Privacy Policy

Last updated: 9 October 2026

1. Controller

2. What this is about

Our Lists is an app for iPhone and Apple Watch for managing shopping, inventory and to-do lists together. This policy describes which personal data is processed, why, for how long, and what rights you have.

We use no advertising, no analytics or tracking services, and we do not pass data on for advertising purposes.

3. Data we process

3.1 Your account

Email address, nickname (display name; if you leave it empty we use the part of your email address before the @), password (stored only as an irreversible hash, never in plain text), role, time of registration and email confirmation, and the time of your last activity in the app.
Purpose: providing your account and the app. Legal basis: performance of a contract, Art. 6(1)(b) GDPR.

3.2 Your content

Lists with items (name, quantity, category, place, target date, optionally a photo), your own categories and places, favorites, the time you last opened a list, and your groups and shares.
Purpose: core function of the app. Legal basis: Art. 6(1)(b) GDPR.

3.3 Shares and groups: what others see of you

• If you share a list (with a person or a group), the people involved see the list and its items. Items you added show your nickname.
• If you are a member of a group, all members of the group see your nickname, your email address and your role (owner, administrator, member).
• You can only add people whose exact email address you know. There is no user search.

3.4 Emails

We send you emails with codes (email confirmation at registration, invitation, password reset) and a notice when someone shares a list with you. Emails are sent through our email provider (see section 4). Legal basis: Art. 6(1)(b) GDPR.

3.5 Push notifications

Only if you allow them in iOS. We store a device token for this. A notification may contain list or group names, item names and another person's nickname (e.g. "Anna shared the list "Weekly shopping" with you"). Delivery runs through the Apple Push Notification Service.
Legal basis: your consent, Art. 6(1)(a) GDPR. You can withdraw it at any time in the iOS settings under "Notifications". We delete the token when you delete your account or when it is suspended.

3.6 Camera, barcodes and photos

The app uses the camera only with your permission, for scanning barcodes and for item photos.

• Barcode: The barcode is sent to our server, which asks Open Food Facts for the product name. Only the barcode is transmitted, nothing about you.
• Item photos are stored on our server. They stay as long as the item exists (open or completed). They are deleted when you delete the item, replace or remove the photo, delete the list permanently (not already when moving it to the trash) or delete your account. If a file without an item is left over anyway, the server cleans it up after one day at the latest.

3.7 Data on your device

Your sign-in token is kept in the iOS Keychain, your user ID and role in the app's settings on the device. The Apple Watch app shows lists via the paired iPhone and stores nothing itself.

3.8 Server logs

When you use the app interface or this website, our web server logs: a shortened IP address (for IPv4 the last number is set to 0, for IPv6 only the first groups are kept), time, requested domain and path (without search terms), status code, amount of data transferred and the identifier of the app or browser. Error logs may contain the full IP address.
Purpose: operation, error analysis, protection against attacks. Legal basis: legitimate interest, Art. 6(1)(f) GDPR. Retention: 14 days, after which the logs are deleted.

To protect against abuse (e.g. password guessing) the server briefly counts requests per IP address in memory. This is not stored permanently.

3.9 Administration

The operator can view a user list with nickname, email address, role, registration time, last activity and confirmation status, and can suspend or delete accounts. Purpose: operating the app and protecting against abuse; legal basis: Art. 6(1)(f) GDPR.

4. Recipients and processors

• STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany: hosting of the server (database, app server, websites), sending of emails and storage for backups (HiDrive). Strato processes the data on our behalf.
• Apple: delivery of push notifications. When you download the app through the App Store or TestFlight, Apple processes data under its own responsibility.
• Open Food Facts: the barcode only, see 3.6.

We do not pass personal data on to anyone else.

5. Backups

The database (all accounts and content) is backed up daily to storage at STRATO. The last 7 backups are kept. Deleted data therefore also disappears from the backups after 7 days at the latest. The photo files themselves are not part of these backups.

6. Retention and deletion

• Account and content: until you delete your account. You can do that at any time in the app under Konto → Konto löschen (Account → Delete account). This deletes your account, your lists with their items and their photos, your categories and places, your groups (with memberships and list shares), your memberships in other people's groups, your shares and your push token. Items you added to other people's lists remain there without any link to your name.
• Trash: lists you move to the trash can be deleted permanently there at any time.
• Suspended accounts: if an account is suspended for abuse, the email address and the suspension flag stay stored so the suspension cannot be bypassed by registering again (Art. 6(1)(f) GDPR).
• Codes in emails: confirmation and reset codes are valid for 15 minutes, invitation codes for 7 days. They are stored only as a hash and deleted after use.
• Item photos: as long as the item exists (see 3.6).
• Server logs: 14 days. Backups: 7 days.

7. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16; you can change your nickname in the app), erasure (Art. 17; in the app), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw a consent you gave (push notifications) at any time with effect for the future. Write to us at support@our-lists.de.

You also have the right to lodge a complaint with a data protection supervisory authority, for example the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59–61, 10555 Berlin, Germany, www.datenschutz-berlin.de.

8. Required information

You need an email address and a password to create an account and use the app. The nickname is optional. Push notifications and camera access are voluntary.

9. No tracking, no automated decisions

There is no profiling and no automated decision-making. This website sets no cookies and loads no external resources.

10. Security

All connections between the app and the server are encrypted with HTTPS. Passwords are stored only as a hash.

11. Changes

We update this policy when the app or the legal situation changes. The current version is always available at this address.