Privacy Policy

1. Information we collect

Information you provide

• Account information. When you create an account we collect your email address and a display name. If you sign in with Apple or Google, we receive your name and email address from that provider (Apple may give you a private relay email; Google also provides your profile picture). We use your name to create your display name and your public @username.
• Content you create. The places, lists, trips and itineraries, categories, notes, and photos you add. Place data can include names, addresses, map coordinates, and your own notes. Photos are the cover and place images you choose to upload.
• Profile photo. Optional, only if you upload one.
• Support communications. If you email us, we keep that correspondence.
• Reports.If you report a shared list or trip, we record the reason, what you reported, and your account ID (or, if you aren't signed in, a one-way hash of your IP address — never the address itself). The owner of the content is never told who reported it.

Information collected automatically

• Usage and diagnostics. We use Google Firebase Analytics and Firebase Performance Monitoring to understand how the Service is used (for example, screens viewed and features used) and to measure performance. We use Firebase Crashlytics to receive crash reports so we can fix bugs. These include standard device and app information (device model, operating system version, app version, and similar identifiers).
• Anti-abuse attestation. We use Firebase App Check (Apple DeviceCheck) to verify that requests come from the genuine App. This uses a device-level token and is not used to identify you.
• Advertising attribution. If you installed Listcrafto from an Apple Search Ads campaign, we use Apple's attribution token to measure which campaign led to the install. We do not use third-party advertising trackers.

Location

The App can use your device location in two ways. Both are optional, and you can decline either without losing access to the rest of the App.

While you are using the App. With “While Using the App” access, the App centers the map on you and can show which of your saved places are nearby.

Arrival notifications. If you turn on arrival notifications and grant “Always” access, the App can notice when you reach a place where you have saved places — for example, landing in a city on one of your lists — and tell you even while the App is closed. This is off unless you turn it on, and you can turn it off in the App's notification settings or revoke the permission in iOS Settings at any time.

To recognize when you have arrived somewhere new, the App keeps a short history of the general areas you have visited on your device only: your most recent position, plus up to sixty area records, each holding an approximate center point, when it was last seen, and how often you have been there. This history is never sent to our servers, is not part of any backup we hold, and is deleted when you sign out or delete the App.

Comparing your position against your saved places happens entirely on your device. The one exception is naming the place: to turn coordinates into a city name for the notification, the App asks Apple's geocoding service, which receives that coordinate and nothing else about you. Your location is never stored on our servers unless you explicitly save a place at that location.

2. How we use information

We use the information above to:

• provide, operate, and sync the Service across your devices;
• create your account, display name, and public @username;
• render the lists and trips you choose to share as public web pages;
• measure performance, diagnose crashes, and improve the Service;
• protect against abuse, fraud, and security threats, and review reports;
• respond to your support requests; and
• comply with legal obligations.

We do not sell your personal information, and we do not use your content to build advertising profiles.

3. What becomes public when you share

Your content is private by default and visible only to you.

When you choose to share a list or trip, we publish a public web page at listcrafto.com/your-username/list/… or …/trip/…. Anyone with the link can open it. That page shows your @username, your display name, and the content of that specific list or trip (place names, notes, cover photo, and similar). Nothing else from your account is made public. When you stop sharing, the public page is removed. Someone who saved a copy of your shared list or trip to their own account before then keeps that copy.

Anyone who can see shared content can report it to us. We review reports and may remove content, or suspend an account, that breaks our Terms of Service.

4. How we share information

We share information only with:

• Google (Firebase and Google Cloud Platform) — authentication, database, file storage, backend functions, analytics, performance monitoring, and crash reporting. Data is processed on Google Cloud, primarily in the United States.
• Apple — Sign in with Apple, App Store subscription billing, DeviceCheck attestation, and the geocoding service described above.
• Legal and safety — when required by law, or to protect the rights, safety, and property of Listcrafto, our users, or others.
• Business transfers — if we are involved in a merger, acquisition, or sale of assets, subject to this Policy.

5. Payments

Subscriptions (for example, Compass) are sold and billed through the Apple App Store. We never receive or store your payment card details — Apple handles payment. So that Compass works on every device you sign in to, we keep a record of your subscription that we receive from Apple: the plan, its status and renewal or expiry dates, whether it is in a free trial, its price and currency, the App Store country, and an identifier that links the purchase to your Listcrafto account. If you move a subscription to another Listcrafto account, we record when it moved. If you delete your account, the subscription is unlinked from it — it keeps renewing with Apple until you cancel it in your Apple Account settings.

6. Data retention and deletion

• Content you delete in the App is kept in a recently deleted state and permanently removed after about 30 days.
• You can delete your account at any time in the App under Profile → Delete Account. To protect you, we first ask you to confirm it's you (your password, or Sign in with Apple or Google). Deletion then starts immediately and normally completes within a few minutes. It permanently removes your profile, lists, places, trips, uploaded photos, username, and sign-in account, and any links you shared stop working. This cannot be undone.
• Deleted content and deleted accounts can remain in our encrypted database backups for up to 30 days, after which the backups expire. We use backups only to recover from errors or data loss.
• Reports of shared content are kept as moderation records for up to 12 months after they are resolved, including after either account is deleted.
• We keep other information only as long as needed for the purposes in this Policy or as required by law.

Connected sign-in accounts:

• Sign in with Apple: deleting your Listcrafto account also asks Apple to revoke Listcrafto's access. If it still appears in your Apple Account's Sign in with Apple list, you can remove it there.
• Google: deleting your Listcrafto account does not remove Listcrafto from your Google Account's connected apps. To do that, visit your Google Account (Security → Third-party access).

7. Security

We protect your data with Firebase Authentication, server-side security rules that restrict access to your own data, App Check attestation, and encryption in transit and at rest. No method of transmission or storage is 100% secure, but we work to protect your information.

8. Children

The Service is not directed to children under 13 (or the minimum age required in your country, such as 16 in parts of the European Economic Area). We do not knowingly collect personal information from children under that age. If you believe a child has provided us personal information, contact us and we will delete it.

9. The website

The website does not use advertising or analytics cookies. It may store your chosen color theme in your browser so the page looks the same on your next visit. Shared list and trip pages show content the owner chose to make public.

10. Your rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, or to object to or restrict certain processing. You can edit most of your information directly in the App and delete your account at any time. To make any other request, contact support@listcrafto.com. We will respond within the time the law requires.

• EEA and UK (GDPR): our lawful bases are performance of our contract with you (providing the Service), our legitimate interests (securing and improving the Service), your consent (where required, such as location), and legal obligations. You may also complain to your local data protection authority.
• California (CCPA/CPRA): we do not sell or “share” personal information for cross-context behavioral advertising. You may request access or deletion as described above, and we will not discriminate against you for doing so.

11. International transfers

We are based in the State of Washington, United States, and our infrastructure is located primarily in the United States. If you use the Service from outside the U.S., your information will be transferred to and processed in the U.S. and other countries where our providers operate.

12. Changes to this Policy

We may update this Policy from time to time. We will update the “Last updated” date above and, for material changes, give notice in the App or by email before they take effect.

13. Contact us