Privacy Policy

Summary

You can use Potao without an account. The developer does not receive your health-related records — weight, mood, what you ate, or your fasting records.

However, the app may send usage statistics and crash information to Google Firebase (you can turn this off in Settings; details below). While you use the app for free, ads from Google AdMob are shown.

Data handled on your device

• Fasting records, eating plan, mood and goal weight are stored on your device.
• Body weight you record in the app is stored only on this device and is excluded from iCloud and computer backups, so it does not carry over when you change or restore your device. You can delete a record from the body view at any time, and deleting the app removes them all.
• Apple Health (optional): Only if you turn on “Connect to Health” in Settings (off by default) and allow it in Health, weight you record in the app after that is written to Health, and resting energy is read from Health to show one current value. Weight in Health is not read. Everything else works even if you don’t allow it. Deleting a record in the app does not remove what was written to Health. While the setting is off, the app does not read or write Health. You can change the permissions anytime in iOS Settings. These values are never sent off your device.
• Food entries contain only the time and the items you choose (no calories or amounts). They are stored only on this device and are excluded from iCloud and computer backups. They are not synced or saved to iPad, iCloud, Apple Watch or Apple Health, so they do not carry over when you change or restore your device. Photos are used only in your device’s memory to suggest items, and are never saved or sent. Their date and location are not read. The camera is used only when you tap “Take Photo”. You can delete an entry from the day view at any time, and deleting the app removes them all.
• Weekly summary text is generated on your device with Apple Intelligence (an on-device model). No data is sent to an external server to generate it.
• Notifications are scheduled on your device.

iCloud sync (optional, off by default)

Only if you turn on “Sync with iCloud” in Settings, your fasting records, eating plan and goal weight are stored in your iCloud (your private space on Apple’s servers) and synced between your iPhone and iPad. The developer cannot read this data. Mood, body weight, resting energy and food entries are never stored in iCloud.

Turning sync off does not delete records already in iCloud. You can delete them in iOS Settings → your name → iCloud → Manage Storage.

Usage statistics and crash information (Google Firebase)

To improve the app, we use Google Firebase (Analytics and Crashlytics).

• What is sent (statistics): only “what happened” — which screen was opened, how far you got in the first-run guide, notification and display settings turned on or off, that you started a bundled tool (never durations or counts), the flow of trying on, buying and restoring an appearance pack (including the purchase amount), and an identifier created for each installation of the app (not an advertising ID), and ad impressions, load results, clicks and ad revenue.
• What is sent (crashes): information when the app terminates unexpectedly (stack trace, device model, OS version, app state). It does not include the contents of your records.
• What is never sent: weight, goal weight, mood, what you ate, photos, the fact that you started or ended a fast or saved a record, the length or times of your fasts, streaks, or days you kept your plan. The app is built so that these cannot be included in statistics or crash information.
• Switch: you can turn this off anytime with “Share usage statistics and crash reports” in Settings. Turning it off stops collection and deletes analytics data on your device (crash reporting switches from the next launch). It starts off in the European Economic Area (EEA), the United Kingdom, Switzerland, and wherever your region can’t be determined. In other regions it starts on.

Google processes this information. See Privacy and Security in Firebase and Google’s Privacy Policy for details.

Ads (Google AdMob)

While you don’t own an appearance pack, a Google AdMob banner ad is shown at the end of Today, History and Settings. Buying any pack removes the ads.

• Ads are non-personalized. The app does not ask for App Tracking Transparency permission.
• The app does not pass your records or keywords — such as weight, mood, what you ate or fasting records — to ad requests.
• To serve ads, prevent fraud and measure performance, Google may collect IP addresses, device identifiers, ad interactions and diagnostics. See Google’s disclosure.
• In the European Economic Area (EEA), the United Kingdom and Switzerland, we use Google’s consent message. It is not shown until you first open a screen that shows ads (History or Settings). You can change your choice anytime with “Ad privacy settings” in Settings.
• Report an inappropriate ad with “Report an inappropriate ad” in Settings.

Purchases

Purchases of appearance packs (themes, characters and icons) are processed by Apple’s App Store. The developer does not receive your name or payment information.

Deletion

Deleting the app deletes its data on your device. Weight written to Health can be deleted in the Health app, and iCloud records as described above.

Children

This app is not directed to children.

Changes to this policy

When the app changes, we update this page and its last-updated date.

Contact

See the support page.