Privacy Policy

Last updated August 2, 2026

Guava is built and operated by Potchkey Labs, LLC. This policy explains what we collect when you use Guava, why, who else sees it, and what you can do about it. It is written to be read, not to be skimmed past.

1. What we collect

Information you give us

Account details. Your email address, and a display name if you set one. We use a third-party authentication provider (Supabase) to sign you in.
Kitchen and planning data. The ingredients you tell us are in your fridge and pantry, the recipes you save or write, your meal plans, and your shopping lists.
Content you post. Photos, captions, notes, and comments you publish to the Feed or share with a group. Anything you post to the Feed is visible to other Guava users.
Preferences. Dietary filters, organic preference, and your chosen retailer.

Information collected automatically

Basic technical data. IP address, browser and device type, and pages viewed, logged by our host as part of serving the app.
Local storage. Much of your planning data (pantry contents, current week's plan, preferences) is stored in your own browser rather than on our servers. Clearing your browser data clears it.

What we do not collect

We do not ask for or store payment card details, government identifiers, precise location, or health records. Purchases happen on the retailer's own site, never inside Guava.

2. Cookies and affiliate tracking

We use two kinds of cookies and similar technologies:

Essential. Keeping you signed in and remembering your preferences. The app does not work without these.
Affiliate attribution. This one matters, so plainly: Guava participates in the Amazon Associates Program and similar retailer programs. When you click a retailer link in Guava, that retailer may set a cookie so it can credit the resulting purchase to us. We earn a commission on some of those purchases, at no additional cost to you. The cookie is set and read by the retailer, not by us. We do not see what you put in your cart or what you buy. We see only aggregate commission reports from the retailer.

We do not run third-party advertising networks and we do not use analytics trackers for ad targeting.

3. Who we share it with

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share only with service providers who need it to make Guava work:

Provider	What they handle
Supabase	Authentication, and storage of your account and Feed content
Vercel	Hosting and delivery of the app; standard server logs
Amazon and other retailers	Receive your click when you follow a retailer link, and set their own attribution cookie. Their privacy policies govern what happens on their sites.
Google (Sheets)	Holds our own recipe and product reference data. No user information is stored there.
Google Fonts	Serves the typefaces the app is set in. Your browser requests them directly from Google, which means Google sees your IP address.
Instagram / Meta	Only on the Feed, and only when a post embeds an Instagram link. Instagram's embed script loads from their servers and can see your IP address.
jsDelivr and cdnjs	Content delivery networks that serve open-source libraries the app uses. They see your IP address when your browser fetches those files.

Those last four are a consequence of how the page loads rather than anything we send them. We do not pass your account details, your recipes, or your plans to any of them. But they can see your IP address, which is why they are listed here.

We may also disclose information if we are legally required to, or to protect the rights and safety of Guava users. If Potchkey Labs is ever acquired or merged, account data may transfer as part of that transaction; we will give notice before it happens.

4. How long we keep it

Account data and Feed content are kept while your account is active. Ask us to delete your account and we will remove your account record and your Feed posts within 30 days, except where we are required to retain something by law. Data stored locally in your browser is yours to clear at any time.

5. Age requirement

Guava is for people 13 and older. It is not directed to children under 13 and we do not knowingly collect personal information from them. If you believe a child under 13 has created an account, contact us and we will delete it.

6. Your choices

Access and correction. You can view and edit your account details and your content in the app, or ask us for a copy.
Deletion. Ask us to delete your account and we will.
Affiliate cookies. You can block or clear them in your browser, or go to the retailer directly instead of using our links. Guava works the same either way.
Feed visibility. You choose what to post. You can delete your own posts.

Depending on where you live, you may have additional rights under laws such as the California Consumer Privacy Act or the GDPR, including the right to know, delete, correct, and to not be discriminated against for exercising those rights. Contact us and we will honor them.

7. Security

We use encrypted connections and rely on established providers for authentication and storage. No system is perfectly secure, so please use a strong, unique password.

8. Changes

If we change this policy materially we will update the date above and notify you in the app. Continuing to use Guava after a change means you accept the updated policy.

9. Contact

Questions, requests, or complaints: support@potchkeylabs.com, Potchkey Labs, LLC.