Potluck Privacy Policy

Potluck respects your privacy. This page explains what information the app collects, how that information is used, and where to direct privacy or support requests.

Information we collect

  • Account details such as email address, username, display name, and profile settings.
  • Challenge, social, and messaging activity you create inside Potluck.
  • Your chocolate coin balance and coin history. Coins are in-app only: they have no cash value and can't be bought or cashed out.
  • Daily step totals from Apple Health or Health Connect, only if you turn on step sync. See Health data below.
  • Contact names and phone numbers, only when you choose to find friends from your contacts. They are matched against existing accounts and not stored.
  • Technical data such as device type, app version, and server logs used to keep the service working.
  • Ad-related consent and delivery signals required to show ads in supported app surfaces.

How we use information

  • Provide accounts, challenge features, chats, notifications, and support.
  • Calculate progress, standings, rewards, and other app-specific outcomes.
  • Secure the app, investigate abuse, and fix reliability issues.
  • Serve ads where monetization is enabled, subject to your choices and applicable platform rules.

Health data (Apple Health and Health Connect)

  • With your permission, Potluck reads one type of health data: your step count. It reads no other health or fitness data and never writes to Apple Health or Health Connect.
  • Before asking for access, the app explains what it reads, what it syncs, and why. You can choose "Not now" and keep using Potluck without step sync.
  • Potluck syncs one step total per calendar day (the date and the number of steps) to your account, because step challenges need it on our server to rank participants, track your daily goal, and award in-app ingredients. Each sync also records which part of the app ran it and your device's time zone, so steps land on the right day.
  • We do not upload individual health records, the times of individual walks, the device or app that recorded your steps, or any other health data.
  • People in a challenge with you can see your daily step totals and your ranking in that challenge.
  • Your health data is never used for advertising or marketing, never sold, and never shared with third parties, including advertising networks, data brokers, and analytics providers.
  • Service providers that run Potluck for us process this data only on our behalf: Supabase (our database) and Amazon Web Services (our servers). Reminders about your own progress, which may include your step count, are delivered through Expo's and Apple's or Google's push notification services.
  • Step totals are stored in Potluck's database in the United States (AWS us-east-2), encrypted in transit (HTTPS/TLS) and at rest. Health data is never stored in iCloud.
  • Turn off step sync anytime in the app's Settings ("Sync steps from Apple Health" or Health Connect); syncing stops immediately. You can also revoke access in the Health app or Health Connect.

Sharing

  • We do not sell your personal information.
  • We share data with service providers that help operate infrastructure, authentication, notifications, and advertising. Health data is never shared for advertising or analytics.
  • Other Potluck users may see the profile and activity you choose to share through challenges, chats, and related social features.
  • We may disclose information if required by law or to protect users, the service, or our rights.

Retention

  • We keep your information while your account exists so the service and your challenge history keep working.
  • When you delete your account, the data described below is deleted from our database right away. Server logs that record your account ID, and any backup copies of our database, are deleted within 7 days.

Deleting your account

  • Delete your account anytime in the app: open Settings (tap your profile photo) and choose "Delete account permanently". Deletion happens right away and can't be undone. You can also request deletion at huatstuff.com/potluck/delete-account.
  • We delete your login, name, username, profile photos, phone number, and settings; your step data and step sync records; your chocolate coin balance and coin history; your friends, friend requests, and invites; your notifications, and notifications other people got that named you; your posts, reactions, ingredients, dishes, recipes, and streak badges; your trade posts and offers; the people you blocked and the reports you made; and your push tokens. The only exception is your place in challenges, below.
  • Your place in challenges you entered stays, so results and coin pots still add up for everyone else. It becomes an anonymous "Deleted account" with no name, photo, or link to you, and each challenge gets its own, so they can't be connected to each other. In finished challenges it keeps your stake, your result, and your place, so nobody moves up into your spot. Your steps are still deleted and show as hidden; in potluck challenges, the dishes you entered stay so the points add up. In challenges still running or waiting on final results, you're out and your stake stays in the pot, the same as leaving.
  • Challenges you host that haven't finished are canceled and everyone's coins are returned. Finished challenges you hosted stay for the other participants.
  • Messages and trade comments you sent are emptied: the text and photos are deleted, and other people see "message deleted" from "Deleted account" in their chats. Challenge results announcements that named you are rewritten without names.
  • Some things belong to other people, so they stay: group chats you started stay with their members, and messages other people wrote stay as they wrote them, even if they mention you. Reports other people made about something you posted are kept, without a link to your account, to protect other users and meet legal obligations.

Advertising

Potluck may use Google AdMob or similar providers to deliver ads in supported app surfaces. Those providers may receive identifiers, device details, and ad interaction events needed to serve and measure ads under their own policies. Ads never receive health data.

Contact

For privacy questions, support requests, or help deleting your account, contact huatbiz@gmail.com.