← SaltScout

Privacy Policy

Effective date: 2026-09-10.

SaltScout is built to need as little about you as possible. This page says exactly what it keeps, why, and where.

What SaltScout stores

• An anonymous account. When you first open the app it creates an anonymous account so your settings can be saved. It has no name, email, phone number, or password. If you delete the app, that account and everything tied to it becomes unreachable.
• Your daily sodium target in milligrams, and whether you entered it yourself, chose it through the quiz, or said a clinician gave it to you.
• Quiz answers, only if you opt in. The four-question quiz (age band, blood pressure diagnosis, heart failure, kidney disease) is used to suggest a target. The answers are saved only if you choose to save them. You can decline and still use the app.
• Items you tap "I'm getting this" on: the menu item, its sodium, and the date. This is what makes "what you have left today" work.
• Your time zone, so that "today" resets at your midnight.
• A clinic code, if you enter one. This tags your account to a participating clinic so the clinic can see how many patients enrolled, in aggregate only. It never links your name or any individual data to the clinic.

What SaltScout does not store

• Your name, email, phone number, address, or photo.
• Medical records, medication lists, or anything from your health provider.
• Your location. If you allow it, your coordinates are sent once per lookup to our server, which passes them to the Google Places API to find restaurants within about 3 km, and are then discarded. Nothing else about you goes with that request. Your location is never saved by SaltScout and never attached to your account or your log.
• Contacts, photos, or anything else on your phone.

Analytics

SaltScout uses PostHog to count things like how many people open the app, which chains are viewed, and which chain names are searched for with no result. This is how we decide which chains to add next. Analytics events are tied to your anonymous account ID, not to any identity, and carry basic device details (operating system version, device model, app version, and the screens you open). PostHog receives your IP address as part of any internet request; we have turned off its location lookup so no city or region is derived from it. We do not use advertising trackers and do not sell or share data for advertising.

Where data lives

Account data is stored with Supabase in the United States (AWS us-east-1). Analytics are stored with PostHog in the United States. Nearby-restaurant lookups go to Google Places (Google LLC), which receives only the coordinates for that lookup. All three are processors acting on our instructions.

Who can see it

Only you, through the app, and the SaltScout operator for maintenance. Row-level security on the database means each account can read and write only its own rows. Participating clinics see counts, never individuals. We do not sell data. We will disclose data only if required by law.

Deleting your data

In the app, Settings → "Start over" discards your target and log and creates a fresh anonymous account. The previous account's rows stay in our database but nothing can reach them through the app. Because accounts are anonymous, we cannot look one up by name; if you want a specific record removed, email us while the app is still on your phone and we will work out with you which account is yours and delete it.

Children

SaltScout is for adults and is not directed at children under 13. We do not knowingly collect data from children.

Not medical advice

SaltScout is an informational tool. It does not diagnose, treat, or prevent any condition and does not decide what sodium limit is right for you. It is not a covered entity under HIPAA and the information you enter is not a medical record.

Changes

If this policy changes, we will post the new version here and update the date at the top. If a change matters to what we keep or who sees it, we will also say so in the app.

Contact

stonebenj@gmail.com