Privacy policy

Who operates Listamo?

Listamo is developed by Nikola Pavlović under the developer name NikoLab. Contact [email protected] for privacy questions and requests. This policy covers the Android/web app and listamo.app website.

Information and purpose

We process your account email and identifier for sign-in, verification and recovery through Supabase Auth. Google sign-in shares basic identity data with Google and Supabase, including name, email and the profile picture Google provides. Passwords are handled by Supabase Auth; never email them to support.

We store lists, item names, quantities, units, notes, purchase status, memberships, invitation information and change history to provide shared shopping and synchronization. Members see the display name/initials associated with item creation and purchase marking. A short profile description is shared only if you enable it and only with people who share a list with you. Your email is not displayed to list members. Previously saved offline copies may retain information until refreshed.

Infrastructure providers may process IP addresses, request times, browser information and service errors for delivery, authentication, security and troubleshooting. Support emails are used to answer requests and verify account ownership.

Providers and processing

Supabase provides account, database and synchronization services in our Frankfurt project. Cloudflare delivers the website and web app. Google provides optional sign-in and Gmail handles support email. These providers may process technical or support information internationally under their own terms and safeguards. We do not sell your personal data.

Device storage and language

Guest lists stay on your device. Signed-in lists and unsent offline changes are cached for the same account. Signing out does not erase those local copies. Public application files may be cached for offline loading; authentication/API responses are not service-worker cached.

Cloudflare's country signal selects Serbian for Serbia and English elsewhere. A functional cookie and browser preference remember your manual language choice. We do not send your IP to an additional geolocation service. There are no added advertising trackers or analytics cookies.

Retention and your choices

Account and list data remain until deletion. Archiving a list is not permanent deletion; soft-deleted items may remain for synchronization. Request account/data deletion by email; after ownership verification we process it within 30 days. Minimal request evidence is retained for up to 90 days after completion. Provider logs/backups follow provider retention policies. Any specific legal/security exception is communicated with its reason and period.

Owned shared lists are removed for all members. Other owners' lists/item text and their offline copies may remain. Author/checker references to a deleted account are cleared. We cannot erase copies on someone else's offline device.

Contact support to request access, correction, a copy or deletion of data. Do not send passwords or sign-in codes. Uninstalling or revoking Google consent does not delete your account.

Scope

Listamo is intended for users aged 13 and older. This version does not require location or contacts, use advertising SDKs, or provide voice/AI services. Facebook and Apple sign-in are not currently available. We may update this policy when the app changes.