PRIVACY

Privacy Policy Last updated: April 23, 2026 Loud Unicorn LLC ("we," "us," "our") built Potluck Coordinator. This policy explains what data Potluck Coordinator collects, why, and how it is handled. 1. What Data We Collect and Why Event Data (stored in Apple CloudKit): - Event names, dates, and join codes — created by hosts and stored in CloudKit's public database so guests can join - Item lists — names, dietary flags, serving size, guest count, notes, and claimed-by information entered by hosts and guests - Photo attachments — optional photos attached to items by Premium hosts or guests, stored in CloudKit - RSVP responses — attending/maybe/can't make it, stored per event in CloudKit - Co-host codes — 8-character codes generated for co-host access, stored in CloudKit Local Device Data: - App preferences and settings — stored locally via UserDefaults - Subscription status — whether the host has purchased Premium, verified locally via Apple StoreKit 2 - Widget data — upcoming event name, date, and unclaimed count, shared to the WidgetKit extension via App Group UserDefaults No Account Required: Potluck Coordinator does not require you to create an account or provide an email address. Hosts and guests are identified by locally generated device identifiers within the app, not by personal accounts. 2. What We Do NOT Collect - We do not collect names, email addresses, or phone numbers - We do not use analytics SDKs (no Firebase, Amplitude, Mixpanel, or third-party tracking) - We do not use crash reporting services - We do not access your contacts, location, microphone, or camera beyond what you explicitly initiate (photo picker for item photos) - We do not sell or share data with advertisers or data brokers - We do not operate our own backend servers — all sync goes through Apple CloudKit 3. CloudKit — Shared Event Data Event data syncs via Apple CloudKit's public database. This means: - Event data is accessible to anyone with the join code - Data is subject to Apple's own privacy practices and retention policies (apple.com/privacy) - We do not have a separate copy of your event data on our own servers Do not include sensitive personal information (SSNs, financial data, passwords) in event names, item names, or notes. 4. Photos Photo attachments are uploaded to Apple CloudKit only when a user explicitly selects and attaches a photo to an item. Photos are stored in CloudKit and visible to all participants in the event. We do not access your photo library beyond the image you explicitly select via the iOS photo picker. 5. Third-Party Services - Apple CloudKit — real-time event sync. Apple's privacy policy applies: apple.com/privacy - Apple StoreKit 2 — in-app purchase processing for the $4.99 Premium unlock. Apple handles all payment data. We receive only anonymized transaction receipts. - Apple WidgetKit / App Groups — home screen widget showing unclaimed event items. Data shared locally between the app and widget extension, not transmitted externally. - Apple UserNotifications — local push notifications for event reminders and item-claimed alerts. No data leaves your device for notification delivery. We do not integrate any third-party analytics, advertising, or tracking libraries. 6. Children's Data Potluck Coordinator is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. Contact maxthemoltbot@gmail.com if you believe a minor has used the app. 7. Data Retention and Deletion - Local data: deleted when you uninstall the app - CloudKit event data: persists until the host archives or deletes the event within the app, or until Apple's CloudKit retention policies apply - Subscription records: managed by Apple To remove event data: open the event, tap Archive or Delete, then confirm. Events you did not create can only be deleted by the host. 8. Security Local data is protected by iOS sandboxing. CloudKit data is protected by Apple's infrastructure and access controls. Join codes act as access tokens — keep your event join codes private if your event is intended for a limited guest list. 9. Changes to This Policy Material changes will be communicated via in-app notice. Continued use constitutes acceptance. 10. Contact Loud Unicorn LLC maxthemoltbot@gmail.com Arizona, USA ──────────────────────────────────────── GDPR — Your Rights (EU/EEA Users) Last updated: April 23, 2026 1. Data Controller Loud Unicorn LLC is the data controller for personal data processed through Potluck Coordinator. Contact: maxthemoltbot@gmail.com 2. Legal Basis for Processing - Contractual necessity (Art. 6(1)(b)): Event sync via CloudKit is required to provide the core service — real-time potluck coordination. - Consent (Art. 6(1)(a)): Photo uploads and optional features require explicit user action. 3. Your Rights Under GDPR Right of Access (Art. 15): Event and item data you created is visible within the app. Contact maxthemoltbot@gmail.com for any records. Right to Rectification (Art. 16): Edit or update item information directly in the app. Right to Erasure (Art. 17): Delete events and items within the app. Uninstall to remove local data. Right to Restriction (Art. 18): Revoke CloudKit access by uninstalling the app. Right to Data Portability (Art. 20): Contact maxthemoltbot@gmail.com for assistance. Right to Object (Art. 21): Uninstall the app to stop all processing. 4. How to Exercise Your Rights Email: maxthemoltbot@gmail.com — we respond within 30 days. 5. Supervisory Authority You may lodge a complaint with your local EU/EEA data protection authority. 6. International Data Transfers Event data is stored in Apple CloudKit under Apple's GDPR commitments and Standard Contractual Clauses. We do not transfer data to our own servers outside the EU/EEA. 7. Contact maxthemoltbot@gmail.com | Loud Unicorn LLC | Arizona, USA ──────────────────────────────────────── CCPA/CPRA — Your Rights (California Residents) Last updated: April 23, 2026 1. Categories of Personal Information We Collect - Device identifiers (for StoreKit transaction verification — handled by Apple) - Event content (item names, dietary flags, RSVP) — stored in Apple CloudKit - App usage data (preferences, widget state) — stored locally on your device We do NOT collect: name, email, phone number, location, financial data, biometric data, or sensitive personal information as defined by CPRA. 2. Do We Sell or Share Personal Information? No. We do not sell or share personal information with third parties for advertising. 3. Your CCPA/CPRA Rights Right to Know: All event data is visible in the app. We do not maintain server-side user profiles. Right to Delete: Delete events in the app or uninstall to remove local data. Email maxthemoltbot@gmail.com for any records we hold. Right to Correct: Edit item and event information directly in the app. Right to Opt-Out of Sale/Sharing: We do not sell or share — no action required. Right to Non-Discrimination: We will not discriminate against you for exercising CCPA/CPRA rights. 4. Contact maxthemoltbot@gmail.com | Loud Unicorn LLC | Arizona, USA