Listyflow is a lists app: groceries, trips, meals, medications, to-dos and running your home. This policy explains what data the app touches, where it goes, and what your choices are.
The principle behind it is simple: almost everything you write in Listyflow lives on your device and in your own iCloud, and we can't see it. What does reach our servers is very little, and the full list is below.
What lives on your device and in your iCloud
Your lists, their items, the photos and files you attach, your meal planning, the family wall and calendar, and your custom aisles are stored on your device and synced across your devices with Apple's iCloud, in your private database. We have no access to that content.
- Shared lists and family: when you share a list or invite someone to your family, the app uses iCloud sharing. The people you invite see what you share with them. Email invitations are sent from your own mail app, not from our servers.
- Your account: if you sign in with Apple, Apple gives us your name and an email address (which may be a private Apple relay address). They are stored only in your device's keychain and are not sent to our servers.
- Calendar: the app reads the calendars on your device that you choose to show, and adds the events you decide to create. If you choose to share calendars with your family, a copy of those events —title, date and time, place and note, along with the calendar's name and color— is shared with them through iCloud. It doesn't go through our servers.
What is processed on your device and never leaves it
- Voice: when you dictate a list, speech recognition happens on your device. The audio is never sent to any server.
- Apple Intelligence: the app's summaries and suggestions use Apple's model running on your device, not a cloud service.
- Camera and photos: the app only accesses the photos you pick or take, and stores them in your iCloud with the item.
- Home (HomeKit) and Apple Music: used on your device to show your home and play music on the home panel. We don't send that information to our servers.
What reaches our servers
Our backend runs on Google Cloud Platform. This is everything it receives:
- To send you notifications: the notification identifier Apple generates for your device, whether you are a premium user, and the products, movies or shows you choose to follow, so we know what to alert you about. Also which alerts you have already seen or dismissed.
- Searches: the text you search for in the product, movie or book catalog.
- Recipe suggestions: the names of the ingredients on your list, to work out what you can cook. They are used to answer and are not stored.
- Product contributions: if you confirm or add a product by its barcode, we receive that barcode, the name, brand and category, together with a random identifier the app generates, which is not linked to your identity.
- Promo codes: the code you redeem and that same random identifier, so each code can only be used once.
Like any internet service, our infrastructure provider records incoming requests (including search text) in operational logs that are kept for a limited time, to run the service and protect it from abuse.
Location
To show you the weather, the app uses your approximate location, never your precise one, and asks only Apple's WeatherKit for it. It never reaches our servers. The places you attach to an item are chosen by searching for them, not read from your GPS, and are stored in your iCloud.
Third parties
- Apple: iCloud (your data and shared lists), push notifications, Sign in with Apple, WeatherKit (weather), purchases and subscriptions, and Apple Music.
- Google Cloud: hosts our backend and its data.
- The Movie Database (TMDB) and Google Books: receive your movie, show and book searches through our server, with no data that identifies you.
- Open Food Facts, Open Prices and Open Library: the app queries them directly from your device using a product's barcode or a book's title. As with any internet connection, they see the IP address the request comes from.
- Supermarkets: we collect public catalog and price information from their websites. This involves none of your data.
What we don't do
- We don't show ads or use advertising identifiers.
- We don't track your activity across other apps or websites.
- We don't sell your data or share it with third parties for advertising.
- We don't include third-party analytics or tracking tools.
- We don't receive your payment details: Apple processes purchases, and all we learn is whether your subscription is active.
Retention and deletion
What lives in your iCloud is under your control: you can delete it from the app or from your device's iCloud settings. Notification data is kept while you use the app, and you can turn notifications off at any time in your device settings. If you want us to delete what is associated with your device on our servers, write to us and we'll delete it.
Your rights
You can ask us for access to the data associated with your device, for its correction or for its deletion, by writing to the contact address below.
Children
Listyflow is not directed at children under 14, and we do not knowingly collect data from children.
Changes to this policy
We may update this policy. We will publish the current version on this page, with its last updated date.
Contact
For privacy questions or to request deletion of your data, write to soporte@listyflow.com.
Listyflow