Who this covers
This policy covers the Slopper iOS app and slopper.co, operated by Anant Jain in the United States. Slopper is currently offered only in the United States to people age 13 or older. If you are under the age required to consent to data processing where you live, a parent or guardian must provide any required consent.
Data we process
- Account: your email address, authentication records, and invite redemption. Email is used to sign you in, secure deletion, and answer support requests.
- Public profile and content: display name, username, bio, avatar, posts, replies, confidence score, likes, follows, and timestamps. Other signed-in members can see this information, subject to blocks, reports, and moderation.
- Typing verification: a bounded proof containing session timestamps, device and SDK metadata, aggregate typing metrics, and factor results. The server recomputes the public confidence score. The full proof is private to operators and is not returned by feed APIs. It indicates observed in-app input patterns; it does not prove who is using the device.
- Device integrity: Apple App Attest key identifiers, environment, and counters. Apple creates the private key and Slopper does not receive it. These identifiers help detect modified apps and replayed requests.
- Safety and operation: reports, blocks, moderation decisions, post-attempt timestamps, and service logs. Hosting, authentication, and edge providers may process IP addresses, request metadata, and rate-limit or security signals. Slopper does not sell personal information or use third-party advertising trackers.
Why we use it
We process data to provide accounts and the social feed, verify the posting contract, prevent spam and abuse, investigate reports, secure the service, respond to support, comply with law, and enforce the Terms and Community Standards. Where consent is the legal basis, you may withdraw it by contacting us; withdrawal does not affect earlier lawful processing and may make the service unavailable.
Service providers and disclosures
Slopper uses Supabase for authentication, Postgres, storage, and edge functions; Apple for App Attest and the App Store; and Vercel for the public website. They process data under their own infrastructure terms as subprocessors. We may disclose information when legally required, to protect people or the service, or during a business transfer. We do not disclose full typing proofs to other members.
Retention and deletion
Public content and its private typing proof remain until the content or account is deleted. Rate-limit attempts are pruned by maintenance and remaining attempts, App Attest records, invites, social relationships, reports, profile data, posts, replies, and typing proofs tied to your content are removed through account deletion. Other people's replies are detached and preserved as their content rather than erased.
Use Profile actions → Delete account. A fresh email verification authorizes permanent deletion for ten minutes. Slopper removes avatar objects, relational data, and then the authentication identity. The live product is cleared immediately after successful completion. Providers may retain encrypted disaster-recovery backups and limited security logs until their configured retention windows expire; these copies are isolated from normal product use.
Your choices
You may edit your profile, delete your own posts, block members, and permanently delete your account in the app. You may request access, correction, deletion, or consent withdrawal at me@anantjain.dev. Anant Jain owns privacy responses and aims to acknowledge requests within two business days. We may verify your identity before acting.
Security, children, and changes
We use access controls, row-level security, bounded proof validation, and device-integrity checks, but no service is perfectly secure. Slopper is not directed to children under 13; contact us if you believe a child provided data. Material policy changes will be posted here with a new effective date.