Privacy Policy

Effective Date: December 10, 2025

Your privacy is important to us. This Privacy Policy explains what information we collect, how we use it, how we share it, how long we keep it, how we protect it, and your rights regarding your personal data when you use the Potluck Social app.

Please also review our Terms & Conditions.

1. Information We Collect

We collect the following types of information when you use Potluck Social:

Note on Potluck Social assets: Some images shown in the app (such as the decorative image on the landing screen) are owned by the app owner and are included as part of Potluck Social’s design.

• Account Information: When you create an account, we collect your email address, display name, optional avatar URL, and optional location (city, state). If you sign up with Google, we receive your name, email, and profile picture from Google.
• Authentication Data: We store encrypted passwords (using industry-standard argon2 hashing) and session tokens to keep you signed in securely.
• Recipe Content: We collect and store the recipes you create, including recipe names, ingredients, instructions, cooking times, servings, ratings, notes, and any photos you upload.
• Shopping List Data: We store the items you add to your shopping list, including item names, quantities, aisle assignments, and whether items are checked off.
• Categories and Collections: We store the categories and collections you create to organize your recipes.
• Photos and Images: When you upload photos to your recipes, we collect and store those images using a third-party service (Uploadcare). We also collect metadata about photos such as captions and display order.
• User-Generated Content: If you share recipes with other users or receive recipes from others, we store attribution information (source name, source type) to credit the original author.
• Moderation Data: We collect reports you submit about inappropriate content, as well as records of users you've blocked.
• Usage Data: We may collect information about how you use the app, such as which features you access and when, to improve our service.
• Device and Technical Information: We may collect device type, operating system version, and app version to ensure compatibility and troubleshoot issues.

2. How We Collect Information

We collect information in the following ways:

• Directly from you: When you create an account, add recipes, upload photos, create shopping lists, or update your profile.
• Automatically: When you use the app, we automatically collect session data, authentication tokens, and usage information.
• From third parties: If you sign in with Google, we receive your basic profile information from Google.
• Through device permissions: When you grant camera or photo library access, we use those permissions to capture or import photos you choose to add to your recipes.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide the app: Store and display your recipes, shopping lists, categories, and photos.
• To authenticate you: Verify your identity and keep you signed in securely.
• To enable sharing: Allow you to share recipes with other users and receive recipes from others, with proper attribution.
• To improve the app: Analyze usage patterns to fix bugs, improve features, and develop new functionality.
• To moderate content: Review and respond to reports of inappropriate content and enforce our community guidelines.
• To communicate with you: Send important updates about your account or the app (we do not send marketing emails without your consent).
• To comply with legal obligations: Respond to legal requests and prevent fraud or abuse.

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following limited circumstances:

• With other users: When you share a recipe with another user, they can see the recipe content and your display name as the author. Your email address is never shared with other users.
• With service providers: We use third-party services to help us operate the app:
  • Uploadcare: For photo storage and delivery. Uploadcare's privacy policy is available at https://uploadcare.com/privacy-policy/. Uploadcare provides the same level of data protection as stated in this policy.
  • Database hosting: We use Neon (PostgreSQL) to store your data securely. Neon's privacy policy is available at https://neon.tech/privacy-policy. Neon provides the same level of data protection as stated in this policy.
  • Authentication services: If you sign in with Google, Google's privacy policy applies to the authentication process: https://policies.google.com/privacy.
• For legal reasons: We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety.
• In case of business transfer: If we are acquired or merged with another company, your information may be transferred to the new owner.

Important: All third-party service providers we work with are required to provide the same or greater level of privacy protection as described in this policy. We do not share your data with advertising networks or analytics companies.

5. Data Retention and Deletion

We retain your information for as long as your account is active or as needed to provide you with the app. Here's how long we keep different types of data:

• Account data: Kept until you delete your account.
• Recipes, photos, and shopping lists: Kept until you delete them or delete your account.
• Session tokens: Automatically expire after a period of inactivity (typically 30 days).
• Moderation reports: Kept for up to 1 year for safety and compliance purposes.
• Deleted data: When you delete content or your account, we permanently remove it from our active databases within 30 days. Backups may retain data for up to 90 days before permanent deletion.

How to delete your data: You can delete individual recipes, photos, or shopping list items at any time within the app. To delete your entire account and all associated data, go to your Profile page and tap "Delete Account." This action is permanent and cannot be undone.

6. Data Security

We take reasonable measures to protect your information from unauthorized access, loss, misuse, or alteration. These measures include:

• Encryption: All data transmitted between your device and our servers is encrypted using HTTPS/TLS. Passwords are hashed using argon2, an industry-standard secure hashing algorithm.
• Access controls: Only you can access your account data when signed in. We use session tokens to verify your identity.
• Secure infrastructure: Our database and servers are hosted on secure, industry-standard platforms with regular security updates.
• Limited access: Only authorized personnel have access to user data, and only when necessary to provide support or maintain the service.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: You can view all your account information, recipes, photos, and shopping lists within the app at any time.
• Update: You can edit your profile, recipes, and other content at any time through the app.
• Delete: You can delete individual recipes, photos, or shopping list items, or delete your entire account and all associated data through the Profile page.
• Consent: When you first use the app, we ask for your consent to collect and use your data as described in this policy. You can withdraw your consent at any time by tapping "Withdraw Consent" on your Profile page. Note that withdrawing consent will sign you out and may limit your ability to use the app until you accept again.
• Export: If you would like a copy of your data, please contact us using the information below.
• Opt-out of sharing: You can choose not to share recipes with other users by keeping them private in your own collections.

8. Content Moderation

Potluck Social allows users to create and share recipes. To maintain a safe and respectful community, we provide the following moderation tools:

• Reporting: You can report inappropriate recipes or photos by tapping the share button on any recipe and selecting "Report." We review all reports promptly.
• Blocking: You can block other users to prevent seeing their content. Tap the share button on any recipe and select "Block Author."
• Proactive filtering: While we do not currently use automated content filtering, we review reported content and take action against users who violate our community guidelines.
• Timely response: We aim to review and respond to all content reports within 48 hours. Serious violations may result in content removal or account suspension.

9. Children's Privacy

Potluck Social is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Effective Date" at the top of this page and notify you through the app or by email. Your continued use of the app after changes are posted constitutes your acceptance of the updated policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

• In-app: Go to your Profile page in the app for account management and data deletion options.
• Email: You can reach us at support@potlucksocialapp.com.

We will respond to your inquiry within 7 business days.

12. International Users

Potluck Social is operated in the United States. If you are located outside the United States, please be aware that information we collect will be transferred to and processed in the United States. By using the app, you consent to the transfer and processing of your information in the United States.