Potom Privacy Policy

Last updated: August 30, 2026

Data we process

You choose whether to send links, text, images, and documents to the application. Links, text, and materials explicitly saved to your memory are processed on the server for structuring, search, and artificial-intelligence features. Files in the protected documents area are processed locally on your device.

For voice input, the application may use the microphone. Location-based reminders may use precise and background location only after you grant permission. Notifications use the Android system permission.

Processing providers

We use IONOS SE for server hosting and transactional email, Hetzner Online GmbH for object storage, OpenAI Ireland Ltd. for requested artificial-intelligence processing, and Google Ireland Ltd. for Google Play distribution, billing verification, and install-referrer reporting. Each provider receives only the data needed for its role. Data is protected in transit with HTTPS.

Plans and Potom Plus

Purchases of Plus and automatic charges are currently disabled. The Free plan uses monthly limits for AI analyses and questions; the server stores only the usage counters required to enforce those limits. An administrator may temporarily grant a user free Plus Promo access with a specified expiration date. This access is not a purchase, does not renew automatically, and creates no obligation to pay for Plus.

After paid Plus launches, each purchase will be initiated separately by the user through Google Play with the price, billing period, and renewal terms shown before confirmation. Potom will not receive or store payment-card details. To verify and restore purchased access, the server will process the product identifier, protected purchase token, status, and expiration date.

Potom Plus waitlist

If you voluntarily provide an email address, we send a message to confirm it. After confirmation, we store the email address, the two-letter language code for service messages, the signup and confirmation dates, the consent version, and cryptographic hashes of temporary service tokens. The data is used only for one notification when Plus purchases become available; it is not an order, subscription, or consent to future charges.

The email address is not sent to product analytics. You can withdraw consent and remove the waitlist record through the link in the email or by contacting privacy@potom.info.

Diagnostics

To investigate and fix errors, technical analysis traces may be stored temporarily for up to 14 days. They are used only for diagnostics and service-stability improvements.

Purposes and legal bases

We process data needed to provide features you request and to operate your account under the service contract. Security, abuse prevention, aggregate product measurement, and service improvement rely on our legitimate interests. Optional permissions and the Plus waitlist rely on your consent, which you may withdraw.

Product and acquisition analytics

The Android app sends a random pseudonymous installation identifier, app version, locale, and privacy-minimised product events. For each open page, the website creates a random pseudonymous identifier held only in memory and records the page path, language, campaign labels, and Google Play clicks. The website does not use cookies, localStorage, or sessionStorage for analytics and does not send page content. The current website access-log format excludes IP addresses, referrers, user agents, and query strings. Older logs created before August 30, 2026 may contain IP addresses and are normally deleted within 15 days by daily log rotation. Google Play Install Referrer may report campaign labels and the installed app version. These signals are not Google Play installation totals.

Your rights

Depending on applicable law, you may request access, correction, deletion, restriction, portability, or objection, and may withdraw consent at any time. Contact privacy@potom.info. You may also lodge a complaint with your competent data-protection authority.

International transfers

Some service providers may process data outside your country. Where required, transfers use an applicable legal mechanism such as an adequacy decision or standard contractual clauses.

Retention and deletion

Saved materials are stored until you delete them. A signed-in user can delete the account and associated server data from the Potom Account section or at potom.info/delete-account. Deletion is confirmed with a separate one-time code sent by email. The application then also clears its local database, files, protected documents, settings, and tokens. Questions about data can be sent to privacy@potom.info.

Changes to this policy

We update this page when features, processing practices, or legal requirements change.