PRIVACY

Privacy Policy Last updated: October 9, 2026 Loud Unicorn LLC ("we," "us," "our") built Potluck Coordinator. This policy explains what data Potluck Coordinator collects, why, and how it is handled. 1. What Data We Collect and Why Event Data (stored in Apple CloudKit): - Event names, dates, and join codes (created by hosts and stored in CloudKit's public database so guests can join) - The host name you enter, and the display name each guest enters when they claim a dish or RSVP - Dish lists (dish names, dietary tags, serving counts, notes, and who claimed each dish) - Photo attachments (optional dish photos added by hosts or guests, stored in CloudKit) - RSVP responses (going, maybe, or can't make it, with an optional party size, stored per event in CloudKit) Local Device Data: - App preferences and settings (stored locally via UserDefaults) - Subscription status (whether you have Potluck Pro, verified via Apple StoreKit 2 and RevenueCat) - Your profile (name, dietary preferences, and optional US state), used to pre-fill forms - Sign in with Apple (optional, used for the Community Feed): your Apple user identifier, and the name and email Apple shares if you allow it, stored on your device No Account Required: Potluck Coordinator does not require you to create an account or provide an email address. Hosts and guests are identified by locally generated device identifiers and the names they choose to enter. Sharing events with guests requires being signed in to iCloud on your device. 2. What We Do NOT Collect - We do not collect email addresses or phone numbers on our servers - We do not use analytics SDKs (no Firebase, Amplitude, Mixpanel, or third-party tracking) - We do not use crash reporting services - We do not access your contacts, location, microphone, or camera beyond what you explicitly initiate (photo picker for item photos) - We do not sell or share data with advertisers or data brokers - We do not operate backend servers for core event sync; that goes through Apple CloudKit. We do operate a server for the optional Community Feed photo feature (see section 4a) 3. CloudKit Shared Event Data Event data syncs via Apple CloudKit's public database. This means: - Event data is accessible to anyone with the join code - Data is subject to Apple's own privacy practices and retention policies (apple.com/privacy) - We do not have a separate copy of your event data on our own servers Do not include sensitive personal information (SSNs, financial data, passwords) in event names, item names, or notes. 4. Photos Photo attachments are uploaded to Apple CloudKit only when a user explicitly selects and attaches a photo to an item. Photos are stored in CloudKit and visible to all participants in the event. We do not access your photo library beyond the image you explicitly select via the iOS photo picker. 4a. Community Feed Photos Potluck Coordinator includes a Community Feed that displays dish photos shared by users across the app. When you add a photo to a potluck event, the "Share to Community feed" toggle is on by default. You can turn it off per-photo at upload time, or disable Community Feed sharing entirely in Settings. When a photo is shared to the Community Feed: - The photo, your first name, and any caption you provide are stored on our servers (hosted infrastructure in the United States) and may be displayed publicly within the app to all Potluck Coordinator users. - Community Feed photos are moderated by our team before they appear in the feed. We may remove any photo that violates our content standards. - By submitting a photo to the Community Feed, you grant Loud Unicorn LLC a non-exclusive license to display that photo within the Potluck Coordinator app. - To opt out of future submissions: open Settings and turn off "Share my potluck photos to Community." - To request removal of a previously submitted photo: email maxthemoltbot@gmail.com with a description of the photo and approximately when it was submitted. - Do not submit photos containing people's faces, personally identifying information, or content you do not have the right to share. 5. Third-Party Services - Apple CloudKit: real-time event sync. Apple's privacy policy applies: apple.com/privacy - Apple StoreKit 2 and RevenueCat: in-app purchase processing for the Potluck Pro subscription. Apple handles all payment data. RevenueCat receives anonymized purchase receipts to verify and manage subscription entitlements. RevenueCat's privacy policy: revenuecat.com/privacy - Apple Push Notification service (via CloudKit): when an event you host or joined changes, Apple sends a silent signal that wakes the app; the notification you see (for example, a new claim or RSVP) is written on your device. - Apple UserNotifications: local reminders for your events and the dishes you claimed. We do not integrate any third-party analytics, advertising, or tracking libraries. 6. Children's Data Potluck Coordinator is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. Contact maxthemoltbot@gmail.com if you believe a minor has used the app. 7. Data Retention and Deletion - Local data: deleted when you uninstall the app - CloudKit event data: persists until the host archives or deletes the event within the app, or until Apple's CloudKit retention policies apply - Subscription records: managed by Apple To remove event data: open the event, tap Archive or Delete, then confirm. Events you did not create can only be deleted by the host. 8. Security Local data is protected by iOS sandboxing. CloudKit data is protected by Apple's infrastructure and access controls. Join codes act as access tokens; keep your event join codes private if your event is intended for a limited guest list. 9. Changes to This Policy Material changes will be communicated via in-app notice. Continued use constitutes acceptance. 10. Contact Loud Unicorn LLC maxthemoltbot@gmail.com Arizona, USA ──────────────────────────────────────── GDPR: Your Rights (EU/EEA Users) Last updated: October 9, 2026 1. Data Controller Loud Unicorn LLC is the data controller for personal data processed through Potluck Coordinator. Contact: maxthemoltbot@gmail.com 2. Legal Basis for Processing - Contractual necessity (Art. 6(1)(b)): Event sync via CloudKit is required to provide the core service of real-time potluck coordination. - Consent (Art. 6(1)(a)): Photo uploads and optional features require explicit user action. 3. Your Rights Under GDPR Right of Access (Art. 15): Event and item data you created is visible within the app. Contact maxthemoltbot@gmail.com for any records. Right to Rectification (Art. 16): Edit or update item information directly in the app. Right to Erasure (Art. 17): Delete events and items within the app. Uninstall to remove local data. Right to Restriction (Art. 18): Revoke CloudKit access by uninstalling the app. Right to Data Portability (Art. 20): Contact maxthemoltbot@gmail.com for assistance. Right to Object (Art. 21): Uninstall the app to stop all processing. 4. How to Exercise Your Rights Email: maxthemoltbot@gmail.com. We respond within 30 days. 5. Supervisory Authority You may lodge a complaint with your local EU/EEA data protection authority. 6. International Data Transfers Event data is stored in Apple CloudKit under Apple's GDPR commitments and Standard Contractual Clauses. Community Feed photo data is stored on our servers in the United States. By sharing a photo to the Community Feed, you consent to this transfer. 7. Contact maxthemoltbot@gmail.com | Loud Unicorn LLC | Arizona, USA ──────────────────────────────────────── CCPA/CPRA: Your Rights (California Residents) Last updated: October 9, 2026 1. Categories of Personal Information We Collect - Device identifiers (for StoreKit transaction verification, handled by Apple) - Names you enter (host and guest display names) and event content (dish names, dietary tags, RSVPs) stored in Apple CloudKit - Community Feed photos you choose to share, with your first name and optional US state - App preferences stored locally on your device We do NOT collect: email addresses or phone numbers on our servers, precise location, financial data, biometric data, or sensitive personal information as defined by CPRA. 2. Do We Sell or Share Personal Information? No. We do not sell or share personal information with third parties for advertising. 3. Your CCPA/CPRA Rights Right to Know: All event data is visible in the app. We do not maintain server-side user profiles. Right to Delete: Delete events in the app or uninstall to remove local data. Email maxthemoltbot@gmail.com for any records we hold. Right to Correct: Edit item and event information directly in the app. Right to Opt-Out of Sale/Sharing: We do not sell or share, so no action is required. Right to Non-Discrimination: We will not discriminate against you for exercising CCPA/CPRA rights. 4. Contact maxthemoltbot@gmail.com | Loud Unicorn LLC | Arizona, USA