Privacy Policy

Last updated: October 15, 2026

This is a translation of the Hebrew policy. If the two differ, the Hebrew version prevails.

Introduction

This policy explains what data "Shopping List" collects, why, and what your rights are. The service is for managing shopping lists shared with people you choose to invite. It is intended for users aged 16 and over; if you are under 16, please don’t use the service or give us any personal information.

Information we collect

• There’s no sign-up, and we never ask for an email, phone number or password. On first launch, an anonymous account with a random tag (e.g. #8QJ2LV2P) is created for you.
• Device and usage data collected by Google AdMob when an ad is shown (see "Third-party services").
• A username, if you choose to set one. It (or your tag) is shown to members of your lists, and lets others invite you to a list. You join a list only if you accept the invitation.
• A list you haven’t shared is stored only on your device. When you share a list (by invite link or by tag), it and its content (name, items, quantities, and "picked up" marks) are stored on our server to sync it between members. Only that list’s members can access it. When a list stops being shared, it’s deleted from the server and stays only on your device.
• Aisle sorting quota: to enforce the daily sorting limit (see the Terms of Use), the server keeps how many sorts were made each day per account, per device and per IP address. The device is identified by a random id the app creates, not by the advertising id or any other device identifier. The account, the id and the IP address are stored only as a hash, not as the values themselves, together with the date and the number of sorts, and are deleted automatically after about a week. They aren’t deleted when you delete your account, so that a new account doesn’t reset the quota.
• Invite links: when you create one, the server stores a random code, the list, the role the link grants and who created it. A link expires after 7 days, and you can cancel it sooner.

How we use it

The information is used only to run the service: identifying your account, showing your lists and those shared with you, and sorting items by supermarket aisle with AI (see the next section). We don’t sell your information, and your list content is never sent to advertisers. Ads in the app are shown by Google AdMob (see the next section).

Third-party services

• Google Gemini API — when you ask to sort a list by aisle, the item names in the list are sent to our server and from there to Gemini to sort them by aisle. Items are sent as plain text only, with no other identifying details. An item name and the aisle chosen for it are also kept in an anonymous internal cache, not linked to your account or list, to avoid repeat Gemini calls when the same item name is added later (including by other users).
• Google AdMob — a short ad is shown before sorting by aisle, and a banner ad at the bottom of the lists and list screens. Google collects device and usage data (such as IP address, device type and interaction with the ad) to show and measure ads. The device’s advertising identifier (IDFA) is collected only if you allowed tracking in the iOS prompt, and you can change that at any time in your device settings. Users in the European region are asked for consent first. Your list content is never sent to AdMob. More details: policies.google.com/technologies/ads
• Render — hosts the service’s API server.
• Neon — hosts the service’s database (accounts, lists and items).

Local storage

Your lists and your item-suggestion history (autocomplete) are stored in a local database on the device. The suggestion history stays on the device only and is never sent to our server. You can reset it in Settings. An authentication token is kept in the device’s secure storage (Keychain on iOS / Keystore on Android). It’s the only way to access the account, so the account is tied to the device and can’t be moved to another one. The random device id used for the sorting quota is kept in the same storage, and it stays after the account is deleted. Your ad-consent choices and language choice are also stored on the device.

Your rights

You can view and update your account details at any time in Settings. You can also permanently delete your account there, including every list you own. You can withdraw tracking permission for ads at any time in iOS Settings (Privacy & Security → Tracking).

Security

There are no passwords or codes to keep, and communication with the server goes over a secure connection. Still, no security method is 100% airtight.

Discontinuing the service

We may discontinue the service or shut down the app at any time (see the Terms of Use). If that happens, the information stored on the server (accounts, lists and items) will be deleted and won’t be passed to any third party. Information stored on your device stays there until you delete the app.

Changes to this policy

This policy may be updated from time to time. The date of the last update appears at the top of the page.

Contact

Questions about privacy: galabisira@gmail.com