Privacy

What we store

• Your account: name, email address, picture, password (stored as a one-way hash that no one can read) and the sign-in accounts you’ve linked.
• Your lists and circles: what’s in them, who’s in them, the invites you make, when items were ticked (your purchase history), and who changed what on each list (its recent changes, which everyone on the list can see).
• Problem reports you send, with any screenshot and details about the app and your device.
• When you last used the app, and the days you changed something (just the dates).
• What you’ve bought: your Full Fat subscription or Filtered, when it started, renews or ends, and the order number from Google Play or our payment provider. Never your card details.
• Whether you have Full Fat. If you share it with a circle, everyone in that circle sees that it comes from you. Nothing is shared until you choose a circle.

Why

• To run the app you signed up for: keeping your lists in sync across your devices and with the people you share them with, who see your name, picture and changes.
• To take payments, and to keep records of them as tax law requires.
• With your consent: adverts based on you (see Adverts below). You can change your mind at any time.
• In our legitimate interests: showing adverts that aren’t based on you, which keep the free version free; fixing problems, keeping the app secure and counting how much it’s used. To fix a problem an admin may look into your account, and every admin action on it is recorded.

Where it’s kept

• On Richard Down’s computer in the UK.
• Cloudflare carries every connection, and Brevo sends the app’s emails.
• Cloudflare’s Turnstile keeps bots out, using your IP address and details of your browser or device; its privacy addendum covers what it does.
• The account you sign in with gives us your name, email address and picture; its own policy covers what it does: Google, Apple, Microsoft or Facebook.
• Google shows the adverts (AdMob in the app, AdSense on the web); its advertising policy covers what it does.
• Payments go through Google Play in the app, or our payment provider on the web; each has its own policy for the payment.
• Some of these services may handle data outside the UK, under safeguards UK law accepts.
• Nobody else gets it: advertisers never get your lists, name or email address, and there’s no analytics.

How long it’s kept

• Your account and lists: until you delete them, or until your account goes 2 years without being used. We email you a month before, and signing in keeps it. Guest accounts go after 12 months unused.
• Purchase history: 2 years. Recent changes on a list: 30 days.
• Records of what you paid: 6 years, as tax law requires, even after your account is deleted.
• Problem reports and records of how the app is used (activity dates, invite links, admin actions): 1 year.
• Sign-ins: they end after 90 days unused.
• Short-lived data (records of deletions, emails that couldn’t be sent, codes, the server log): 90 days at most.

Your rights

• Delete your account, or download a copy of your data, from settings at any time. Lists you share stay with the other members.
• You can also ask to see or correct your data, or to restrict or object to how it’s used, and complain to the Information Commissioner’s Office.

Adverts

• The free version shows adverts from Google; Full Fat and Filtered have none. They’re never shown while you’re shopping.
• The first time adverts would show, Google asks whether they can be based on you. Saying no is as easy as saying yes, and the app works the same either way.
• If you say yes, Google and its partners use your device’s advertising ID (on Android) or cookies (on the web), with your IP address and how you use adverts, to choose ones that may interest you and to measure them.
• If you say no, the adverts aren’t based on you: Google uses only general details, such as your rough location from your IP address, and to stop fraud.
• Change your choice at any time from Ad choices in settings. On Android you can also reset or delete your advertising ID in your phone’s settings.

Cookies and your device

• The app sets no cookies. It keeps your sign-in, settings and a copy of your lists in your device’s storage, which it needs to work (offline too), so it doesn’t ask first. Signing out removes them.
• Cloudflare may set cookies that keep the site secure, such as telling real visitors from bots.
• On the web, Google’s sign-in button comes from Google, which may set its own cookies.
• On the web, Google’s adverts use cookies only if you agree to adverts based on you (see Adverts above). There are no analytics cookies.

Changes and contact