Whole Pot privacy policy
The short version. Whole Pot has no accounts and no ads. We do not track you. What you log lives on your phone. The only things that leave your phone are listed below.
What stays on your phone
Your meals, recipes, weight log, targets, pregnancy information, and photos you take for logging stay on your phone. Photos and label scans are read on your phone and are not kept. When you use your voice, it is turned into words on your phone. Recipe text is read by Apple's on-device model. Pregnancy information is kept in its own file, is not backed up, and is deleted when you choose "Delete my body data".
What leaves your phone
- Barcode scans. When you scan a barcode, the barcode number is sent to Open Food Facts (world.openfoodfacts.org) to find the product. Nothing else about you is sent. Open Food Facts, like any website, can see your IP address.
- Photo model download. If you choose to turn on photo logging, the app may download its model files from Hugging Face (huggingface.co) on Wi-Fi. This is a plain file download. Hugging Face, like any website, can see your IP address.
- Friends challenges. If you start or join a challenge, the app sends your display name, emoji, points, streak, daily results, and (only if you switch them on) pounds lost and what you ate to Apple CloudKit, in our app's public database. All of that is encrypted on your phone with a key made from the challenge code before it is sent. We store the encrypted data, a lookup code made from the challenge code, and the time of the last update. We cannot read your name, points, weight, or food. Your challenge records are tied to your iCloud account: Apple's CloudKit records which iCloud user saved each record. They are sealed with the join code, so only people who have the code can read what you share in that challenge. Your weight, height, age, and pregnancy information are never sent. When you leave a challenge, your record is deleted.
- Purchases. Purchases go through Apple. We do not see your payment details.
- Links. Terms, privacy, source links in pregnancy mode, and the Open Food Facts credit open in your browser.
What we do not do
We do not run analytics or crash tools, show ads, sell data, or track you across other apps or sites. We do not ask for your email or phone number.
Your choices
Delete your body data in Journey. Leave a challenge to delete your record. Delete the app to remove everything stored on your phone.
Children
The app is not directed at children under 13.
Changes
If this changes, we will update this page and the date above.
Contact
Simkins & Elgazar LLC
hello@simkinselgazar.com