Privacy policy

Who to ask

Questions about this policy or your data go to whoever runs this copy of AutoShoppingList.

What we store

• From Google or GitHub, when you sign in: your name, email address, profile picture and account identifier. The sign-in tokens they issue are stored with your account; the app uses them only to sign you in and never to read anything else in your Google or GitHub account.
• If you sign in with a link by email instead: your email address, and a one-time sign-in code stored as a hash, which is deleted the moment it is used and stops working after 24 hours.
• What you put in: household names, who belongs to which household and in what role, the items on your list with their notes, links and groups, and a history of what was done to each item and by whom — which is what undo and learning how long things last are built on.
• Invitation links you create, until they are used or expire.
• Technical data: a session cookie that keeps you signed in; your display preferences (light or dark, and whether checked-off items fade out); roughly when you last opened the app, and when anybody last opened each household, recorded at most once an hour so that accounts nobody uses any more can be found; and the request logs our hosting provider keeps as part of running any website, which include your IP address and browser.

What it is used for

Only to run the app: signing you in, showing your household's list to its members, and proposing how often each item needs buying, based on when it was bought before. Nothing is sold, shared for advertising or used to build a profile of you. The legal basis is that processing is necessary to provide the service you signed up for (Article 6(1)(b) GDPR).

Who can see it

• Members of your household see your name, email address and profile picture, the household's list, and who did what to it.
• Service providers that run the app for us and process data only on our behalf: Vercel (hosting), Neon (database) and Resend, which delivers sign-in emails and is given only the address the link is sent to. Google and GitHub know that you used them to sign in here.
• Nobody else, unless the law requires it.

Cookies and storage on your device

Only what the app needs to work: the sign-in cookies, and preference cookies remembering your language, which household you last opened and, if you switched it from the top bar, whether the screen is light or dark. Your browser also keeps how you last grouped each list, which recipes you left open, whether you dismissed the install banner, and — so the list opens without a signal in a shop — a copy of it for offline use, which is cleared when you sign out. There are no third-party cookies, so there is nothing to consent to beyond using the app.

How long it is kept

For as long as you have an account, which is until you delete it. Sign-in sessions expire after 30 days without use. One-off items are deleted 14 days after they are bought. Deleting a household deletes everything in it at once, for every member. Leaving a household removes you from it; what you did there stays in its history until your account is deleted, at which point your name is taken off it.

Your rights

You can ask to see the data held about you, to have it corrected, to receive a copy of it, to have it deleted, or to restrict or object to how it is used. In Settings you can leave any household, delete households you own, and delete your account — see below; for anything else, use the contact above. You can also withdraw the app's access from your Google account or GitHub settings, and you have the right to complain to your data protection authority — in Poland, UODO.

Deleting your account

Open Settings — or, if you have not joined a household yet, the setup page — and choose Delete my account. It happens at once and cannot be undone. It removes your name, email address and picture, the link to the Google or GitHub account you signed in with and its tokens, every session you are signed in with, and your place in every household. A household you were the only member of is deleted with everything in it. A household other people are still in stays theirs: its list remains, and its history keeps what was done but no longer says it was you. If you are the only owner of a household other people are in, make one of them an owner or delete that household first. If you can no longer sign in, ask the contact above to delete your account for you.

Children

AutoShoppingList is not meant for children under 16, and does not knowingly store data about them.

Changes

If this policy changes, the date at the top changes with it.