Privacy policy

1. Information we collect

Customers browsing without an account. You can search, open kitchen profiles, read reviews and contact a kitchen without giving us any personal details. In that case we hold no name, email address or phone number for you.

Customers with an optional account. If you create an account so your favorites sync across devices, we store the identifier you signed up with and the list of kitchens and dishes you have saved.

Kitchen account holders. We store the information needed to run a public listing: kitchen name, food entrepreneur’s name, description, photos, menu and prices, delivery area and fees, the contact number you publish, and your login details.

Everyone. We collect basic technical information described under device information below, the content you submit through the app, and any confirmation that you are at least 18 and have accepted the current version of our terms.

People who use safety features. If you report content or another user, we collect the report, the reason you select, any details you provide, the content and account involved, and relevant account, device or activity information needed to investigate. If you block someone or remove a post from your feed, we store the information needed to apply that choice.

2. How we use information

• To show kitchens, dishes and prices, and to sort them by distance from your area.
• To publish kitchen listings so customers can find them.
• To keep saved favorites available on your account.
• To calculate ratings and rank kitchens in search and discovery.
• To filter, detect and limit objectionable content, fake reviews and abusive activity.
• To investigate reports, enforce our terms and prevent repeat violations.
• To apply your blocks and keep content you remove from reappearing in your feed.
• To record that you confirmed you are at least 18 and accepted our terms.
• To fix problems, keep the service running, and respond when you contact us.

We do not sell personal information.

3. Location information

Location drives almost everything in Potlly, so it is worth being precise about it. You can set your area in two ways: by granting device location permission, or by typing an area or address by hand. Manual entry always works. Location permission is optional and can be declined or revoked without losing access to the service.

Your chosen area is used to sort and filter results by distance. It is stored on your device, and on your account if you have one, so you do not have to set it every visit.

4. Kitchen account information

Kitchen profiles are public by design. The kitchen name, description, photos, menu, prices, delivery area and the contact number you publish are visible to anyone using Potlly, including people who are not signed in. Do not publish a phone number or address you do not want to be public.

Login credentials and any private notes on your account are not shown publicly.

5. Device information

We collect standard technical information such as device or browser type, operating system version, app version, general region, and error diagnostics. This is used to keep the service working and to investigate problems.

A device or session identifier is also used to rate-limit reviews, so that one source cannot flood a kitchen with ratings.

6. Cookies and local storage

Potlly uses cookies and local storage on your device for things the product needs in order to work: keeping you signed in if you have an account, remembering the area you set, and keeping the list of kitchens and dishes you recently viewed.

Recently viewed items are stored on your device and are not tied to an account. Clearing your browser or app storage removes them.

7. Reviews

Reviews are published anonymously. No reviewer name, photo, handle or account is shown with a review, and kitchens cannot see who left one.

Behind the scenes, a review is associated with the device or session that submitted it, purely to prevent duplicate and fraudulent reviews. That association is never displayed and is not used to build a profile of you.

8. Safety, reports and moderation

Potlly uses automated filters and human review to identify and respond to objectionable content and abusive conduct. These processes may examine submitted text, images, listings, reviews, report details, account identifiers, device or session identifiers, and relevant activity on the service. Automated filters can limit or flag content for review, but enforcement decisions may also be made by an authorised reviewer.

When you report content or conduct, we use the report and related information to investigate, contact the people involved when appropriate, remove content, restrict or eject accounts, prevent repeat abuse, and meet legal or safety obligations. We do not publicly identify the person who made a report, but we cannot promise anonymity where disclosure is required by law or is necessary to address an immediate safety risk.

Blocking creates a record between your account and the blocked account so that Potlly can prevent the interactions covered by the block. Removing a post from your feed records that preference so the post can be hidden from your view. These controls do not delete content from another person’s account or from records we must keep for safety or legal reasons.

9. Placing orders

When you place an order, Potlly shares the details the kitchen needs to fulfil it with that kitchen: the dishes you chose, your delivery address, the time you asked for and how you plan to pay. The kitchen uses them to prepare and deliver your order.

Potlly does not process payment. Payment is made directly to the kitchen by e-Transfer or cash. Once an order is placed, its status is visible to you and to the kitchen.

10. Third-party services and disclosure

Running Potlly requires a small number of service providers, for example hosting, storage of uploaded kitchen photos, and error reporting. These providers process data only to provide their service to us.

Information connected with a safety report may be shared with authorised moderators and service providers that help us operate reporting and moderation tools. We may also disclose information where required by law, to respond to lawful requests, or where reasonably necessary to protect a person from serious harm, investigate fraud or abuse, or protect the security of Potlly. We do not sell personal information.

The current list of providers should be published here before launch. We do not claim any certification or compliance programme that Potlly has not actually completed.

11. Data retention

• Kitchen listings and account data are kept while the account is active.
• When a kitchen account is deleted, the public listing is removed and the account data is deleted or irreversibly anonymised. See the delete account page for what that involves.
• Reviews left about a kitchen may remain visible after that kitchen is removed, in anonymised form, because they are not attached to a reviewer identity.
• Safety reports, moderation decisions, blocks and enforcement records are kept only as long as reasonably necessary to investigate the matter, apply your safety choices, prevent repeat abuse, resolve a review or dispute, or meet legal obligations.
• Records showing acceptance of the terms and confirmation of 18+ eligibility may be kept while the account is active and for a reasonable period afterward where needed to demonstrate compliance or resolve a dispute.
• Limited records may also be retained where the law requires it, or to prevent abuse and fraud. When information is no longer needed, it is deleted or irreversibly anonymised.

12. Security

We use reasonable technical and organisational measures to protect the information we hold, including encrypted connections and access controls on administrative tools. No service can promise perfect security, and we will not claim otherwise.

13. Your rights

Depending on where you live, you may have the right to ask for a copy of the personal information we hold about you, to correct it, to delete it, or to object to certain uses.

Kitchen account holders can update most information directly in the app, and can request deletion at any time. To make any other request, email privacy@potlly.com.

14. Age eligibility

Potlly is an 18+ service and is not directed to anyone under 18. We may record whether a person confirmed that they are at least 18. We do not currently ask for government identification, facial images or biometric information for age checks. If our age-assurance method changes, we will update this policy before collecting additional data.

We do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has provided personal information to Potlly, contact us so we can investigate and delete it where appropriate.

15. Changes

If this policy changes, the date at the top of the page is updated. Material changes will be communicated in the app or by email to kitchen account holders.

16. Contact

Potlly is responsible for the personal information described in this policy. Privacy questions, requests or complaints can be submitted through the contact option in the app or sent to privacy@potlly.com.

Reports about inappropriate content or abusive conduct can be submitted through the in-app Report action or sent to support@potlly.com.