Privacy Policy

1. Information we collect

• Account information: your email address and password. Passwords are stored in hashed form by our authentication provider; we never see them.
• Google sign-in: if you sign in with Google, Google shares your name, email address and profile picture with us, along with your Google account identifier. We use your email address to identify your account. The other details are kept by our authentication provider as part of your account record and are not otherwise used.
• Username: the optional display name you choose in Settings.
• List content: the lists you create or join, their names and invite codes, and the categories, products, items, quantities and statuses you add.
• Membership: which lists you belong to and when you joined them.
• Invite code attempts: when an incorrect invite code is entered, we record your account identifier and the time, to prevent people from guessing codes.
• Technical data: our hosting and database providers process standard technical information, such as IP addresses, browser and device details and request logs, to deliver and secure the service.

2. Information stored on your device

The app stores a sign-in cookie so you stay signed in, and saves your language choice and the last list you opened in your browser’s local storage. We do not use advertising or analytics cookies.

3. How we use information

We use your information only to provide the app: to sign you in, show your lists, keep them in sync in real time between the people who share them, protect the service from abuse, and respond to your requests. We do not sell your information, use it for advertising, or build profiles about you.

4. Google user data

The app uses Google only to let you sign in. The app’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, do not sell it, and do not transfer it to anyone except as needed to provide the app, for security, or to comply with law.

5. Who can see your information

• Members of a list you belong to can see that list’s contents and the username and email address of each member.
• Service providers that run the app for us: Supabase (database, authentication and real-time sync) and Vercel (hosting). They process data only on our behalf.
• Google: the sign-in page loads Google’s “Sign in with Google” button, so Google may receive standard technical information (such as your IP address and browser details) when you open that page, under Google’s own privacy policy.
• Authorities, if we are required to disclose information by law.

6. Where data is stored

Our service providers may store and process data in countries other than the one you live in. We rely on their security and data-protection commitments when they do so.

7. Keeping and deleting data

• We keep your information for as long as your account exists.
• Leaving a list removes your membership. If you are the last member, the list and everything in it is deleted.
• “Clear list” permanently deletes all items on a list.
• You can delete your account at any time in Settings → Account → Delete account. This immediately deletes your account and every list only you belong to. Lists you share with others remain available to them. You can also ask us to delete your account by emailing aaronms168@gmail.com from the address on the account; we will do so within 30 days.
• Technical logs held by our providers may be kept for a limited time after deletion.

8. Your rights

You can view and change your username and email address, and delete your account, in Settings. You can also ask us for a copy of your information, to correct it, or to delete it by emailing aaronms168@gmail.com. Depending on where you live, you may have additional rights under local law, including the right to complain to a data protection authority.

9. Children

The app is not intended for children under 13, and we do not knowingly collect information from them. If you believe a child has created an account, contact us and we will delete it.

10. Security

Data is sent over encrypted connections, and access rules in our database ensure that only members of a list can read or change it. No system is completely secure, but we work to protect your information.

11. Changes to this policy

If we change this policy, we will update the date above. If the changes are significant, we will also let you know in the app.

12. Contact

Schreibs — aaronms168@gmail.com