Privacy
POTEs! is a private app, made for a group of friends. This page describes exactly what it does with your data — no reassuring formulas, and no promise it couldn’t keep.
This document faithfully describes the technical behaviour of the app, verified in its code. The legal notices themselves — data controller, contact address, legal basis, applicable law, supervisory authority — must be completed and reviewed before publication on the App Store or Google Play.
What POTEs! doesn’t do
No advertising. No trackers. No third-party analytics, usage statistics or crash reporting is built into the app — you can check its dependencies. Your data is never sold, shared, or used to train anything.
What is stored
What you create: your first name, your groups, your plans, your messages, your photos, your shared expenses, your tickets and documents, and the places you mark. That data lives on your phone first, then syncs with the server so you find it on your other devices and share it with the people you chose. The server enforces access rules on every record: you only read what concerns you, and nobody else reads what is yours.
What is not end-to-end encrypted
Your messages and photos are not. They travel encrypted and are stored on a server POTEs! can technically access. Claiming otherwise would be false, and end-to-end encryption is a property you demonstrate — not a sentence you write.
Your location
POTEs! asks for your location only when you do something that needs it: opening a map, marking a place, sharing your position during a night out. Never on launch, never in the background, never continuous tracking. Sharing always has a duration you choose, and is only visible to the people on that plan.
Your photos
Only the photos you explicitly select ever leave your phone. POTEs! never reaches into your photo library beyond what you choose. Files are kept in a private space, reachable only by the people on the plan.
Notifications
If you allow them, your phone receives a notification identifier that POTEs! links to your account. It can only be used to reach you, on that device, and nobody but you can read it. It is removed as soon as you sign out.
Maps and places
Place searches and route calculations go through Google’s mapping services, called from our server — never from your phone, which holds no key. The relevant coordinates are sent to them to be resolved, as in any maps application.
Where the data lives
On Supabase infrastructure, which hosts the database, authentication and files. The site you are reading is hosted by Infomaniak in Switzerland, and receives none of your personal data.
Invitations
An invitation link contains a secret. It expires, it can be revoked, and the server keeps only a fingerprint of it — never the link itself. The invitation pages on this site are not indexed by search engines.
Deleting your data
The “Delete my account” page describes what is erased and how to ask for it.