Shopping List Privacy Policy

Last updated: 27 October 2026 · Android package: com.avirankatz.shoppinglist

This policy covers Shopping List (also called Family Shopping List / רשימת קניות משפחתית), including its Android, web, iOS and Apple Watch clients. The developer and controller responsible for the service is Aviran Katz, Israel. For privacy questions or rights requests, email aviran.katz@gmail.com.

1. Information processed

• Guest account: a randomly assigned Supabase user ID, authentication sessions and tokens, and account creation / authentication timestamps. Guest means no conventional registration, not that the data cannot be linked to you.
• Shared content: list names and IDs, owner IDs, invite codes, memberships and roles, optional display names, item text, checked status and creation / update timestamps. Anything you type into a list may itself contain personal information.
• On your device: sessions, your chosen name and language where supported, selected list, cached list contents, pending offline changes and personal item ordering. The web app uses local storage and a service worker cache; Android stores its session and list snapshot in encrypted app storage excluded from backup. Storage differs on Apple platforms.
• Technical data: requests to Supabase and the web host necessarily expose network information such as IP address, request time and client information; providers may keep operational and security logs. GitHub Pages logs visitor IP addresses for security. If you contact us, we receive your email address, message and any attachments you choose to send.

The Android app requests Internet access. It does not request access to your contacts, location, camera, microphone or photos. We do not collect advertising IDs, sell personal data, or use list contents for targeted advertising. Please avoid entering medical information, passwords, payment details or other sensitive information.

2. Why we process data and your choices

We use account and list information to authenticate your device, create and join lists, authorize access, synchronize changes, support offline use and respond to support or rights requests. Technical data helps operate and secure the service and investigate failures or abuse.

Providing information is voluntary; no law requires you to give us shopping-list information. A display name is optional and may be a nickname. Without an account identifier and the list data needed for the feature, shared synchronization cannot work. You can stop using the service and request deletion.

Where the GDPR applies, the legal basis for account and list processing is performance of the service you request (Article 6(1)(b)); for proportionate security, abuse prevention and support it is our legitimate interest in running and protecting the service (Article 6(1)(f)); and for legally required disclosures or recordkeeping it is compliance with legal obligations (Article 6(1)(c)). If an optional future feature requires consent, we will request it separately; you may withdraw it without affecting earlier lawful processing. We do not make decisions producing legal or similarly significant effects through automated decision-making or profiling.

3. Sharing and service providers

List members: joining a list makes its shared content available to its members. Invite codes and links enable others to join; keep them private and share only with people you trust. Members may copy content, and deleting data cannot retrieve copies they have made.

Supabase: provides authentication, database storage and real-time synchronization. See its privacy policy, data processing addendum and subprocessor list. GitHub Pages: hosts the website and these pages; see the GitHub privacy statement. Email providers process privacy/support correspondence. Authorized service administrators may access data where necessary to operate the service or handle requests. We may disclose information when legally required or necessary to protect rights and service security.

Optional donation links open an external service such as Buy Me a Coffee, which handles its own payment and browsing data; the app does not receive your card details. The web app currently loads its font from Google Fonts, which receives the network information needed to serve that request; see Google Fonts privacy information. These policy pages do not load external fonts, trackers or app authentication.

4. International processing

The controller is in Israel. Service providers and their subprocessors can process data in other countries, including outside Israel and the European Economic Area. Supabase's DPA sets out its international-transfer safeguards, including EU Standard Contractual Clauses for applicable transfers. The selected database region does not by itself restrict all support, logging or subprocessor processing. Contact us for information about the applicable hosting locations and transfer safeguards, or to request a copy of applicable safeguards, with confidential details redacted where needed.

5. Retention and security

Shared lists and guest accounts have no automatic inactivity expiry implemented in the app: they remain in the service until deleted. Checking an item marks it complete; it does not delete it. Deleting an item removes it from the active database after successful synchronization. Offline deletions take effect on the server when they synchronize. Leaving a list, uninstalling, or clearing local storage does not delete the server account, memberships or shared lists.

Local caches and pending changes remain until replaced or cleared; clear browser site data or Android app storage to remove local copies. Request server deletion before clearing your session if possible, since losing the guest session can make ownership verification harder. Backups and provider logs can outlast deletion from the live database under their configured retention schedules; they are not intended for ordinary app use. Contact us for the current applicable schedules. We retain request correspondence only as needed to resolve the request and document compliance or address legal claims; any specific legal retention exception will be explained when applicable.

Connections to the backend use HTTPS/WSS. The supplied backend schema uses access-control policies, and Android encrypts its stored snapshot using an Android Keystore key. No system is completely secure. Protect your device, session and invite code. The service is not end-to-end encrypted: authorized backend administrators and providers can technically access server data.

6. Access, correction and other rights

Under Israeli law you may request access to your personal information and correction of information that is inaccurate, incomplete, unclear or out of date, subject to applicable conditions. Where the GDPR applies, you may also have rights to erasure, restriction, portability, and to object to processing based on legitimate interests. These rights are subject to legal conditions and the rights of other people.

Email the controller to exercise these rights. We may ask for proportionate proof that you control the relevant guest account; do not send access tokens, passwords or identity documents unless specifically necessary and securely arranged. We respond without undue delay and within the applicable legal deadline (normally one month under the GDPR, with permitted extensions explained). You may complain to the Israeli Privacy Protection Authority or, where applicable, your local EU/EEA data-protection authority.

7. Delete your account and data

Use Request account deletion in the Android app or on the web app, or visit our public account-deletion page. Requests are processed manually, not instantly. Email aviran.katz@gmail.com with the subject “Shopping List account deletion” and your account ID if available. We will help identify and verify the account if you do not have the ID.

After verification, deletion removes the guest authentication account, its membership/display-name records and lists it owns, including their items and memberships. Deleting an owner account deletes its owned lists for every member. Items in lists owned by other users are shared records without an author field, so they cannot reliably be attributed to you; tell us which personal content you want removed so we can assess and address it while respecting others' rights. We explain any data that must be retained and why. Other people's exported/offline copies and provider backups/logs are subject to the limits described above. You may need to clear local copies on each device after completion.

8. Children and changes

The app is a general household utility, not a service specifically directed at children. A parent or guardian may contact us about a child's information. Where applicable law requires parental authorization, obtain it before using the service. We will update this page when practices change and provide additional notice where required. The date above identifies the latest revision.