicit consent before processing health information where consent is the applicable condition, and separate authorization for disclosures to connected assistants. Other optional collection will use consent where required.
Accepting the Terms, reading this policy, or simply using the app is not explicit health-data consent. We will identify the relevant information, purposes, and recipients in the consent flow. Consent for unrelated purposes will not be bundled with access to core features.
You can withdraw consent by contacting privacy@splot.health, and through dedicated controls where available. Withdrawal does not invalidate earlier lawful processing. We will stop the processing that depends on that consent; this may make the affected record or connection feature unavailable. Limited retention may still be necessary where another lawful ground and, for health data, an applicable additional condition permits it.
6. Connecting an AI assistant
Connecting an assistant allows information to leave Splot. Only connect a service you trust with the records it can access.
The current meal connection can read your profile and meal history and can create, replace, or delete meal records. It is not a read-only connection, and access is not limited to the single entry mentioned in your latest message. Splot currently does not offer per-entry sharing controls. Review the connection’s capabilities before approving access and review important changes made through an assistant.
An assistant provider may retain retrieved information in conversations, logs, or other systems and may apply its own model-training settings. Splot’s commitment not to train on your journal does not override that provider’s policy. Check its privacy terms and account settings before connecting. We do not claim that an assistant provider acts only on Splot’s instructions.
To stop future access, remove the connection using the provider’s controls and contact us if you need help revoking Splot authorization. Signing out of Splot is not the same as revoking an assistant connection. Revocation must invalidate access credentials to prevent further requests; copies already received by a provider are not recalled by disconnecting it.
Deleting an entry or account in Splot also does not automatically delete conversations or copies held by an assistant. You may need to request deletion from that provider separately.
7. Other recipients
Our service infrastructure includes Supabase for authentication and database storage and Fly.io for the backend. The public website is configured for Cloudflare hosting. These services handle the information necessary for their respective roles; public website hosting does not by itself give access to your journal database. Email providers also handle messages you send to our contact addresses.
We require providers processing information on our behalf to use it for the contracted purpose and protect it appropriately. Access by people operating Splot is limited to legitimate operational, support, security, or legal needs; private records are not available for casual browsing.
We may disclose the minimum information necessary to comply with a valid legal requirement or address a serious security incident, where legally permitted. We assess requests involving health information carefully and apply the additional protections it requires.
If ownership of Splot changes, any transfer of personal information must respect this policy and applicable law. A business transaction is not permission to sell health records for unrelated use. We will give notice of a material change in responsibility or use, and obtain fresh consent when required.
8. Storage, retention, and deletion
Your saved records are kept to provide the history you choose to maintain, until you delete them or request account deletion, subject to limited legal exceptions. Temporary preview content may exist only on your device or in memory; a preview is not a promise of permanent cloud storage.
Operational logs, support correspondence, and security records are retained only for their relevant operational or legal purpose. Retention depends on the need to investigate incidents, complete a request, resolve a dispute, or meet a specific record-keeping obligation, rather than an unlimited right to keep your journal.
Deleting a record removes it from the active service. Backup copies may remain for a limited recovery period before they expire. Backups must not be used to restore deleted information to ordinary use, and deletion requests must be reapplied following a recovery. We must finalize and disclose the actual log and backup retention periods before this draft takes effect.
For account deletion or an export, contact privacy@splot.health. Self-service options depend on the version and feature available to you. Uninstalling the app or signing out does not delete server-side records. We may verify your identity proportionately before acting, without asking you to expose additional health information unnecessarily.
9. Security and international processing
Splot uses authenticated access and account-level database restrictions to separate users’ records. Production connections use HTTPS, and mobile session credentials use the operating system’s secure storage facilities. These controls do not make Splot end-to-end encrypted: the service must process records to provide storage and assistant access.
No service can guarantee absolute security. If an incident affects personal information, we will investigate, take appropriate containment measures, and notify affected people and authorities where required by applicable privacy and health-data breach laws.
Providers may process information in countries outside your country of residence. Before transferring protected information internationally, we must identify the relevant locations and establish the legally required safeguards, such as an adequacy decision or appropriate contractual clauses and supplementary protections. The applicable provider locations and transfer arrangements must be confirmed before this draft becomes effective. You can request information about applicable safeguards at our privacy address.
10. Your rights and choices
Depending on the laws that apply, you may request access to your information, correction, deletion, a portable copy, restriction of processing, or object to processing based on legitimate interests. You may withdraw consent and complain to the data-protection authority where you live, work, or believe an infringement occurred. These rights are subject to their legal conditions and exceptions.
Send requests to privacy@splot.health. We will respond within the applicable statutory period, explain any permitted extension or refusal, and provide information about further review or complaint options. For EU/UK requests, the ordinary response period is one month, with extensions only where legally permitted. We will not penalize you for exercising privacy rights.
If consumer-health privacy laws apply where you live, additional rights may include confirmation of collection or sharing, withdrawal of consent, deletion, and an appeal of a denied request. Contact the same address to make or appeal a request. Applicable regional notices must be available before launch in a region that requires them.
11. Cookies and local storage
Our public landing page does not currently set cookies or use advertising analytics. See the Cookies Policy for its scope.
Separate browser sign-in and authorization pages use authentication cookies. The mobile app stores session credentials securely on your device. These are necessary for account access and are distinct from advertising or cross-site tracking.
12. Age eligibility
Splot is intended only for adults aged 18 and over. We do not knowingly offer accounts to people under 18. If we learn that someone below the permitted age has supplied personal information, we will take appropriate steps to stop the processing and remove it, subject to lawful retention requirements. Contact our privacy address if you believe this has happened.
13. Changes and contact
We will update the date and provide appropriate notice of material changes. A new policy does not by itself authorize a new use of sensitive records: we will obtain additional consent where required before that processing begins.
For all privacy matters, including health-data consent, assistant access, export, and deletion, contact privacy@splot.health.