1. Introduction
Just Shopping List ("the App") is a simple shopping list application available on Android and the web. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information in compliance with the General Data Protection Regulation (GDPR) and other applicable privacy laws.
2. What Data We Collect
Data collected automatically:
- Anonymous user identifier — a randomly generated ID created when you first use the app. This is not linked to your name, email, or any personal identity.
- IP address — collected by our cloud service provider and advertising partner during network communication.
- Device advertising identifier — used by Google AdMob to serve advertisements (mobile app only).
- Basic device information — device type, operating system version, and app version.
Data you provide:
- Shopping list items — items you add, including name, category, and quantity.
- Display name — an optional name you set when sharing lists.
- Regular items — frequently purchased items you save for quick access.
Data we do NOT collect:
- We do not collect your real name, email address, phone number, or physical address.
- We do not require account registration — authentication is fully anonymous.
- We do not access your contacts, photos, location, or files.
- Camera access (mobile) is used solely for QR code scanning — no images are stored or transmitted.
3. How We Use Your Data
- Sync your shopping list across devices — core app functionality.
- Enable list sharing between users — a feature you initiate.
- Display advertisements — with your consent (mobile app, via GDPR consent dialog).
- Prevent abuse and enforce rate limits — to keep the service safe.
4. Third-Party Services
- Supabase — hosts your shopping list data and anonymous user identity. Supabase Privacy Policy
- Google AdMob — displays advertisements in the mobile app. May collect device identifiers for ad personalization, subject to your consent. Google Privacy Policy
5. Data Retention
- Shopping lists inactive for 120 days are automatically deleted.
- Pairing codes expire within 10 minutes.
- Activity logs are retained for 30 days, then purged.
- Local data on your device persists until you uninstall or clear app data.
6. Your Rights (GDPR)
If you are located in the European Economic Area (EEA), you have the right to:
- Access — request a copy of the data we hold about you.
- Erasure — request deletion of your data. You can do this directly by unlinking your shared list and clearing app data.
- Restriction — request that we limit how we process your data.
- Portability — request your data in a machine-readable format.
- Object — object to processing based on legitimate interest.
- Withdraw consent — withdraw advertising consent at any time by clearing storage or reinstalling.
We respond to all legitimate requests within 30 days.
7. Data Security
- All data in transit is encrypted via TLS/HTTPS.
- Database access is controlled through Row Level Security — users can only access their own data.
- No passwords are used — authentication is anonymous and token-based.
8. Children's Privacy
The App is not directed at children under the age of 16. We do not knowingly collect personal data from children.
9. International Data Transfers
Your data may be processed on servers located outside your country of residence, including the United States. We rely on our service providers' standard contractual clauses and privacy frameworks for international transfers.
10. Changes to This Policy
We may update this policy from time to time. The "Last updated" date at the top reflects the most recent revision. Continued use of the App constitutes acceptance of the updated policy.
11. Contact Us
If you have questions about this privacy policy or wish to exercise your data rights, please contact us via the app's support channel.