Privacy policy

Last updated 21 October 2026

1. Who we are

Poso is made by Panrock Technologies Ltd, a company registered in England and Wales with company number 17372926, whose registered office is at 24a Aldermans Hill, London N13 4PN, United Kingdom. We are the controller of the personal information described here, and are registered with the UK Information Commissioner’s Office under number ZC218117. Contact us about anything in this policy at panrocktech@gmail.com.

2. What stays on your phone

Poso keeps these on your phone only. They are not sent to us:

• your food tiles and what you eat each day;
• your age, sex, height, weight and chosen pace, and your daily aim;
• the weights you log, and the days of your cycle if you add them;
• your step counts and workouts;
• your food shop (items read from receipts) and the shops you pick.

Some of this is health information, which is why it stays with you. Deleting the app deletes it. If your phone backs up to iCloud, Apple’s backup may include it.

3. Your account

To use Poso you create an account with your email address and a password. We keep:

• your email address;
• your password, stored only in scrambled (hashed) form, so no one can read it;
• when your account was created and when you last signed in, and short-lived technical logs (such as internet addresses) that our hosting keeps for security;
• how many AI answers your account used each day, so that everyone gets a fair daily allowance. This is a count, not what you asked.

This is held by our hosting provider, Supabase, on servers in London.

4. AI features

Some features use AI to answer you. Only when you use one, we send:

• Fill in: what you typed, and the shops you picked;
• ✦ on a tile: the tile’s name and calories;
• Scan a receipt: the photo of the receipt.

These go to our AI provider, Anthropic, to produce the answer, which comes back to your phone and is kept there. We do not store what you sent or the answer on our servers. Under our commercial terms with Anthropic, this information is not used to train AI models and is not kept beyond what is needed to return the answer and meet Anthropic’s own abuse-monitoring obligations. A receipt can show other details, such as the last digits of a card: we do not keep the photo, and you can crop it before you scan.

5. Barcodes

When you scan a barcode, its number is sent to Open Food Facts, a free public food database, to look up the product. No personal information is sent with it, though, as with any website, their servers see your phone’s internet address.

6. Camera, photos and motion

Poso asks your permission before using the camera (to scan receipts and barcodes), your photos (to choose a receipt) or Motion & Fitness (to read your step count). Each is used only when you choose to, and you can switch any of them off in your iPhone’s Settings.

7. Emails

We email you only about your account, for example a code to reset your password. These are sent through our email provider, Resend. We do not send marketing emails.

8. Who else is involved

• Supabase: hosts your account (servers in London).
• Anthropic: answers AI requests (United States).
• Resend: sends account emails.
• Open Food Facts: looks up barcodes.
• Apple: provides the App Store and your iPhone’s permissions, under Apple’s own privacy policy.

Where information goes outside the UK, such as to Anthropic in the United States, it is protected by safeguards approved under UK data protection law. We have no adverts, analytics or tracking, and we never sell or share your information for marketing.

9. Why we can use it

• To run your account and the features you ask for: this is needed to provide Poso to you (contract).
• To keep Poso secure and fair, such as the daily AI allowance: our legitimate interests.
• Camera, photos and motion: your permission, which you can withdraw at any time.

10. How long we keep it

We keep your account for as long as you have one. When you delete it, your email, password and AI counts are removed from our systems straight away, and from any backup copies within 7 days.

11. Your rights

You can ask to see, correct, delete or take a copy of your information, or object to or limit how we use it. Delete your account at any time in Me › Account › Delete account, or email us. If you are unhappy with how we handle your information, please tell us first; you can also complain to the Information Commissioner’s Office at ico.org.uk.

12. Children

Poso is not for children under 13, and we do not knowingly hold information about them. If you think a child has made an account, email us and we will delete it.

13. Changes

If we change this policy, we will update the date at the top, and tell you in the app if the change matters.