Privacy Policy

Last updated: July 11, 2026

This Privacy Policy applies to the Listumi mobile application (herein referred to as the "App") and its associated website located at listumi.com (herein referred to as the "Website"). We are committed to protecting your privacy and ensuring you have a positive experience using our App.

1. Information We Collect

1.1. Information You Provide to Us

• Profile Information: We do not require you to create an account using an email address, phone number, or social media login. The App uses anonymous authentication. However, you may choose to provide a "Display Name" within the App to identify yourself to other users when collaborating on shared lists.
• User Content (Local-First): By default, the shopping lists you create and the products you add are stored exclusively on your device's internal storage. We collect and synchronize this data with our cloud servers only when you explicitly choose to share a list with other users. Unshared, private lists remain strictly on your device.

1.2. Information Automatically Collected

• Usage Data & Analytics: We use third-party analytics tools (Google Firebase Analytics) to collect data about how you interact with the App. This includes pages viewed, features used, and device information (such as operating system, device model, and unique device identifiers). This data is not linked to your personal shopping lists.
• Crash and Diagnostic Data: We use Google Firebase Crashlytics to collect crash reports. If the App crashes, this tool collects data such as the device state, OS version, and stack traces to help us fix bugs.

Note: We do not request access to your device's camera, microphone, precise geolocation, or contact book.

2. How We Use Your Information

We use the collected information for the following purposes:

• To provide, maintain, and improve the App's core functionality (e.g., real-time syncing of shared shopping lists).
• To monitor and analyze trends, usage, and activities to improve user experience.
• To detect, investigate, and prevent technical issues and bugs.

3. How We Share Your Information

We do not sell your personal data. We may share your information only in the following situations:

• With Other Users: If you share a shopping list, your Display Name and the content of that specific list will be synchronized to the cloud and visible to other participants you invited. Private lists are never shared or synced.
• With Service Providers: We share data with third-party vendors who provide cloud infrastructure and analytics services, including:
  • Supabase: For database hosting and real-time data synchronization of shared lists.
  • Google (Firebase): For analytics and crash reporting.
• For Legal Reasons: We may disclose your information if required to do so by law or in response to valid requests by public authorities.

4. GDPR Compliance (European Union)

If you are a resident of the European Economic Area (EEA), under the General Data Protection Regulation (GDPR), you have specific rights regarding your personal data.

Legal Basis for Processing:

• Legitimate Interest: We process technical telemetry (via Firebase) to maintain the security and stability of the App.
• Performance of Contract: Cloud data processing and storage are necessary for the App's core functionality (syncing and sharing lists you choose to collaborate on).

5. CCPA, CPRA & CalOPPA (California Rights)

This section applies to residents of California.

• "Do Not Sell or Share": We do not sell your personal information. We do not share your personal information with third parties for cross-context behavioral advertising.
• Sensitive Personal Information: We do not collect or process "Sensitive Personal Information" (such as geolocation, racial origin, or biometric data) as defined by CPRA.
• Do Not Track Signals (CalOPPA): We do not track our customers over time and across third-party websites to provide targeted advertising and therefore do not respond to Do Not Track (DNT) signals.

6. Your Data Rights and Data Deletion

You have the right to manage your information. Because Listumi uses anonymous authentication, we do not link your data to an email address or other personal identifiers. The data deletion process works as follows:

• Local Deletion (Instant): You can delete lists and products directly within the App. Uninstalling the App itself or clearing its data in your device settings will result in the permanent deletion of your private local data and the loss of access to your current anonymous profile.
• Cloud Deletion (Automatic): To protect your privacy and minimize data, all your shared lists and profile data stored on our cloud servers are automatically and permanently deleted after 6 months of inactivity (no activity in the App).
• Manual Deletion Requests: Because your anonymous User ID is hidden for security reasons, we do not have the technical ability to identify your data on our servers via an email request. Therefore, we apply a strict automatic deletion policy (after 6 months), and to immediately stop using the service, simply uninstall the App from your device.

7. Children's Privacy (COPPA Compliance)

Our App is not intended for children under the age of 13. We do not knowingly collect personally identifiable information from children under 13. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us so that we will be able to verify and take necessary actions.

8. Governing Law

This Privacy Policy shall be governed and construed in accordance with the laws of Ukraine, without regard to its conflict of law provisions.

9. Changes to this Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us at: listumi.app@gmail.com