🪴 Potshare

Privacy Policy — Potshare

Last updated: 7 July 2026

This policy describes what data Potshare collects, how it is used, and the choices you have. It applies to the Potshare mobile app for iOS.

TL;DR

• Guest data stays only on your device. We don't see it.
• If you sign in, your goals sync to our servers via Supabase, including on the free tier.
• If you use together pots (shared goals), the people you invite can see that goal's name, targets, members, and savings history.
• If you opt in, we use anonymous analytics (PostHog) to understand how the app is used and fix bugs.
• We never sell your data. There are no advertisers.
• You can export or delete your data at any time, no questions asked.

1. Who is the data controller?

Potshare is operated by Gabriel Olatunji-Ojo ("we", "us"). Contact: support@potshare.co.uk.

2. What we collect

2.1 Data you give us

• Goal data: names, target amounts, deadlines, contribution history, optional emoji and notes you add to a payment. Stored locally; synced to our servers only if you sign in.
• Account info (signed-in users only): your email address and the user identifier provided by Apple, Google, or Supabase Auth. We do not receive your Apple ID or Google password, bank credentials, or payment-card details.
• Profile (optional): display name, @username, and an avatar image if you upload one. Other Potshare users can see this so they know who they're saving with — that's the point.
• Together pot data: members of a shared goal can see the goal's name, target, deadline, member list, per-person contribution history, allocation shares, chat messages, and reactions to payments. Invite codes are stored so people you share them with can join.
• Friends graph: the friend requests you send/receive and the friendships that result. Each side of a friendship can see they're friends with the other.
• Reports: if you report a user or a message, we store the report, the reason you chose, a snapshot of the reported content, and your account identifier, so our moderation team can review it.
• Feedback: if you submit feedback or a bug report, we receive your message, the app version, your platform (iOS), and your email if you've chosen to include it for follow-up.

2.2 Data collected automatically

• Optional anonymous usage events via PostHog, when you enable analytics: which screens are opened, which actions are taken (e.g. "goal_created", "PaywallShown"), device type, OS version and app version. We do not collect contents of your goals, names, amounts, member identities, or any free-text input.
• Reminders & notifications: scheduled and delivered locally on your device. No reminder content is sent through our servers.
• Purchase data (Pro customers): purchase status and entitlements via RevenueCat. We do not see your card details — these are handled by Apple.

2.3 Data accessed on your device but NOT uploaded

• Contacts: if you tap "Sync contacts" we ask iOS for permission and read your contact list on-device so you can pick people to invite. Nothing is uploaded to our servers — we don't store, match, or transmit your contact data. A copy is cached on your device so the list re-opens quickly; you can clear it by clearing app data.
• Photos: only the image you explicitly pick when changing your avatar. The picker shows you the image first; only that one image is uploaded to our avatar storage.
• Location: if you tap "use my location" when adding a savings account, we use your device location once, on-device, to detect your country and show the right banks. Your coordinates are not stored or uploaded.

2.4 Data we do NOT collect

• Your bank, account numbers, transactions, or balances. Potshare has no connection to any financial institution.
• Background location, your microphone, or your camera roll at large.

3. Where data is stored

• Local data stays on your device.
• Synced data (signed-in users) is stored in Supabase, hosted in the EU (eu-central-1). Encrypted in transit (TLS) and at rest.
• Avatar images are stored in Supabase Storage with public read access — anyone with the URL can view your avatar, the same as a profile picture on any social app.
• Analytics events are sent to PostHog (EU region).
• Purchase entitlement is processed by RevenueCat and the App Store.
• Bank logos shown in the accounts feature are fetched from third-party logo services (Brandfetch / logo.dev) by the bank's public web domain. This does not include any of your personal or financial data.

4. Legal basis (UK GDPR / EU GDPR)

• Account, goal sync, friends graph & together pots: performance of a contract (delivering the service you signed up for).
• Reports & safety: legitimate interests (keeping the service safe and complying with platform safety rules).
• Analytics: consent. It is off by default and can be enabled or disabled in Settings → Privacy.
• Feedback: consent, which you give by submitting it.

5. Sharing

We do not sell your data. We share it only with the following processors, strictly to operate the app:

• Supabase (database, authentication, file storage)
• PostHog (anonymous analytics)
• RevenueCat (purchase entitlement management)
• Apple (sign-in, payments, push delivery)

Each is bound by their own data-processing terms.

When you add someone to a together pot, the data covered in §2.1 ("Together pot data") becomes visible to them inside Potshare. They can also see your display name, @username, and avatar via your public profile.

6. Retention

• Goal data: kept for as long as your account is active. If you sign out without deleting your account, synced data stays on our servers; local data remains on your device until you clear it.
• Together pot data: kept while the goal exists. Leaving a pot removes you from the member list, but payments you logged remain attributed to you in the goal's history (so the rest of the group's totals stay correct).
• Friendships: kept until either side removes the friendship.
• Reports: retained for up to 24 months to support moderation and repeat-abuse detection.
• Invite codes: expire after 7 days, or when revoked, or when used.
• Account: deleted when you confirm deletion in the app. This wipes your profile, owned goals, memberships in together pots, and friend graph entries.
• Analytics events: retained for up to 12 months.
• Feedback: retained for up to 24 months so we can follow up.

7. Your rights

You can:

• Export your data at any time (Settings → Data → Export).
• Delete all local data (Settings → Data → Clear all data).
• Delete your account and synced data (Settings → Account → Delete account, or email us).
• Leave any together pot you're a member of (open the pot → Leave goal).
• Remove any friend (Friends list → swipe → Remove).
• Block or report any user (open their profile), or report a message (press and hold it).
• Revoke an invite code you've shared (open the pot → Add people → Revoke code).
• Opt out of analytics (Settings → Privacy → Analytics).
• Request a copy of any data we hold about you, or correct it, by emailing us.

You can also lodge a complaint with the UK Information Commissioner's Office (ICO) or your local data-protection authority.

8. Children

Potshare is not directed at children under 13 (or 16 in the EU/UK). We do not knowingly collect data from children.

9. Changes to this policy

We will update this page when the policy changes. Significant changes will be highlighted in-app.

10. Contact

Questions, requests, or complaints: support@potshare.co.uk.