Privacy Policy

Last updated: October 27, 2026

Splash ("the app") is an alarm app that verifies you are awake using a wet-face selfie. This policy explains what data the app handles, how, and why. The short version: we never store your selfies, we don't sell data, we don't track you, and we collect the minimum needed to run the app.

1. Who we are

Splash is developed by Leo López Cañadas, an independent developer based in Spain, who is the data controller. Contact: splashalarm.app@gmail.com.

2. Your wake-up selfie

• What is sent: one photo, cropped around your face on your iPhone, taken when you dismiss the alarm. No faceprint, biometric template or identity information is created.
• How it is used: the photo travels over an encrypted connection (HTTPS) to our verification service, which asks an AI model one question: does this photo show real water on a face, taken out of bed? The answer (and, on a "no", a short reason such as "too dark") comes back to the app.
• Who processes it: Supabase (hosting of our verification service) and Anthropic (the AI model), acting as our processors.
• How long it is kept: Splash does not save the photo anywhere: our service handles it in memory and keeps only the result (wet or not, a score and the signs seen, never the image or a description of your face). Anthropic, our AI provider, does not use it for training and by default deletes what it receives through its API within 30 days; it may keep content longer only if its automated safety systems flag it for misuse.
• Offline: if you have no internet when you take the selfie, the photo waits in the app's memory (never on disk) and is sent as soon as you're back online.

3. Protecting the verification service

• App Attest key: to make sure checks come from the real Splash app, your iPhone creates a key with Apple's App Attest. Our service stores a random key identifier and its public key, plus a count of checks per day (counts are kept for 7 days). It is not linked to your name, Apple Account or any other identifier, and keys that go unused for a year are deleted.
• IP address: used only to limit how many checks can be sent per minute, and deleted within an hour.

4. Anonymous usage statistics

• What: to see where Splash can get better, the app sends short anonymous events to our own service (hosted by Supabase): which onboarding screen you reach, when the subscription screen is shown and closed, when a free trial starts, when an alarm rings and how it ends, the result of each selfie check (wet, not yet or error; never the photo) and app errors.
• Not linked to you: they carry a random identifier created on your iPhone (a new one if you reinstall Splash), the app and iOS versions, the App Store country and the app's language. No name, no photos, no Apple Account, no advertising identifier and no location. They are not combined with other data, sold or shared, and never used for advertising or tracking.
• How long: deleted after 13 months. Our service also keeps a log of each AI check for the same time (the result, the model, how long it took and what it cost; never the photo).

5. Purchases and subscriptions

Subscriptions are handled by Apple and managed through RevenueCat, our subscription infrastructure provider. RevenueCat receives purchase information (transaction details and a random app-specific identifier) so the app knows whether your subscription is active. We never see your payment details: Apple handles all payment processing.

6. Data that stays on your iPhone and in your iCloud

• Alarms, wake-up history, streaks and achievements are stored on your device and, if iCloud is on, synced through your own iCloud account (Apple's CloudKit private database) so they come back on a new iPhone. That copy lives in your iCloud, not on our servers: we don't run user accounts and cannot access it. You can turn it off in iOS Settings › your name › iCloud.
• Your own alarm sounds (recorded with the microphone or imported) are saved only on your device and never uploaded.
• Focus (morning app lock) uses Apple's Screen Time framework. The apps you choose are handed to Splash as anonymous tokens, and the "most used" list is drawn by iOS: neither your app usage nor which apps you chose ever leaves your iPhone.
• Notifications such as the bedtime reminder are scheduled locally on your device.
• Widget: your next alarm and streak are shared with Splash's widget through storage on your device.
• Diagnostics: crash and performance reports from iOS (MetricKit) are kept on your device and only reach us if you choose to attach them to a support email.

7. What we do NOT do

• No ads, no tracking, no analytics SDKs that profile you.
• No selling or renting of any data.
• No storing of your photos.
• No collection of contacts, location or health data.

8. Legal basis (GDPR)

For users in the EU/EEA: we process your selfie under Art. 6(1)(b) GDPR, because it is necessary to provide the service you ask for (wake-up verification). The App Attest key and IP address are processed under Art. 6(1)(f), our legitimate interest in keeping the verification service secure and preventing abuse. The anonymous usage statistics are processed under Art. 6(1)(f), our legitimate interest in understanding how the app is used so we can improve it.

9. Your rights

Under GDPR and similar laws you may request access, correction or deletion of your data, object to processing, and complain to a supervisory authority (in Spain, the AEPD). Since selfies are not stored and app data lives only on your device and in your own iCloud, most requests are satisfied by deleting the app and, if you use iCloud, its data in iOS Settings › your name › iCloud › Manage Storage. For anything else, email us and we'll respond within 30 days.

10. Children

Splash is not directed at children under 13 (or the minimum age for digital services in your country). We do not knowingly process data from them.

11. Changes

If we change this policy, we'll update this page and the "last updated" date. Material changes will be communicated in the app.

12. Contact

Questions? splashalarm.app@gmail.com