Privacy policy

The short version

You don't have to give us any personal data to use the app: you can create and share lists with no email, no name and no password.

If you choose to create an account, we store your email address to identify you. That's it.

We don't sell data, we don't build advertising profiles, and we don't use tracking cookies.

You can delete your account and everything attached to it from inside the app, yourself, without emailing anyone.

Who is responsible

The data controller is [LEGAL NAME], [TAX ID], registered at [ADDRESS]. You can write to [CONTACT EMAIL] about anything related to your data.

What we process and why

Only what the app needs to work:

• Guest identifier: created when you make your first list. It's a random identifier with none of your details in it, and it exists so your lists are yours and nobody else can edit them. Legal basis: performance of the service you requested.
• Email address: only if you create an account. Used to identify you and to send the sign-in or password-reset link. Legal basis: performance of contract.
• Password: only if you choose that method. We don't store it: it's hashed irreversibly, and nobody — including us — can read it.
• Display name: optional. If you set one, people who share a list with you will see it, so they know who added or checked each item.
• Your list content: the items, quantities and notes you write. They're yours, and only people with the link you shared can see them.
• Aggregate technical data: page visits and performance, with no cookies and no identification.

Who we share it with

Nobody, commercially. Only the providers the service needs to exist, acting as processors on our instructions:

• Supabase: database and authentication. Stores your lists, and your email if you have an account.
• Vercel: web hosting and aggregate usage and performance metrics, with no cookies and no individual identification.

How long we keep it

Your lists and account are kept while you keep using them. If you delete your account, they're removed immediately, along with the lists you own.

Guest identities with no lists attached are purged periodically — they serve no purpose and still take up space.

Your rights

You can access, correct, delete and port your data, and object to or restrict its processing. For the common cases you don't even need to write to us:

• Access and correction: from your account and your lists, any time.
• Deletion: there's a delete-account button on your account page. Immediate and permanent.
• For anything else, write to [CONTACT EMAIL].

Complaints

If you think we're mishandling your data, tell us first — that usually settles it. You also have the right to complain to your national data protection authority; in Spain that's the Agencia Española de Protección de Datos (aepd.es).

Changes to this policy

If something material changes we'll update this page and its revision date. If the change genuinely affects you and you have an account, we'll email you rather than wait for you to notice.