Privacy
Privacy Policy
What Listify processes, why, with whom, and how you control it.
Last updated: October 12, 2026
This is a translation of the original Portuguese version. If they differ, the Portuguese version prevails.
- You sign in with your Google or Apple account; we store the identifier, e-mail, name and (with Google) your profile photo.
- Your lists are stored on the Listify server, so you can see them on any device and share them.
- People who receive a shared list see its content and your name and e-mail — only for that list.
- No analytics, advertising or tracking SDK is included in the app. Listify PRO is billed by Apple: we receive no payment data.
- You can delete your account and all your data right in the app (Settings › Delete my account), at any time.
1. Who we are
Listify is developed and maintained by Cristiano Costa. This policy describes how the Listify app (iPhone, iPad and Mac) and the service it uses process data.
2. What we DO NOT do
- We don’t use analytics, attribution, advertising or cross-app tracking SDKs (no such framework is included in the app).
- We don’t sell, rent or share your data with advertisers or data brokers.
- We don’t access your device’s contacts, photos, location, microphone or camera.
- Face ID / Touch ID unlock is verified by the device itself: Listify only receives “confirmed” or “not confirmed” and never has access to biometric data.
3. What we process, and why
| Data | Purpose | Where it is kept |
|---|---|---|
| Account identifier (Google or Apple), e-mail, name and photo | Identify your account, know who owns each list and show, in a shared list, who takes part in it. With Apple, the e-mail may be the private relay address Apple generates if you choose to hide yours | Listify server |
| Your lists and items (titles, descriptions, quantities, dates, priorities, custom fields, comments, chosen images, ratings, reviews, pages read, the person assigned to each task and your yearly reading goal) | This is the app’s content: store, organize and show your lists on all your devices. When you import from Goodreads or Letterboxd, the file is read on the device and only the items go to the server | Listify server |
| Stores, aisle order and each product’s section | Open the grocery list grouped in the order you walk through the store. The aisle order is the one you set; the position of products within each aisle is learned from the sequence in which you check items off | Listify server |
| Purchase history and prices (each item checked off as bought: product, date, store, quantity and the price, if you entered one) | Show the cart total, spending per month, per store and per product, each product’s price history, and suggest what to restock based on how often you buy it | Listify server; deleted along with the list or the account |
| Listify PRO subscription status (App Store transaction identifier, expiration) | Know whether your account has PRO, checking with Apple. We don’t receive the card holder’s name, number or any payment data — billing is entirely Apple’s | Listify server; deleted along with the account |
| Sign in with Apple refresh token | Only so we can revoke Listify’s access to your Apple Account when you delete your account, as Apple requires | Listify server; deleted along with the account |
| Device session token | Keep you signed in without asking you to log in every time | On the device; expires after 30 days and is removed when you sign out |
| Preferences (language, sort order of each list, reminder time) | Remember how you left the app | Only on the device |
| Reminders, widgets and Siri (titles of tasks with due dates, of items to buy and of series with a new season) | Reminders are local notifications scheduled by the device itself — no notification server receives your data. Widgets show a summary of My Day and your grocery list stored on the device. So Siri shortcuts work without opening the app, the session token and list names are kept on the device | Only on the device; removed when you sign out |
| Device notification token, with the language and device type (only if you turn on "Shared list alerts" in Settings) | Notify you when someone adds an item to a list shared with you or assigns you a task. The notification, with the list name, the first name of who did it and the item title, is delivered by Apple Push Notification service (APNs) | Listify server; deleted when you turn alerts off, sign out or delete the account |
Communication between the app and the server uses HTTPS.
4. Shared lists
When you share a list by entering the e-mail of someone who also uses Listify, that person can see and edit the content of that list and sees your name, e-mail and photo as a participant. They don’t have access to any other list of yours. In a shared task list, any participant can assign a task to another one, and everyone sees that name. People who turned on alerts get a notification with the first name of whoever added an item or assigned a task. You can remove sharing at any time, and the person who received it can leave the list.
5. Third-party services
No third party receives the content of your lists. Those involved are:
- Google — authentication (sign in with Google). We receive the identifier, e-mail, name and photo from Google.
- Apple — authentication (Sign in with Apple): we receive the identifier, the e-mail (real or relay) and, on first sign-in, the name.
- Apple — Listify PRO subscription: purchase, renewal and cancellation happen on the App Store. The app sends our server only the transaction identifier, which we check with Apple.
- Search for books, movies, series and product images — when you use search while adding an item, only the typed term is sent, through our server, to public sources: product photos (DuckDuckGo, Pixabay, Open Food Facts and Pexels), books (Open Library, Google Books and Apple Books) and movies and series (IMDb and Wikipedia). No data about you or your account goes with it. Pixabay and Pexels images chosen for an item are copied to our server; the others are loaded by the app directly from their original servers.
- Apple — Siri and Shortcuts: what you say is processed by Apple; Listify only receives the item text and the chosen list.
- TVmaze — to show when the next episode of the series on your list comes out, our server queries TVmaze with the show name only, with no data about you.
No ad networks, analytics platforms or data brokers are involved.
6. Legal basis and your rights
We process your data to provide the service you asked for (Brazil’s LGPD, art. 7, V; for users in the European Union, performance of a contract under art. 6(1)(b) of the GDPR). At any time you can delete your account right in the app, or request access, correction, portability or deletion of your data by writing to the e-mail at the end of this page.
7. Retention and deletion
- On the device: preferences and the session token are removed when you sign out or uninstall the app.
- On the server: your lists are kept while the account exists. Completed tasks go to the Trash, where they can be restored or permanently deleted.
- Deleting the account: in
Settings › Delete my account, the app immediately deletes the account, all your lists (with items, comments, sharing and purchase history), your stores and the photos you uploaded, and, if you signed in with Apple, revokes Listify’s access to your Apple Account. Lists you shared also stop existing for the people who received them. Items you added to other people’s lists stay there, with no link to you. You can also request deletion by e-mail. - New account notice: when an account is created, the developer receives an e-mail with its name and e-mail, only to be able to block abusive accounts.
8. Security
Access to your data requires signing in with your Google or Apple account, and each list is accessible only to its owner and the people they shared it with. The device token is signed by the server and expires. The app can be protected with Face ID / Touch ID. No system is perfectly secure: if we become aware of an incident affecting your data, we will notify you and the competent authority.
9. Children
Listify is not directed to children under 13 and does not knowingly collect data from them.
10. Changes to this policy
If this policy changes significantly, we update the date at the top of this page. We recommend revisiting it periodically.
11. Contact
Privacy questions or data deletion requests: