Potato protects your data through security and encryption, and values your control over your personal information and chat content.
Core principles:Potato will not sell your personal data to third parties for advertising or marketing purposes. We only process information to the extent necessary to provide chat, sync, security and account services.
Data sharing
We will not sell, rent or use your chat data or personal information for unrelated third-party marketing. The processing of data required to provide the Services is solely for the purpose of running Potato's core functionality, ensuring security, processing support requests and complying with applicable legal obligations.
If data processing must be assisted by infrastructure or technical services, we will limit the scope of its processing and require it to adopt security measures appropriate to the service.
Cloud chat and data storage
Potato is a cloud communication service. Messages, photos, videos, and documents in regular cloud chats are stored encrypted so you can access chat history, sync media, and search older messages on different devices using the same account.
Relevant data and keys are protected through separation and encryption to reduce the risk of complete user data being compromised if a single location, individual worker or physical device is accessed. You should also protect your login verification code, password and logged-in device.
secret chat
Secret chats are end-to-end encrypted. Messages are encrypted using a key known only to the devices participating in the conversation; their contents cannot be read by others, including Potato, without direct access to the participating devices.
Secret chats are not stored as normal cloud chats, nor are they synced to other new devices. You can only view these messages on the device where you created or participated in the secret chat. Uninstalling the app, exiting the device, or damaging the device may render relevant records irrecoverable.
Photos, videos and files in secret chats
When sending media or files in a secret chat, each item is encrypted with an independent key before uploading. The file location and corresponding key are then also sent to the recipient via the encrypted channel of the secret chat.
The server may temporarily save encrypted file data whose meaning cannot be directly identified for the recipient to download, but the server cannot read the file content or determine the chat to which it belongs. Such temporarily encrypted data will be cleaned periodically based on storage and service needs.
Contact person
Potato uses phone numbers to help identify accounts and connect contacts. The app will synchronize contact information provided in your address book only after you authorize it.
In order to notify you when a contact joins Potato and to display the correct name in your contact list, the Service may save necessary phone numbers, first names, and last names. Except for the information required to implement the contact function, we will not actively read or save other irrelevant information in the address book. You can stop contact syncing through device permissions or app settings.
your email address
When you enable two-step verification, you have the option to set up a recovery email. When you forget your two-step verification password, this email address is used to receive the recovery code or complete account recovery.
The recovery email address will not be used to send irrelevant marketing messages. Please make sure your email address is valid and secure, and avoid sharing recovery codes with others.
Delete messages and data
You can delete messages and media from your chat history. When only deleting from your own history, the other party may still retain a copy they received; when applicable features allow mutual deletion and both parties' records are removed, the related content will no longer remain in the chat history.
The recipient may screenshot, forward or save the content before deleting it, so please confirm the recipient and usage scenario before sending sensitive information.
self-destruct message
Secret chat supports setting self-destruct timer. After the message is read and the timing is triggered, the participating devices will be notified to delete the corresponding text, photo, video or file at the end of the set time.
The self-destruct function can reduce the long-term retention of content, but it does not prevent the recipient from copying the content by taking screenshots, taking photos, or other means before the message disappears.
Account self-destructs
If you stop using Potato for an extended period of time and do not log in for at least six months, the system may delete your account, as well as messages, media, contacts, and other account data saved in the Potato cloud.
You can view or adjust the self-destruct period for inactive accounts in the client settings. Account deletion is usually irreversible; if you need to retain important content, please save the necessary information before deleting it.
Privacy & Security Advice
Please only download clients from official websites or trusted app stores, and do not provide verification codes, 2-step verification passwords, or recovery codes to anyone. It is recommended to check active sessions regularly and log out of devices you no longer use or recognize in a timely manner.
If you have questions about privacy, account data or security handling, please contact support@potato.im, and avoid sending passwords, verification codes, or complete private chats in email.
