Policy Overview
Potato processes the data necessary for the purpose of providing instant messaging, cross-device synchronization, and account security features. Different chat types use different storage and encryption methods. You can manage privacy permissions, device login and data deletion in the client.
- Cloud chat for multi-device access and message synchronization.
- Secret chats are end-to-end encrypted and tied to your device.
- Contact synchronization requires your permission.
- The recovery email is used for security verification and account recovery.
Data sharing
The original site policy states that user data will not be provided to marketers or advertisers. The infrastructure, legal obligations or security necessary to provide the Services shall be fully specified in the current official policy.
Least necessary principle
It is recommended to only open the address book, photo album, microphone, camera and location permissions required for complete use to the application, and review it regularly in the system settings.
Cloud chat and data storage
Messages, photos, videos and documents in cloud chat will be stored on the server for access, synchronization and search from different devices. The original site explains that this data is stored in encrypted form and uses separate key management measures.
Cross-device synchronization
Cloud sessions can usually be restored on a new device after logging into the same account. Device cache and actively downloaded files may occupy local storage and can be cleared in the client's storage settings.
Secret Chat
Secret chats use end-to-end encryption, with the decryption key held only by the devices on both sides of the conversation. Secret chats are not synced as normal cloud chats and are therefore only accessible on the device that originated or received the conversation.
Media in secret chats
Photos, videos and files are encrypted with a separate key before uploading, and the necessary information is securely communicated via secret chat. The server cannot read these data as ordinary file contents and will clean them according to system policies.
Self-destruct message
After the timer is enabled, the message will start counting down when the reading conditions are met, and the devices on both sides will delete it after it ends. The specific trigger conditions and effects are subject to the current version of the client.
Contacts and recovery email
Contact
Potato uses phone numbers to identify accounts. Permission is asked before contact synchronization is turned on, and usually only the phone numbers and names required to discover contacts are processed, used to display contacts that have joined Potato.
E-mail address
When email registration, two-step verification, or password recovery is enabled, the email address can be used to receive verification codes, important security notifications, and account recovery. Please protect the mailbox itself and enable additional security measures.
Delete Data
Message deletion
After you delete a message from your own history, a copy may still remain on the other party's device or session; only if mutual deletion is supported and selected, the records of both parties will be cleared according to client rules.
Account self-destruction and account deletion
Accounts that have not logged in for a long time can be automatically deleted according to the set inactivity period. You can also actively delete your account in Accounts and Security; relevant cloud messages, media and contacts will be processed according to the confirmation prompt.
Confirm before operation
Deleted accounts and some data cannot be recovered. Before executing, please read the client prompts and confirm that the data that needs to be retained has been exported or saved separately.
Privacy controls available to you
- Set the visibility of phone numbers, group invitations and online status.
- Enable password, 2-step verification, or device biometric protection.
- View active devices and exit sessions you don't recognize or no longer use.
- Turn off unnecessary address book, photo album, microphone, camera and location permissions.
- Use secret chats and message self-destruction for sensitive content.
- When you find an abnormality in your account, immediately modify your credentials and contact support.
Contact and problem handling
If you need to inquire about your account, privacy settings or data deletion, please check firstFrequently asked questions. If you still need help, you can send an email tosupport@potato.im, and provide the device system, client version and problem description; please do not send passwords or verification codes via regular mail.