Privacy Policy of ListoShopping

Last updated: [22/04/2026]

This Privacy Policy describes how ListoShopping (“the Application”) collects, uses, and protects Personal Data. By using the Application, Users agree to the practices described in this document.

1. Owner and Data Controller

Devsight Ltd 

2. Types of Data Collected

2.1 Data Provided Directly by the User

• Name (if account creation is enabled)

• Email address (for account, backup, or support)

• Items added to shopping lists

• Price entries, store names, and purchase history

• Preferences and settings

2.2 Data Collected Automatically

• Device information (model, OS version)

• Usage Data (features used, interactions)

• Crash logs and diagnostics

• IP address (for security and analytics)

2.3 Data Collected Through Third‑Party Services

Depending on the User’s choices, the Application may integrate:

• Analytics (e.g., Google Analytics for Firebase)

• Crash reporting (e.g., Firebase Crashlytics)

• Cloud sync (e.g., Supabase or similar backend)

• Authentication providers (email/password or OAuth)

Each third‑party service may collect Data according to its own Privacy Policy.

2.4 Permissions Requested

To function properly, the Application may request:

• Camera access (for barcode scanning)

• Internet access (for sync and updates)

• Local storage (to save lists offline)

Permissions are used strictly for the features described and never for unrelated purposes.

3. Purpose of Data Collection

ListoShopping collects Data for the following purposes:

• Providing core features (shopping lists, price tracking)

• Syncing data across devices

• Improving app performance and stability

• Analytics to understand feature usage

• Responding to support requests

• Preventing fraud or misuse

• Complying with legal obligations

The Application does not sell Personal Data or use it for profiling.

4. Mode and Place of Processing

4.1 Methods of Processing

Data is processed securely using IT systems and organizational measures to prevent unauthorized access, modification, or deletion.

4.2 Data Processors

Authorized personnel and third‑party service providers may access Data solely for operational purposes.

4.3 International Transfers

Data may be transferred outside the UK/EU depending on server locations. When this occurs, Devsight Ltd ensures appropriate safeguards (e.g., Standard Contractual Clauses).

5. Legal Basis for Processing

Devsight Ltd processes Personal Data based on:

• User consent

• Contractual necessity (providing the service)

• Legal obligations

• Legitimate interests (improving the Application)

6. Retention Time

Data is retained only as long as necessary:

• Account data: until the User deletes their account

• Usage and analytics data: per third‑party retention policies

• Legal obligations: as required by law

After expiration, Data is securely deleted.

7. User Rights (GDPR & UK GDPR)

Users may:

• Withdraw consent

• Access their Data

• Request correction

• Request deletion

• Restrict processing

• Object to processing

• Request Data portability

• File a complaint with a data protection authority

Requests can be submitted via the contact details above.

8. Children’s Privacy

ListoShopping is not intended for children under 13 (or under 16 in the EU). The Application does not knowingly collect data from children.

If such data is discovered, it will be deleted promptly.

9. Third‑Party Services Used

Depending on configuration, the Application may use:

• Firebase Analytics (usage statistics)

• Firebase Crashlytics (crash reporting)

• Supabase / cloud backend (sync and storage)

• Authentication providers (email or OAuth)

Users should review the privacy policies of these services.

10. Data Safety (Google Play Compliance)

The Application:

• Collects personal and app activity data

• Uses data for app functionality, analytics, and crash reporting

• Does not share data with third parties for advertising

• Does not sell personal data

• Allows Users to request deletion of their data

• Encrypts data in transit

• Does not allow unauthorized third‑party access

11. “Do Not Track” Requests

The Application does not support “Do Not Track” signals. Third‑party services may handle such requests differently.

12. Changes to This Policy

The Owner may update this Privacy Policy at any time. Users will be notified through:

• This page

• In‑app notifications (where feasible)

Users are encouraged to review this page periodically.

13. Contact

For questions or Data requests:

Devsight Ltd main website www.devsight.com