Potom Privacy Policy

Last updated: August 30, 2026

Controller: Viktor Obholz, trading as ADON Solutions
Am Hasengründlein 13
91413 Neustadt an der Aisch, Germany

Contact: privacy@potom.info

Data we process

You choose whether to send links, text, images, and documents to the application. Links, text and materials explicitly saved to your memory are processed on the server for structuring, search and artificial-intelligence features. Anime screenshots and selected video frames may be sent to trace.moe solely to match them against its anime scene index. Files in the protected documents area are processed locally on your device.

For voice input, the application may use the microphone. Location-based reminders may use precise and background location only after you grant permission. Notifications use the Android system permission. If you choose Continue with Google, Google provides Potom with your verified email address and a stable account identifier so we can create or restore your Potom account, saved data, and Plus access.

Processing providers

We use IONOS SE for server hosting and transactional email, Hetzner Online GmbH for object storage, OpenAI Ireland Ltd. for requested artificial-intelligence processing and synopsis translation, trace.moe for matching requested anime screenshots against its scene index, AniList for anime titles, synopses and cover artwork, and Google Ireland Ltd. for Google sign-in, Google Play distribution, billing verification, and install-referrer reporting. Each provider receives only the data needed for its role. Data is protected in transit with HTTPS.

Plans and Potom Plus

Potom Plus is available as an automatically renewing subscription through Google Play. The Free plan uses monthly limits for AI analyses and questions; the server stores only the usage counters required to enforce those limits. An administrator may also grant temporary Plus Promo access with a specified expiration date. Promo access is not a purchase and does not renew automatically.

Each purchase is initiated by the user through Google Play, which shows the price, billing period, and renewal terms before confirmation. Potom does not receive or store payment-card details. To verify, restore, renew, and cancel purchased access, the server processes the product identifier, protected purchase token, subscription status, and expiration date. Subscriptions can be managed or cancelled in Google Play.

Potom Plus waitlist

If you voluntarily provide an email address, we send a message to confirm it. After confirmation, we store the email address, the two-letter language code for service messages, the signup and confirmation dates, the consent version, and cryptographic hashes of temporary service tokens. The data is used only for one notification when Plus purchases become available; it is not an order, subscription, or consent to future charges.

The email address is not sent to product analytics. You can withdraw consent and remove the waitlist record through the link in the email or by contacting privacy@potom.info.

Diagnostics

To investigate and fix errors, technical analysis traces may be stored temporarily for up to 14 days. They are used only for diagnostics and service-stability improvements.

Purposes and legal bases

We process data needed to provide features you request and to operate your account under the service contract. Security, abuse prevention, aggregate product measurement, and service improvement rely on our legitimate interests. Optional permissions and the Plus waitlist rely on your consent, which you may withdraw.

Product and acquisition analytics

The Android app sends a random pseudonymous installation identifier, app version, locale, and privacy-minimised product events. The website stores a random pseudonymous session identifier, first-touch campaign labels, landing path, and timestamps in sessionStorage for the current browser tab. A session expires after 30 minutes of inactivity and the browser clears this storage when the tab is closed. The server records page paths, language, campaign labels, and Google Play clicks. The website does not use analytics cookies or localStorage, does not fingerprint the browser, and does not send page content. The current website access-log format excludes IP addresses, referrers, user agents, and query strings. Older logs created before August 30, 2026 may contain IP addresses and are normally deleted within 15 days by daily log rotation. Google Play Install Referrer may report campaign labels and the installed app version. These signals are not Google Play installation totals.

Your rights

Depending on applicable law, you may request access, correction, deletion, restriction, portability, or objection, and may withdraw consent at any time. Contact privacy@potom.info. You may also lodge a complaint with your competent data-protection authority.

International transfers

Some service providers may process data outside your country. Where required, transfers use an applicable legal mechanism such as an adequacy decision or standard contractual clauses.

Retention and deletion

Saved materials are stored until you delete them. A signed-in user can delete the account and associated server data from the Potom Account section or at potom.info/delete-account. Deletion is confirmed with a separate one-time code sent by email. The application then also clears its local database, files, protected documents, settings, and tokens. Questions about data can be sent to privacy@potom.info.

Changes to this policy

We update this page when features, processing practices, or legal requirements change.

Potom SMM: social accounts and public discussions

Added 27 September 2026. Potom SMM is our internal tool for managing official Potom social accounts. The controller and privacy contact are the same as stated in this policy.

We use authorized account identifiers and access tokens to publish approved content and retrieve publication statistics, public comments and replies. We also search public Threads posts about relevant topics. Retrieved discussion data includes post identifiers, public text, timestamps, links and available replies. We use it to identify questions where the Potom team can offer a useful, openly identified response. This tool does not read private messages.

Selected public conversation text and available reply context are sent to the OpenAI API to assess relevance and prepare a draft. Account access tokens are not included in those prompts. Drafts require human review; this discussion module does not automatically send replies. Postiz and the private Potom administration service store operational data on our hosting infrastructure.

The current discussion snapshot is replaced during collection. Cached AI assessments expire after seven days when collection runs. Edited drafts and manual review marks are stored in the administrator browser until cleared. Publication records, connection credentials and aggregate statistics are maintained separately for operating the connected accounts. These different stores do not all have a seven-day deletion period.

To request access, correction, objection or deletion of social data processed by Potom SMM, email privacy@potom.info with the subject Potom SMM data request and the relevant public profile or post links. Do not send passwords or access tokens. We may request proportionate proof that the request concerns you. We review the request and remove applicable copies under our control; deleting a Potom copy does not delete a post from its original social network. Connected account owners can also revoke Potom SMM in their platform settings. Android account deletion is a separate process described below.