Privacy Policy

Last updated: January 2025

ListIt ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our iOS application and related services.

1. Information We Collect

We collect the following information when you create an account or use ListIt:

• Account information: Your name and email address when you register.
• Shopping list data: Items you add to your shopping lists, including item names, quantities, and completion status.
• Household data: Your household invite code and the accounts connected to your household.
• Usage timestamps: When items are added, checked off, or modified.

We do not collect precise location data, payment information, or any biometric data.

2. How We Use Your Information

Your information is used solely to provide the ListIt service:

• Authenticating you and managing your account
• Syncing your shopping list in real time across household members
• Providing access to your list history and purchase tracking
• Sending account-related communications (e.g. password resets)

We do not use your data for advertising, and we do not sell or share your personal information with third parties for marketing purposes.

3. Data Storage & Security

Your data is stored server-side on secured infrastructure. We use industry-standard encryption in transit (HTTPS/TLS) and at rest. Access to your data is restricted to authenticated requests only, verified via Laravel Sanctum tokens.

We take reasonable technical and organisational measures to protect your data against unauthorised access, loss, or misuse. No method of transmission over the internet is 100% secure, but we strive to use commercially acceptable means to protect your information.

4. Real-Time Sync via WebSockets

ListIt uses WebSocket technology (via Pusher) to deliver real-time updates to your shopping list. Events (such as item additions or completions) are transmitted through Pusher's infrastructure to connected devices. Pusher acts as a message relay only — no shopping list data is retained by Pusher beyond the immediate delivery of events.

For more information, see Pusher's Privacy Policy.

5. No Third-Party Analytics

We do not use third-party analytics services (such as Google Analytics, Mixpanel, or similar). We do not track your behaviour across other websites or apps.

6. Data Retention

We retain your account data for as long as your account is active. Shopping list history is retained to provide the history and tracking features. If you delete your account, your personal data will be removed from our active systems within 30 days.

7. Your Rights & Account Deletion

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Withdraw consent at any time by discontinuing use of the service

To request account deletion or data export, please contact us at the email below. We will process your request within 30 days.

8. Children's Privacy

ListIt is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the date at the top of this page. Continued use of ListIt after changes are posted constitutes your acceptance of the updated policy.

10. Contact

If you have questions about this Privacy Policy or your data, please contact us at privacy@trylistit.app.