Who we are
The data controller is Kacper Kępiński, running the business Kacper Kępiński IT, Michała Kleofasa Ogińskiego 5/100, 03-318 Warszawa, Poland, NIP 5222788066. For anything about your data, write to privacy@potnote.com. We have no data protection officer.
Without an account
Potnote works without an account. Your recipes, notes, collections, meal plans, shopping lists and settings are stored on your phone. Cooking mode, including its voice commands, runs on the phone, and what it hears does not leave the phone.
Even without an account, the app gets a random id from our sign-in service, Supabase, so that the usage counts for metered features (scanning a cookbook page and AI-read imports) can be kept per phone. The id is random, has no name or email attached, and is stored in Frankfurt. It is removed when you delete the app, or on request to privacy@potnote.com.
A backup or export is a file you save wherever you choose, and what happens to it next is up to you. On iPhone, Apple’s device backup may include the app’s data; Apple’s settings control that.
With an account
An account is optional. You sign in with Apple, with Google, or with an email code (a one-time 6-digit code or link). There are no passwords.
Once you sign in, your recipes, notes, collections, plans and shopping lists sync to our database at Supabase in Frankfurt, Germany. The data is encrypted in transit and at rest. It is not end-to-end encrypted: sync needs our servers to read it.
We store your email address (with Apple it can be a relay address that Apple hides for you) and the data you sync. Apple and Google give us only your email address. The legal basis is our contract with you (Article 6(1)(b) GDPR).
Recipe import and scanning
Most recipe links are read by our own importer. When that importer cannot read a page, the text of that page is sent to Claude, an AI model made by Anthropic, to extract the recipe. Scanning a cookbook page works the same way with the photo you take. Nothing else from your library is sent. Anthropic does not use this data to train its models. The legal basis is our contract with you (Article 6(1)(b) GDPR), because you asked for it.
Pro and payments
Potnote Pro is billed by Apple or Google, and we never see your card. Pro adds the planner, the shopping list, cookbook scanning, household sharing for up to 6 people and the cooking log.
RevenueCat manages Pro status for us. It receives your app user id (your account id, or the random id when you are signed out) and the purchase receipts from the store. We learn only whether Pro is active.
Usage statistics
Usage statistics are off until you switch them on in Settings. When they are on, PostHog Cloud EU receives anonymous counts: how often the app is opened and which screens are opened, with your phone’s system (Android or iOS) and a random number that is new each time the app starts. Never recipe contents, names, links or anything you type, and no IP address, location, account or device id. We keep these counts for 1 year, then they are deleted. The legal basis is your consent (Article 6(1)(a) GDPR), which you can withdraw in Settings at any time.
The website and contact
The website has no trackers and no analytics. Cloudflare hosts it and runs a Turnstile spam check on forms. Cloudflare processes your IP address to deliver and protect the site.
When you write to us through the contact form, your message reaches us by email through Resend. We use it only to answer you. Nothing is added to a mailing list.
Who processes data for us
- Supabase: accounts, sync and the anonymous counts described above. Database in Frankfurt, Germany.
- Cloudflare: the website, its forms and the Turnstile spam check.
- Resend: sends sign-in codes, delete codes and contact form messages (EU region).
- RevenueCat: Pro status, with your app user id and purchase receipts.
- Apple and Google: sign-in and payments.
- Anthropic: recipe pages and cookbook photos, only when the importer or the scanner needs them.
- PostHog Cloud EU: usage statistics, only when you switch them on.
Where a provider processes data outside the EU, we rely on the safeguards in its data processing terms.
How long we keep data
- Recipes on your phone: until you delete them or the app.
- Synced data: until you delete it or your account. It is deleted from our servers within 30 days, and cleared from backups within 30 more.
- Shared links: until you stop them or delete the item they point to.
- Anonymous counts tied to an app install: until you delete the app, or on request.
- Usage statistics: 1 year.
- Contact messages: as long as the matter needs, then deleted.
Export and deletion
In the app you can export your data as JSON, or as a PDF sent to your email. To delete your account and data, go to Settings → Privacy & data → Delete account and data. Without the app, use the delete page at potnote.com/delete, which sends a 6-digit code to your email. The delete page explains what is removed and what stays.
Your rights
Under the GDPR you have the right to access, export, correct, erase and restrict your data, to object to processing based on our legitimate interest, and to withdraw any consent at any time. To use these rights, write to privacy@potnote.com. We answer within one month.
You can complain to a supervisory authority. In Poland it is the Prezes Urzędu Ochrony Danych Osobowych (UODO). If you live in another EU country, you can complain to the authority there.
Changes to this policy
The date at the top changes whenever we change this policy. We tell you about a material change in the app and by email at least 30 days before it takes effect.
Back to PotnoteLegal · Privacy
Privacy policy
Short version: your recipes stay on your phone unless you sign in to sync them. We don’t sell data, show ads or track you, and you can export or delete everything at any time.
- Ads0
- Trackers0
- Data sold0
- Stored inEU · Frankfurt
- Usage statsOff by default
- DeleteAnytime
Privacy policyUpdated 14 Nov 2026