MyList is a shopping-list app. This policy explains what it collects, why, who else can see it, and how to get rid of it. It covers the iOS app only.
The short version. Your lists are stored in the cloud so they sync across your devices and can be shared with people you choose. We do not sell your data, we do not show ads, and the analytics we collect deliberately exclude the contents of your lists — no item names, list names, notes or prices ever leave your device for analytics purposes.
What we collect
Your account
To sign in you can use an email address and password, your Google account, or your Facebook account. We store your email address, your display name where the sign-in provider gives us one, and an anonymous user ID generated by Firebase. We never see or store your password — that is handled by Google Firebase Authentication or by the sign-in provider you chose.
Your lists
Everything you put in the app is stored so it can sync and be shared: list names, item names, categories, notes, prices, totals, expiration dates, purchase dates, whether an item is checked off, and any photos you attach to an item.
Sharing
When you share a list, we store the email address you send the invitation to, so the invitation can be delivered and accepted. Once someone accepts, we store a record linking their account to your list, and their display name so you can see who has access. Anyone you share a list with can see and edit everything on that list.
Notifications
If you allow notifications, Apple and Google Firebase Cloud Messaging issue a device token so we can send you expiration reminders and sharing invitations. This token is not stored in our database.
Usage analytics
We measure how the app is used so we can improve it — for example how many lists an account has, whether a list is shared, and whether an item had a note or a price attached. These are counts, yes/no flags and durations only. The app enforces this in code: it drops any analytics value that is not on an approved list before it is sent.
A random 15% of sessions are recorded as screen replays to help us find usability problems. All text and all images are masked out of these recordings before they leave your device, so your list contents are not visible in them.
Crash and error reports
When something goes wrong, we receive a diagnostic report containing the error, a stack trace, your device model and iOS version, and your anonymous user ID. Crash screenshots and screen-content captures are switched off specifically because they would capture your shopping list.
Purchases
Subscriptions are processed entirely by Apple. The app receives only whether your subscription is currently active. We never receive or store your payment details.
What we do not collect
- Your precise or approximate location
- Your contacts or address book
- Health, fitness or financial account data
- Advertising identifiers — the app contains no advertising and no ad networks
We do not sell your personal data, and we do not share it for advertising purposes.
Device permissions
| Permission | Why the app asks |
|---|---|
| Camera | Scanning barcodes and QR codes, and taking photos of items you add. Used only when you start one of those actions. |
| Notifications | Reminders that an item is about to expire, and alerts when someone shares a list with you. |
You can withdraw either permission at any time in the iOS Settings app.
Who else processes your data
| Service | What it handles |
|---|---|
| Google Firebase | Sign-in, list storage, photo storage, push notifications |
| Google Sign-In | Signing in, if you choose Google |
| Meta (Facebook Login) | Signing in, if you choose Facebook |
| Apple | App distribution and subscription billing |
| PostHog | Usage analytics and masked session replays |
| GlitchTip | Crash and error reports. Self-hosted on our own server, not a third-party service |
Data is stored and processed in the United States. If you use the app from outside the United States, you are transferring your data there.
How long we keep it, and how to delete it
Your lists and account are kept until you delete them. We do not delete inactive accounts automatically.
To delete your account and all of your data, from inside the app: open the Account tab, tap Delete Account, and confirm.
This permanently removes your account, every list and item you own, your notes, prices and expiration dates, your item photos, your account record, and every share you granted or accepted. It cannot be undone.
Deleting your account does not delete a copy of a list that another person separately created on their own account. It also does not cancel a subscription — subscriptions are managed by Apple, in Settings › your name › Subscriptions.
Analytics and crash reports are tied to an anonymous user ID rather than to your name or email, and are retained for up to 12 months.
Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to how it is processed. You can delete everything yourself using the Account tab. For anything else, email us and we will respond within 30 days.
Children
MyList is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has given us personal data, email us and we will delete it.
Security
Data is encrypted in transit. Access to your lists is enforced by server-side security rules, so only you and the people you have shared a list with can read or change it. No system is perfectly secure, but we do not store passwords or payment details at all, which removes the two most damaging things that could be exposed.
Changes to this policy
If this policy changes materially, we will update the date at the top and, where the change is significant, notify you in the app.
Contact
Questions, requests, or privacy concerns:
[email protected]