Listat — Privacy Policy
Listat is a shared list app. You create or join a group, and the people in that group share three lists: a weekly list, per-member request boxes, and events. This policy describes exactly what the app stores, where it is kept, and who can see it.
What we collect
When you sign in
Listat uses Google Sign-In. We do not operate our own accounts and never see or handle your Google password. From your Google account we receive and store your email address and a Google account identifier — a random string that identifies you to us.
What you type into the app
- the group name you choose
- the names you type for the people in your group
- the items you add to the weekly list, to your requests, and to events
- the event names you create
- who added or approved what, and when
Photos
If you choose a profile photo, the app opens your phone's photo picker, shrinks the image you select to 400×400 pixels, and stores that shrunken copy with your group. The app does not browse, scan, or upload any other photo on your phone, and it asks for no storage permission — the picker hands over only the single image you pick.
What we do not collect
No advertising identifiers. No analytics. No crash reporting. No location. No contacts. No microphone or camera access. No tracking across other apps or websites. Listat contains no advertising and no third-party trackers. The app requests exactly two permissions: internet access, and permission to show notifications.
Where it is stored
All of it is stored in Google Cloud Firestore, in Google's
European multi-region (eur3 — data centres in Belgium and the
Netherlands), under a Firebase project we control. Sign-in is handled by
Firebase Authentication. Google acts as our data processor; their handling is
covered by the
Firebase Privacy and
Security policy.
Two small things stay only on your own phone and never leave it: which requests you have already been notified about, and whether you have seen the walkthrough.
Who can see it
Only the people in your group. This is enforced on Google's servers, not merely hidden in the app.
- Nobody outside your group can read anything belonging to it.
- Inside a group, admins can see every member's requests; members see only their own.
- Nobody can list or discover other groups, so a group cannot be found by someone who was not invited to it.
Your email address is visible only to us. We do not sell, rent, or share any of it with anyone, and we never use it for advertising.
Notifications
If you are an admin, the app checks roughly every 15 minutes whether anyone in your group has asked for something, and shows a notification if so. This runs on your device. You can refuse or withdraw the notification permission at any time in your phone's settings, and the app keeps working without it.
Invite links
Sharing an invite creates a link containing your group's code. Anybody holding that link or code can join your group, so share it only with people you want in it. The link is generated on your phone; we do not send it anywhere.
How long we keep it, and how to remove it
- Deleting an item, event, or request removes it immediately and permanently.
- Removing someone from a group deletes their requests along with them.
- Leaving a group (Settings → Leave group) removes your link to that group. The group's own lists remain for whoever is still in it.
- Signing out (Settings → Sign out) ends your session on that phone and deletes nothing.
Erasing your account entirely. To have your account and everything tied to it deleted — your sign-in record, your membership, your photo, and your requests — email us at abujoudeh1@gmail.com. We will complete it within 30 days and confirm when it is done. A delete button inside the app is being added, and this page will be updated to describe it when it ships.
Children
Listat is built for households and small groups, which may include children. It collects nothing beyond what is described above, shows no advertising, and contains no tracking. If you are a parent or guardian and want your child's data removed, email us at abujoudeh1@gmail.com.
Changes
If this policy changes, the effective date at the top changes with it. Material changes will be announced in the app.