Privacy Policy

Potto builds weekly meal plans, recipe cards, cost estimates, and shopping lists around the supermarket, budget, cooking styles, dietary needs, household size, and kitchen equipment you choose. It also offers two camera-based helpers: Fridge Chef, which suggests recipes from a photo of your ingredients, and Calorie Snap, which estimates the nutrition of a meal from a photo. Everything Potto produces is generated for your personal cooking, not gathered to build a picture of you as a person.

Potto never asks for your name, email, phone number, or address. The only details it works with are the planning preferences you select: your chosen retailer, your weekly grocery budget, the cooking "vibes" you pick, your dietary choices (such as vegetarian, vegan, gluten free, or dairy free), the appliances you own, and the number of people you cook for. These describe a meal plan, not an identity, and are not used to recognise you as an individual.

Fridge Chef and Calorie Snap let you take or choose a photo so the app can identify ingredients or estimate a meal's nutrition. When you use these features, the image is sent to our backend, where an automated model analyses it and returns the result to your device. We ask for camera and photo-library permission only for this purpose, and only at the moment you use the feature. Images are processed to answer your request and are not used to identify you or build an advertising profile. Please avoid capturing other people or sensitive documents in your shots — Potto is only looking for food.

To show prices and budgets in the right format, Potto reads your device's region and currency settings and sends them alongside your meal request. We also use a privacy-conscious analytics service (Mixpanel) to understand how features are used and to fix problems. This may include in-app events (for example, generating a plan or opening a recipe), your device model, operating system version, app version, and a randomly generated identifier that is not linked to your real identity. Potto does not collect your precise location, your contacts, your message history, or a cross-app advertising identifier for tracking.

Your preferences, photos, and locale are used for one job: to create the meal plans, recipes, nutrition estimates, shopping lists, and dish images you ask for, and to keep the app running smoothly. Analytics data is used in aggregate to improve features and stability. We do not sell your information, and we do not use it to target advertising.

If you request a refund for a purchase made in Potto, we may need to share limited transaction details with Apple to help assess the request. This can include how long the app was actively used, an anonymised identifier not tied to your real identity, the total amount spent in the app, and the total already refunded. This is used only to handle refunds.

Most of your Potto data never leaves your iPhone. Your saved preferences, your active meal plan, your plan archive, your calorie log entries, your downloaded dish images, and the items you tick off your shopping list are kept in the device's local storage. They are not uploaded to us for safekeeping and are not synced between devices. Deleting Potto removes this local data from your phone.

Potto depends on a few trusted services. Our backend runs the automated model that generates plans, analyses photos, and produces dish images; it receives your preferences, budget, locale, and submitted photos, never identity details. Mixpanel provides usage analytics using non-identifying event and device data. Apphud manages subscriptions and verifies your subscription status using a non-identifying identifier and purchase information. Purchases themselves are handled by Apple through the App Store under Apple's own privacy practices. Each provider processes data according to its own policy.

Potto offers an auto-renewable subscription that unlocks premium features. Subscriptions are sold and billed through your Apple ID and the App Store, not directly by Potto. Payment is charged when you confirm the purchase, and a subscription renews automatically unless auto-renew is turned off at least 24 hours before the current period ends. You can view, change, or cancel a subscription any time in your Apple account settings. We learn your subscription status through Apphud and Apple, but we never receive or store your payment card details.

Potto is made for a general audience of people who plan and cook meals and is not directed at children under 13. We do not knowingly collect personal information from children. Because Potto needs no account and does not gather identifying data, it does not build profiles of any user, including minors. If you believe a child has shared information that needs attention, contact us and we will act on it.

Depending on where you live, you may have rights over your personal data under laws such as the EU General Data Protection Regulation and the California Consumer Privacy Act, including rights to access, correct, or delete your information and to not have it sold. Because Potto runs without accounts and avoids identifying data, most information tied to you lives only on your own device and is fully under your control. You can edit your preferences, clear your plan archive and calorie log, or delete the app at any time. For any further request, reach us at the address below. Potto does not sell personal information.

Preferences, plans, and calorie entries kept on your device stay there until you change them, clear them, or remove the app. Photos and preferences sent to our backend are processed to fulfil your request and are not used to build a lasting profile of you. Subscription status information is kept only as long as needed to keep your subscription working and to meet legal and accounting obligations.

We use reasonable technical measures to protect information in transit to and from our backend, including transmission over encrypted connections. No method of transmission or storage is ever perfectly secure, but by avoiding identifying personal data, Potto keeps the amount of sensitive information involved intentionally small.

We may update this Privacy Policy as the app evolves or as legal requirements change. When we make a meaningful change, we will update the "Last updated" date at the top of this page. Continuing to use Potto after an update means you accept the revised policy.

Questions about this policy or about how Potto handles information? Email us at support@potto.app and we'll be glad to help.