Privacy Policy

1. Who we are

Slop is operated by Gedcom AI LLC (“Slop,” “we,” “us,” or “our”). This policy applies to the Slop mobile application, website, and related services.

2. Information we collect

Account information

When you use Sign in with Apple, we receive an account identifier and may receive your name and email address, including an Apple private relay address if you choose to hide your email.

Content and analysis information

When you submit content, we process the image, video, or supported social-post link you choose. For a social-post submission, your request instructs Slop and its processors to resolve that specific URL and temporarily retrieve the associated media for analysis. We also process technical metadata needed to fulfill the request, such as media type, byte count, source platform, request fingerprint, provider-supplied title or author, timestamps, detector scores, verdicts, and usage counts.

Device and notification information

If you enable notifications, we process an installation identifier, Apple Push Notification service token, notification environment, and registration status. Notification payloads contain a job identifier and routing information—not submitted media or detector scores.

Operational information

We create redacted logs containing safe identifiers, timing, processing stage, outcomes, stable error codes, provider request identifiers, and operation counts. We do not intentionally log source URLs, media bytes, signed storage URLs, credentials, or notification tokens.

3. How we use information

• Authenticate you and maintain your account.
• Analyze content you deliberately submit.
• Return results, history, thumbnails, and notifications.
• Apply plan limits and prevent duplicate submissions.
• Protect, debug, monitor, and improve service reliability.
• Comply with law and enforce our Terms.

We do not sell personal information, use it for targeted advertising, or track you across other companies' apps and websites.

Where applicable law requires a legal basis, we process account and submitted-content information to perform our contract with you; security, diagnostics, abuse prevention, and service improvement for our legitimate interests; notification information with your permission; and information needed to comply with legal obligations or protect rights and safety. You may withdraw notification permission through iOS Settings.

4. Media handling and retention

• Native uploads: raw media is placed in private, transient storage only while the analysis runs. A reconciliation process removes stale transient objects older than 24 hours for terminal or missing jobs.
• Social-post media: resolved media is fetched into a bounded temporary file for analysis and is not stored remotely by Slop as raw media or returned to you as a general-purpose download. The source URL is retained with the job so the app can direct you back to the original post.
• History: Slop may retain a private, metadata-stripped thumbnail and analysis metadata until you delete the scan, delete your account, or we no longer need it to provide the service.
• Account records: we retain account and security records while your account is active and as reasonably necessary for legal, fraud-prevention, and security obligations.

5. Service providers

We disclose information only as needed to operate Slop. As of this policy's effective date, the principal processors and the information they may receive are:

• Apple: account authentication information and device push-notification registration and delivery information.
• Supabase: account records, job metadata, usage records, device registrations, transient native uploads, and private metadata-stripped thumbnails.
• Fly.io:encrypted application traffic and the temporary operational data processed by Slop's API and worker.
• RapidAPI and the selected media-resolution provider: the specific supported social URL you direct Slop to resolve and the technical response needed to identify its media.
• Sightengine: the submitted or temporarily resolved media needed to perform the requested image or video analysis, together with provider request and operation metadata.
• Vercel: ordinary website request information, such as IP address, user agent, requested route, timestamps, and operational logs when you visit this public website.

These providers process information under their own terms and privacy commitments. Gedcom AI LLC does not use submitted media to train its own detection model. We do not control whether an independent provider has separate legally permitted processing obligations or practices under its terms; review the relevant provider policies if you need additional detail. We will update this policy when a material change to our provider set or processing practices requires notice.

We may also disclose information when required by law, to protect rights or safety, or in connection with a merger, financing, acquisition, or sale of assets, subject to appropriate protections.

6. Your choices and rights

You can decline notifications, delete individual scans, or delete your account inside Slop. Account deletion removes your profile, device registrations, job records, and stored Slop thumbnails, subject to limited legal or security retention.

Depending on where you live, you may have rights to access, correct, delete, restrict, or receive a copy of personal information, and to appeal a response. Contact us to make a request. We may verify your identity before completing it.

See the account deletion guide for exact in-app steps.

7. Security and international processing

We use administrative, technical, and organizational safeguards designed to protect information, including private storage and authenticated access controls. No system is completely secure. Slop and its providers may process information in the United States and other countries where they operate.

8. Children

Slop is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided information, contact us so we can investigate and delete it.

9. Changes and contact

We may update this policy as Slop changes, including when we add or replace a material hosting, storage, media-resolution, detection, or notification provider. We will revise the effective date and provide additional notice when required.

Privacy questions and requests can be sent to support@leetstreak.app.