Privacy Policy

Last updated: 30 October 2026

This policy explains what Splatter collects when you use the Splatter app and splatterapp.com, why we collect it, who can see it, and the choices you have. In short: we collect what is needed to run a social app where photos become 3D scenes. We don't sell your data, we don't show third-party ads, and we don't track you across other apps or websites.

Splatter is run by [OPERATOR: your full legal name or company name], [CITY], Pakistan ("Splatter", "we", "us"). We are responsible for your information under this policy. Contact: support@splatterapp.com.

1. What we collect

Things you give us

Account details: email address, password (stored only as a one-way scrambled hash we cannot read), username, display name, bio, profile picture, profile link and profile colour.
Phone number: if you sign up with one or add one to verify your account. Our sign-in provider (Supabase) keeps it and sends the code by text message through an SMS provider. It is used to confirm the account is yours, to let you sign in, to stop fake accounts, and so that people who have your number in their contacts can find your account (you can turn that off in Privacy). It is never shown on your profile or to other people, and they can't look it up.
Contacts: only if you choose "Find friends from contacts" in the app and allow it. Each number is scrambled on your phone (a SHA-256 hash) before it is sent, compared once with verified numbers on Splatter, and not saved. Names in your contacts never leave your phone. You can take the permission away any time in your iPhone's Settings.
Birthday: asked for when you make an account on the website, so Splatter is only used by people aged 13 and over and fits your age. It is never shown on your profile or to other people. Splatter's moderators can see it.
What you post: photos, videos, 3D scenes made from your photos or scans, captions, comments, stories, reposts, selfie reactions, notes ("marks") you leave inside scenes, and songs you add to a post.
Messages: the text, photos, videos, voice notes, reactions and replies you send in chats, and which messages have been seen.
Location you choose to add: a place name, and the area a post was made in. See Location below.
Verification requests: your full name, a link that shows it is you, and a note, if you ask for a verified badge.
Reports and support: what you report and why, and anything you write to us.

Things collected when you use Splatter

Activity: likes, saves, follows and follow requests, blocks, posts and stories you viewed, scenes you stepped into, invites, and how many scenes you build each day (for the daily limit).
Security records: failed sign-in attempts and a short log of actions (like posting or commenting) used to stop spam and password-guessing. These are kept for one day or less.
Basic technical data: our hosting providers record standard server logs (such as IP address, time and the request made) to keep the service running and secure.
Sign-in records: our sign-in provider (Supabase) keeps a record of each sign-in and active session: the time, the IP address and the device or browser. For safety and moderation (for example, to spot a hacked account or someone who keeps coming back after a ban), Splatter's moderators can see your recent sign-ins with the device and an approximate area (city or country level, from a shortened IP address, never your exact location). They can also see a map of the approximate areas where accounts last signed in, at the same level. The area is looked up in an IP list we keep ourselves (from DB-IP); your address is not sent to anyone else for this. Each time a moderator looks, it is logged. We don't add any other tracking.

Things that stay on your phone

The live camera view used for AR, and your room's layout, are processed on your phone and are never sent to us.
Scenes saved on your phone, drafts and app settings stay on your phone.
Your sign-in is kept in the iPhone's secure keychain, and only on that device.

We do not use advertising IDs, third-party analytics or ad trackers, and we do not use your content to train AI models.

2. Why we use it

To run Splatter: create your account, show your posts, deliver messages, build 3D scenes, and show you a feed. (Needed to provide the service you asked for.)
To choose what you see: the "Everyone" feed is ordered by how fresh and popular posts are and by who you follow and like. Nearby and the Places map use location only as described below. (Our legitimate interest in a useful feed.)
To keep people safe: handle reports, remove content that breaks our rules, stop spam, bots and account takeovers, and enforce bans. (Legitimate interests and legal obligations.)
To talk to you: account emails, such as confirming your address or resetting your password, and answers to your questions. We don't send marketing email unless you agree.
To meet the law: respond to valid legal requests and protect rights and safety.

3. Location

Splatter asks for your location only when you use a feature that needs it, and you can say no.

Adding a place to a post: the place name you choose is shown on the post. The position is saved rounded to about 1 km, is never shown to anyone, and is used only to find posts for the Nearby tab.
The Nearby tab: to find posts, your position is rounded to about 1 km on your phone before it is sent. Separately, the place where you last used Nearby is saved, rounded to about 10 metres: one location, replaced each time you use Nearby. It is never shown to other people; Splatter's moderators can see it for safety and moderation (for example, with reports of threats or illegal content). It is deleted with your account. If you never use Nearby, nothing is saved.
The Places map: only if you turn on "Pin on the Places map" for a 3D scene, the pin you place is saved, rounded to about 10 metres, and shown on the public map with that post. You can take a post off the map at any time, and deleting the post removes the pin.
Place Memory: only if you turn on "Add to Place Memory" for a photo. We then save where and which way the photo was taken (precise GPS position, compass direction and the phone's tilt, from the photo or from your phone's sensors while Splatter's camera was open) and the name of the public place nearby from Apple Maps. This precise position is never shown to anyone and cannot be read through the app. It is used only to put your photo together with other people's photos of the same public spot. Other people see only the Place (its name and a position rounded to about 10 metres) and where your photo stands inside it, in metres from the Place's centre. A Place appears only when several different people have posted at a spot Apple Maps knows as public, such as a park or a beach, so Places are not made at homes. When you add a photo you choose who sees it there: everyone, or only you (a private memory, which only you see in the Place). Private accounts can only add private memories, and making your account private turns your memories in every Place private. To place a plain photo in 3D, a copy of the photo is sent to our processing server once to estimate its depth; the server keeps nothing afterwards, and the light 3D copy is stored with your post. You can take a photo out of its Place at any time ("Remove from Place"), which also deletes its saved position; deleting the post does the same.

Other people cannot read the location saved with your posts. Please don't pin your home or anyone else's private home.

4. Who can see what

Public by default: your username, name, profile picture, bio, profile link, posts, comments, likes and follower lists. If you make your account private, only people you approve can see your posts and stories.
Visitors who aren't signed in can see a few popular posts and any single post someone shares a link to.
Private: your email address, phone number, saved posts, blocks, reports, verification request and sign-in records.
Messages can be seen only by the people in that chat. Photos, videos and voice notes in chats are stored privately and can be opened only by chat members. Messages are protected in transit and at rest by our providers, but they are not end-to-end encrypted, so they could be accessed by Splatter staff when needed to investigate a report or meet a legal duty.
Files of public posts (pictures, videos and 3D scenes) are stored at web addresses that are hard to guess. Anyone who has such an address can open the file.

We share data only with the service providers that run Splatter for us, under contracts that let them use it only to provide their service:

Supabase: accounts, database and file storage.
Modal: the GPU computers that turn photos and scan videos into 3D scenes. Your photo or video is used only to build your scene and is deleted from Modal within 7 days at most.
[Website host, e.g. Cloudflare]: serves splatterapp.com.
An SMS provider: receives your phone number and the code, only to deliver the text message.
Apple: delivers the app; if you contact us by email, your email provider handles that message.

We may also share information if the law requires it, to respond to a valid request from authorities (including in Pakistan), to report child sexual exploitation (see Child Safety), to protect someone from serious harm, or as part of a merger or sale of Splatter, in which case this policy will still apply. We never sell personal information or share it for advertising.

6. AI and 3D scenes

When you make a scene, our servers estimate depth from your photo and may use AI to fill in parts that were hidden or outside the frame. Those filled-in parts are guesses, not real. Your photos are not used to train these models.

7. How long we keep it

Account details and posts: until you delete them or your account.
Stories: shown for 24 hours.
Messages: until the sender deletes them or deletes their account.
Photos and videos sent to build a scene: up to 7 days on Modal, usually much less.
Security logs: one day or less.
Reports and records of rule-breaking: until the accounts involved are deleted, or longer when the law requires it (for example evidence reported to the authorities).
Backups held by our providers: deleted data disappears from them on their normal schedule, within about 30 days.

8. Your choices and rights

Edit or delete your profile, any post, comment or message at any time.
Delete your account in the app: Profile, the ☰ menu, Settings and activity, Delete account. This removes your profile, posts, files, likes, comments and messages you sent. See Delete your account.
Control who sees you: private account, who can message or comment, hiding like counts, appearing in search, blocking.
Location, camera, microphone and photos: turn them on or off any time in your iPhone's Settings.
Ask us for a copy of your data, to correct it, to delete it, or to object to how we use it, by writing to support@splatterapp.com. We answer within 30 days. We may need to check it's really you.

Depending on where you live (for example the EU, UK or California), you may have extra rights, including to complain to your data protection authority. We give these rights to everyone, wherever you live. We do not sell or "share" personal information as California law defines it.

9. How we protect it

Data travels over encrypted connections (HTTPS) and is encrypted at rest by our providers. Database rules make sure each account can only read and change what it's allowed to. Passwords are hashed, sign-ins are stored in the phone's keychain, password-guessing and spam are slowed down automatically, and file types are checked on upload. No system is perfectly secure, so please use a strong password you don't use anywhere else. If you find a security problem, tell us at support@splatterapp.com.

10. Children

Splatter is not for children under 13, or under the minimum age for using online services without a parent's consent where you live. We don't knowingly collect data from them. If we learn that a child under that age has an account, we delete it. Parents can contact us at support@splatterapp.com.

11. Where your data is stored

Our providers store and process data on servers that may be outside your country, including in the United States and the European Union. When we move data across borders, we rely on our providers' safeguards, such as standard contractual clauses.

12. Changes to this policy

If we change this policy, we'll update the date at the top. If a change is important, we'll tell you in the app before it takes effect.

13. Contact

[OPERATOR NAME], [POSTAL ADDRESS], Pakistan · support@splatterapp.com