Splot keeps a food journal, and a journal can reveal health information. This page explains how we protect it. The Privacy Policy is the binding document; where the two differ, it applies.
Signing in
You sign in with Apple or Google. Splot has no passwords of its own, so there is no Splot password to guess, reuse or leak. Your Apple or Google account protects your Splot account, including its two-step verification. The app keeps your session in your device’s secure storage.
Assistants and API keys
- You approve every connection. An assistant such as ChatGPT or Claude connects through OAuth with PKCE, and you approve it on a Splot screen that lists what it will be able to do. Sharing your journal with an assistant needs its own consent.
- A connection reaches your whole journal. A connected assistant can read and change your meals, foods, photos and targets. Splot does not limit a connection to particular records.
- You can disconnect at any time, in the Splot app under Account, or in your assistant’s settings. Disconnecting stops its access. What the assistant already received stays with its provider, under its own terms.
- Every change is attributed. Splot records which assistant created or changed each record, and keeps a meal’s earlier versions when it changes.
- API keys are limited. Each personal API key is read only or read and write, expires after at most one year, and can be revoked at any time. We store only a one way hash of each key.
- Each connection has its own request limit, so one assistant or key cannot flood your account.
How your data is protected
- Each account reaches only its own records. Database rules check every query against the signed in account. Our servers connect to the database with a restricted role that cannot bypass those rules, and hold no administrator key.
- Photos are private. Each account can store and read only its own photos. A photo is shown through a link that expires after ten minutes.
- Connections are encrypted, between your device or assistant and our servers.
- Data is encrypted at rest. Our database and photo storage run on Supabase, which encrypts all customer data at rest with AES-256 and is SOC 2 Type 2 audited (Supabase security). Splot itself has no certification.
- Splot is not end to end encrypted, because our servers must process your records to calculate your journal and answer your assistant.
- Access by people who run Splot is limited to what support, security and our legal obligations require.
We never sell your journal, use it for advertising, or train AI models on it.
Where your data is stored
Your account, journal and photos are stored in Ireland. Request logs, subscription status and read only database copies are processed in the United States. The Privacy Policy lists every service provider and where it processes data.
Deleting your data
You can delete any meal, food or photo, or your whole account, in the app or at app.splot.health/account. Deleting your account removes your records from our active systems straight away and from backups within 30 days. Server logs are kept for up to 30 days. See Deleting your account for details.
Reporting a vulnerability
Please report suspected security vulnerabilities privately to security@splot.health, with the steps to reproduce them. Do not access other people’s data while researching. We will reply and keep you informed while we fix it.
If a breach affects your information, we will notify you and the authorities where the law requires.
Contact
- Security: security@splot.health
- Privacy questions and requests: privacy@splot.health
- Everything else: support@splot.health