Ourpot Privacy Policy

Introduction

This Privacy Policy explains how Ourpot, a shared-budget app for couples and groups developed by Idion, collects, uses, and protects your information. It applies specifically to the Ourpot app on iOS and Android, not to other Idion products.

Ourpot is built around shared pots: what you add to a pot is meant to be seen by the other people in it. This policy says exactly what that covers. By using Ourpot, you agree to the practices described in this policy.

Information we collect

Account: an anonymous account id created when you first open the app, and, only if you choose to save your account, your email address. Your password is held only as a secure hash by our authentication provider.

Profile: the display name and colour you choose and, optionally, a profile picture.

Pot content: the name, currency, split settings and budget of each pot you create or join; the expenses, income and settlements you record (amount, category, who paid, an optional payment-method label such as "Card" or "Cash", date and an optional note); category limits; recurring rules; purchase requests and heads-ups with their votes, comments and emoji reactions; and an activity log of who added, edited, deleted or decided what.

Pot Coach recaps: the AI-written summaries you or another member of the pot generate.

Notifications: if you allow notifications, a push token for your device.

Usage events: which screens you reach and which actions you take, stored in our own database.

Subscription: whether you or your pot has Ourpot Plus, which plan, and when it renews or expires, as reported by our subscription provider.

Shared with your pot: your profile and everything you add to a pot is visible to every current member of that pot. That is how Ourpot works, and it is why people join a pot only with its invite code.

This is the complete list of what Ourpot collects today. If that changes as the app grows, this policy will be updated first, and the "last updated" date above will reflect it.

What we do not collect

To be specific rather than leave this to inference: Ourpot does not connect to your bank and never asks for bank credentials, card numbers or account numbers. It does not move money. It does not collect health or medical records, your government-issued identification, your contacts, precise or approximate location, advertising identifiers, or biometric data. We do not collect or store your payment card details for subscriptions either; the app store handles payment.

If any of this changes in a future version of the app, we will update this policy before that change ships, not after.

Accounts and identifiers

Ourpot can be used without signing up. When you start, we create an anonymous account id so your pots stay in sync between your phone and the phones of the people you share them with.

If you later save your account, we collect your email address. Saving upgrades your existing anonymous account rather than replacing it, so your pots, history and any subscription stay with you. Your email address is used to sign you in, to reset your password, and to contact you about the service. It is not shown to the other members of your pots and it is not used for marketing unless you separately ask us to.

Photo library

Ourpot asks for access to your photo library only when you choose to add a profile picture, so the people in your pots can recognise you.

Only the single image you pick is read and uploaded. Ourpot does not scan, index or access the rest of your library, and never in the background. The picture is stored with our hosting provider and shown to the members of your pots. If you decline, everything else in Ourpot works as normal and your initial is shown instead.

Notifications

Ourpot uses two kinds of notifications. Push notifications tell you when something in a pot needs you or concerns you, such as a purchase request waiting for your vote, a decision on your request, or a heads-up from another member. If you allow them, we store a push token issued by Apple or Google for your device so we can deliver them. The token identifies the device, not you. The notification text, which can include a pot name, a member's name, a request title and an amount, passes through Expo's push service and Apple's or Google's delivery service to reach your phone.

Daily reminders are local notifications, scheduled by the app on your own device. Nothing about a reminder leaves your phone.

We ask for notification permission in context, when you invite someone, join a pot or send a request, never on first launch. We do not use notifications for marketing or promotional messages. You can turn them off in Settings or in your device settings at any time, and signing out removes your device's token.

How we use information

We use the information described above to run Ourpot: to keep each pot in sync for its members, to calculate budgets, balances and who owes whom, to deliver notifications, to generate Pot Coach recaps when asked, to manage your subscription, to answer support requests, and to find and fix problems.

We do not use your information for purposes beyond operating and improving Ourpot, and we do not use it to build advertising profiles.

Usage analytics

We record which screens you reach and which actions you take, such as creating a pot or sending a request, so we can see where the app is confusing and fix it. These events are stored in our own database, linked to your account id. We do not use any third-party analytics service and we do not use any advertising service, so this information is not shared with anyone and is not combined with data from other apps.

AI processing

When a member of a pot asks for a Pot Coach recap, Ourpot sends a summary of that pot's figures for the period to Google's Gemini model: totals by category, the total paid by each member under their display name, budgets and limits, income, and the previous period's total. This happens on our servers, not on your device, and our access key is never included in the app.

Transaction notes, comments, email addresses and account ids are never sent. The summary is sent for the sole purpose of writing the recap and is not used to train the model provider's systems.

AI-generated recaps

Pot Coach turns the figures above into a short recap of the period and three ideas for the next one. The recap is stored in the pot and is visible to every member of it. See our AI Policy for how this works and what its limits are.

Automated decision-making

Pot Coach recaps are designed to inform the decisions you make together. They do not make decisions about you that produce legal effects or similarly significantly affect you, and they are not used for any form of automated profiling beyond producing the recap described in this policy.

Subscriptions and payments

If you subscribe to Ourpot Plus, we receive your subscription status through our subscription management provider, RevenueCat. Payment itself is handled entirely by the Apple App Store or Google Play. We never see or store your payment card details.

Ourpot Plus applies to a whole pot: while a subscriber is a member, every member of that pot gets Plus features, so the other members can see that the pot has Plus.

Service providers

We rely on a limited number of providers to operate Ourpot: Supabase (sign-in, database, file storage and server functions), RevenueCat (subscription status), Google (the Gemini model behind Pot Coach), Expo (relaying push notifications), and Apple and Google (app distribution, payments and notification delivery). They process information on our behalf, under confidentiality and data protection commitments, and only to the extent needed to provide their service to us.

We do not sell your information to third parties, and we do not share it with third parties for their own independent marketing purposes.

Security

We apply reasonable technical and organisational measures to protect your information from unauthorised access, loss, or misuse, including encrypting data in transit and database access rules that let each record be read only by your own account and by the members of the pot it belongs to. No system is perfectly secure, but security is a priority in how we build Ourpot, not an afterthought.

If we become aware of a security incident that affects your information, we will notify you and take appropriate action as required by applicable law.

Data retention

We keep your information for as long as your account is active and as needed to provide Ourpot's features. Because pots are shared, the history of a pot stays available to its remaining members after you leave it or delete your account; entries you added stay in that pot's history without your name, and you are shown as a former member.

When you delete your account, we delete or anonymise your information as described on our Data Deletion page, except where retention is required by law or for the limited purposes described there.

International transfers

Your information may be processed in countries other than your own, including the United States, where some of our providers operate. Where this happens, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses, so that it receives a level of protection consistent with applicable data protection law.

Your rights

Depending on where you live, you may have rights to access the information we hold about you, correct it, delete it, export it in a portable format, restrict or object to certain processing, or withdraw consent where processing is based on consent. You can correct most of it yourself in the app. A copy of your data is available free of charge by writing to [email protected]; the in-app spreadsheet export is a Plus convenience, not a condition of this right.

If you are located in the European Economic Area, the United Kingdom, California, or another jurisdiction with its own data protection law, you may have additional or more specific rights under that law. These are not reduced by anything in this policy. You can also complain to your local data protection authority; in Spain, the Agencia Española de Protección de Datos.

See our Data Deletion page to request deletion, or contact us using the details on our Contact page for any other request. We will respond within the timeframe required by applicable law, and in any case within a reasonable time.

Children's privacy

Ourpot is not directed at children, and we do not knowingly collect information from children under the age required by applicable law to consent to data processing on their own behalf. If you believe a child has provided us with information, please contact us so we can remove it.

Changes to this policy

We may update this policy as Ourpot evolves. We will update the "last updated" date above when we do, and for material changes we will make a reasonable effort to notify you.

Contact

Questions about this policy can be sent to [email protected]. Ourpot is published by Idion, Roc Boronat, 138, 08018, Barcelona, Spain, which is responsible for your information. See our Contact page for other ways to reach us.