Privacy Policy
Last updated: 2026-06-10. Effective: 2026-06-10
Who we are
Shop Assistant ("we", "us") provides a collaborative shopping-list application for the web and iOS. For privacy questions contact privacy@shop-assistant.app.
What this policy covers
How we collect, use, store, and protect your personal data, and the rights you have over it under the UK GDPR.
Data residency
All personal data and diagnostic logs are stored in the European Union.
Data we hold
Account data: your name (optional), email address, sign-in methods (magic link, passkeys, and Apple/social sign-in identifiers where used), locale and unit preferences, and your subscription/entitlement status.
Household & catalogue data: households you create or join, their members, shops, items, categories, in-store notes, photos you upload, and share links. Shop records may include an OpenStreetMap reference, address, brand, opening hours, and a coordinate you provide (device GPS or a pin you place) used as a geofence anchor for shops you add.
Operational data: audit records of account-meaningful actions ("who did what"), sign-in attempt outcomes, and PII-scrubbed diagnostic/error logs.
We do not store payment card details. Payments are handled by Stripe (see processors).
How we use it
To provide the service (sync your lists across devices and household members), authenticate you, manage subscriptions, send the notifications and transactional emails you have not opted out of, keep the product secure, and diagnose faults. We rely on contract (providing the service you signed up for), legitimate interests (security, fault diagnosis, abuse prevention), and consent (where required, e.g. optional notifications) as our legal bases.
Processors (sub-processors)
We share data only with the processors below, each acting on our instructions.
| Processor | Purpose | Notes |
|---|---|---|
| Cloudflare | Web security, hosting, database, object storage, image processing, and cookieless Web Analytics | EU jurisdiction; Web Analytics is cookieless and does not track individuals |
| Stripe | Subscription payments (web) | We never receive card details; Stripe is the payment processor |
| Apple | In-app purchases & Sign in with Apple | |
| In-app purchases & Google Sign in | ||
| Microsoft (Sign ins) | Microsoft Sign in | |
| LocationIQ | Shop search / discovery | Returns OpenStreetMap data we may store |
| OpenStreetMap | Map data underlying shop discovery | © OpenStreetMap contributors; ODbL |
| Wikidata / Wikimedia Commons | Brand logos for recognised shops | |
| Microsoft (Exchange Online) | Transactional email delivery (magic links, invites, billing notices) | Sent from an EU-based tenant; recipient address + email contents are processed by Microsoft |
Cookies
We use a small number of strictly necessary cookies: an httpOnly session cookie and a readable CSRF token cookie. We do not use advertising or cross-site tracking cookies. Cloudflare Web Analytics is cookieless.
Retention
- Account data: kept while your account is active; erased/anonymised on account deletion (see below).
- Audit log: 30 days, then deleted; entries are anonymised when the acting user deletes their account.
- Admin audit log: 365 days; references to a deleted user are pseudonymised, not retained as PII.
- Diagnostic/error logs: PII-scrubbed; 30 days.
Your rights
You have the right to access, rectify, erase, restrict, and port your personal data, and to object to certain processing. In the app:
- Export your data: Account → Privacy and data → Download my data produces a machine-readable JSON file containing your profile, sign-in methods, preferences, subscription history, and the full contents of the households you own. Households you only belong to are excluded. That data belongs to the household's owner.
- Delete your account: Account → Privacy and data → Delete account. This is irreversible. You must first transfer or delete any households you own. On deletion we anonymise your personal data, cancel future Stripe renewals, and (if you have an active Apple subscription) advise you to cancel it via Apple. Deleting your account cannot stop Apple billing.
To exercise rights not covered in-app, contact privacy@shop-assistant.app. You may also complain to your supervisory authority (in the UK, the ICO).
Age minimum
The service is not intended for children under 13. By using it you confirm you are at least 13 years old.
Changes
We will post changes here and update the "Last updated" date; material changes will be notified by email.