Privacy policy

Who we are

"OH, a potato!" is provided by The ZERO-WASTE COMPANY SRL, CIF/registration code RO47967009, registered under J26/587/2023, Bobalna Str. 13, Targu Mures, 540006, Romania. We are the controller of personal data processed through the app, website, waitlist, and support service.

This policy was last updated on 3 August 2026.

Information we collect

Depending on the features you use, we may process the information you provide or create in the app, including recipes, ingredients, shopping lists, meal plans, household data, dietary and cuisine preferences, food-waste activity, prompts, AI conversations, recipe links, documents, photos, scans, audio, and transcripts.

We may also process device and app information such as your device model, operating system, app version, language, region, IP address, timestamps, error information, and security information. If you grant permission, the app may use your camera, photo library, microphone, speech recognition, location, or notifications for the requested feature.

If you use the Android waitlist, we process the email address you voluntarily enter and submit. No email address is collected from visitors who do not submit the form.

How we use information

We use personal data to provide and improve the app, sync household data, import and organize recipes, scan food and receipts, provide meal-planning and storage suggestions, calculate food-waste and impact estimates, process subscriptions, respond to support requests, operate the waitlist, secure the service, diagnose errors, and comply with legal obligations.

AI outputs are suggestions and may be incomplete or wrong. OH, a potato! does not make decisions about your legal rights, employment, credit, insurance, housing, education, or access to essential services. We do not sell personal data or use it to build advertising profiles.

AI and other service providers

AI features are processed through our hosted service only when you request them. We currently use Google Gemini as our primary AI provider, OpenAI as a fallback, and Mistral for scanning and OCR. We may change models or providers as the service develops. Providers receive only the information needed for the feature you requested and process it under their applicable terms and data-protection commitments.

We use Cloudflare to host and operate the website, API, waitlist, and temporary processing jobs. The Android waitlist email is stored in a dedicated Cloudflare D1 database. We use Apple iCloud/CloudKit for optional app synchronization and household sharing, and Apple processes App Store subscriptions and payments. We use PostHog for optional product analytics and error monitoring in the app and website. Website analytics loads only after you choose Accept in the consent banner. You can change that choice through the analytics settings link in the footer. The iOS app uses PostHog's EU endpoint.

We do not use the Gemini Interactions API. We configure our paid AI accounts not to opt into provider training or model improvement where those controls are available. Providers may still process data for service delivery, security, and abuse prevention under their own policies.

Provider information: Google, OpenAI, Mistral, Cloudflare, PostHog, and Apple.

Analytics

PostHog may receive a pseudonymous identifier, feature inputs and interaction details such as search terms, ingredient or item names, recipe-import URLs, invitation codes, interaction outcomes, app version, device information, subscription status, and error information. We use these values to understand whether product features work and to diagnose failures. We do not intentionally send full recipe libraries, photos, scans, or AI conversations as analytics events. We do not use this analytics data for advertising, cross-app tracking, or AI-model training. You can disable product analytics in iOS Settings. If you submit the Android waitlist, the submitted email is processed separately by the Cloudflare waitlist service and is not sent to PostHog.

iCloud and App Store

If you enable iCloud, Apple stores and syncs app data using your Apple account. Apple separately processes App Store purchases and subscription transactions. We receive the subscription status needed to provide paid features; we do not receive your full payment card details.

Legal basis and international transfers

We process data needed to provide features you request, including syncing, importing, scanning, subscriptions, and AI-assisted features, on the basis that it is necessary to provide the service or take steps at your request. We use limited iOS product analytics under our legitimate interest in operating, diagnosing, measuring, and improving the app. This may include the feature inputs and interaction details described above, and you can disable it in iOS Settings. Website analytics is based on your consent through the website banner. We may process data to protect the service and comply with legal obligations where applicable.

Some providers operate in the European Economic Area, the United States, or other countries. Where required, we use applicable transfer safeguards such as an adequacy decision or Standard Contractual Clauses. We do not promise that all processing remains within the EEA.

Retention and security

We keep personal data only for as long as needed to provide the relevant feature, operate and secure the service, respond to requests, resolve disputes, and meet legal or accounting obligations. When it is no longer needed, we delete it, anonymize it, or securely isolate it where immediate deletion is not possible because of backups, security, or legal requirements. We keep an Android waitlist email while the waitlist is active and delete it when it is no longer needed. Product analytics events in our current PostHog project are retained for up to 12 months. Website session recordings, where enabled after consent, are retained for 30 days. Other provider retention is also governed by the provider policies linked above.

We use measures intended to protect data, including encrypted connections, access controls, server-side credentials, and limited-purpose analytics. No internet service can be guaranteed to be completely secure.

Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, or portability of your personal data. You may object to processing based on legitimate interests and withdraw consent where applicable. You can also manage device permissions and iCloud synchronization in Apple settings.

To exercise your rights, contact office@ohapotato.app. We may need to verify your identity. You may also complain to Romania's National Supervisory Authority for Personal Data Processing (ANSPDCP): dataprotection.ro.

Changes and contact

We may update this policy when the app, providers, or legal requirements change. The current version will always be published on this page with its effective date.

Privacy questions and requests: office@ohapotato.app.
Product support: support@ohapotato.app.

The ZERO-WASTE COMPANY SRL
Bobalna Str. 13
Targu Mures, 540006
Romania
CIF: RO47967009 · Reg. Com. J26/587/2023