Privacy Policy

1. Introduction

Welcome to List Owl ("we," "our," or "us"). We are committed to protecting your privacy and ensuring you understand how your personal information is collected, used, and shared when you use our mobile application ("App").

This Privacy Policy explains our practices regarding the collection and use of your information through the List Owl App, available on Android and iOS devices.

By using the App, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies, please do not use the App.

2. Information We Collect

2.1 Account Information

When you sign in with Google or Apple, we collect:

• Email address - Used to identify your account and enable cloud sync. Apple users who choose "Hide My Email" share only a private relay address.
• Display name - Shown to family members when using family sharing features. Apple Sign-In users may opt out of sharing their name, in which case a default name is used.
• Profile photo URL - For Google Sign-In, displayed in the app and to family members. Apple Sign-In does not provide a profile photo.
• User ID - A unique identifier for your account

2.2 Shopping List Data

We collect and store the following data you create within the App:

• Shopping list items (names, quantities, prices)
• Custom products you add to your personal catalog
• Purchase history (items marked as bought, timestamps, who bought each item)
• List preferences (Default, Monthly, Family lists)
• Badge and achievement progress (shopping streaks, milestones)
• Activity events (items added, items bought, lists completed, recipes generated, badges earned)
• Frequent product data derived from your purchase history

2.3 Family Sharing Data

If you use the Family Sharing feature (Premium), we collect:

• Family list membership information
• Which family member added or modified each item
• Invite codes for joining family lists

2.4 Device Information

We automatically collect certain device information:

• Device type and operating system version
• App version
• Device tokens for push notifications
• General usage data and app interactions

2.5 Analytics and Crash Data

To improve the App, we collect:

• Crash reports and error logs
• App performance metrics
• Feature usage statistics
• Attribution data (how you discovered the App)

2.6 AI Recipe Data

When you use the AI Recipe Generation feature (Premium), we collect:

• Dish name and number of people you specify
• Language preference for the generated recipe
• The AI model used to generate the recipe
• Timestamps of recipe generation requests
• Generated recipe content (ingredient lists)

2.7 Voice Input Data

When you use the Voice Input feature to dictate items into the add-item field, the App requests microphone access and uses your device's built-in speech recognition service (Google on Android, Apple on iOS) to transcribe your speech to text. Specifically:

• Audio is captured only while you are actively recording (tap-and-hold or tap-to-record).
• The audio stream is processed by the operating system's speech recognition service, which may transmit it to the OS vendor's servers for transcription, depending on the device and language settings.
• List Owl receives only the final transcribed text — we do not record, store, or transmit raw audio to our servers.
• The transcribed text is added to the add-item field on your device and is only saved if you confirm the add.

2.8 Barcode Scan Data

When you use the Barcode Scanner feature, the App requests camera access to read product barcodes (EAN/UPC). Specifically:

• Barcode decoding is performed locally on your device — no images or video frames are uploaded.
• The decoded barcode number is sent to our backend (Cloudflare Workers) to look up the product. If we do not have the product cached, the backend queries third-party product databases (Open Food Facts and UPCitemdb) using the barcode number only.
• The product name and category returned by these services may be cached on our backend (Cloudflare KV) to speed up future scans across all users. No user-identifying information is associated with cached entries.

2.9 Activity & Achievement Data

To support features like badges, smart reminders, and your activity timeline, we collect:

• Activity timeline events (items added, items bought, lists completed, recipes generated, badges earned)
• Badge and achievement progress (shopping streaks, milestone counts, purchase totals)
• Shopping frequency patterns used for smart reminders and frequent product suggestions

3. How We Use Your Information

We use the collected information for the following purposes:

4. Third-Party Services

We use the following third-party services to operate and improve our App:

4.1 Google Firebase

4.2 Google Sign-In

4.3 Apple Sign-In

4.4 RevenueCat

4.5 Sentry

4.6 Singular

4.7 Cloudflare Workers

4.8 Anthropic (Claude AI)

4.9 Cloudflare AI

4.10 Open Food Facts

4.11 UPCitemdb

4.12 Device Speech Recognition (Google / Apple)

4.13 PostHog

5. Data Storage and Security

5.1 Where We Store Your Data

• Local Storage: Shopping list data is stored locally on your device for offline access
• Cloud Storage: For Premium users, data is synchronized to Google Cloud Firestore servers
• Data Centers: Our cloud services are hosted in secure data centers operated by Google

5.2 How We Protect Your Data

• All data transmissions are encrypted using TLS/SSL
• Authentication is handled securely through Google Sign-In
• Shared item links use encryption and HMAC signatures
• Access to cloud data requires authenticated sessions
• We follow industry-standard security practices

6. Data Sharing

We do not sell your personal information. We may share your information in the following limited circumstances:

• Family Sharing: When you use family sharing, your display name and profile photo are visible to family members, along with items you add to shared lists
• Service Providers: We share data with third-party services listed in Section 4 to operate the App
• Legal Requirements: We may disclose information if required by law or to protect our rights and safety
• Business Transfers: In the event of a merger or acquisition, user information may be transferred

7. Your Rights and Choices

7.1 Access and Control

• View your data: Your shopping lists and account information are visible within the App
• Delete items: You can delete individual items or clear entire lists at any time
• Delete custom products: Remove custom products from your personal catalog
• Sign out: You can sign out of your account at any time through the App settings

7.2 Account Deletion

To request complete deletion of your account and associated data, please contact us at support@avio.space. We will process your request within 30 days.

7.3 Notifications

You can control notifications through:

• In-app daily reminder settings
• Your device's notification settings

7.4 Analytics Opt-Out

The App includes privacy controls for analytics. You may also limit ad tracking through your device settings.

8. Children's Privacy

List Owl is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately at support@avio.space, and we will take steps to delete such information.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States, where our third-party service providers operate. These countries may have different data protection laws. By using the App, you consent to this transfer. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

10. Data Retention

We retain your information for as long as your account is active or as needed to provide you services. Specifically:

• Account data: Retained until you delete your account
• Shopping list data: Retained until you delete the items or your account
• Purchase history: Retained to provide smart notification features
• Smart reminder events: Retained for 30 days, then automatically cleaned up
• AI recipe usage data: Retained with your account for recipe history
• Activity timeline events: Retained with your account to support badges and activity history
• Analytics data: Retained in aggregated form for trend analysis
• Crash reports: Retained for 90 days for debugging purposes

11. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect and how it is used
• Right to delete your personal information
• Right to opt-out of the sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising your privacy rights

To exercise these rights, contact us at support@avio.space.

12. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right of access: Request a copy of your personal data
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your data
• Right to restrict processing: Request limitation of data processing
• Right to data portability: Receive your data in a portable format
• Right to object: Object to processing of your data
• Right to withdraw consent: Withdraw consent at any time

Our legal basis for processing your data includes: performance of a contract (providing the App services), legitimate interests (improving the App), and consent (for analytics and marketing).

13. Permissions We Request

The App requests the following device permissions:

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by:

• Posting the new Privacy Policy on this page
• Updating the "Effective Date" at the top
• Sending an in-app notification for material changes

We encourage you to review this Privacy Policy periodically for any changes.