Privacy Policy

Smart Shopping List (Android and iPhone) · Effective 16 October 2026

Smart Shopping List is a shared shopping-list app. This policy explains exactly what it collects, why, who it is shared with, and how to get it deleted. It is written to be read, not to be survived.

Who is responsible

The app is made by AS-Devs. On Google Play it is published under that name; on the App Store it is published under the name of AS-Devs’ developer, Dejan Stankovic, because Apple lists individual developers by their legal name. For any privacy question or request, write to smartshoppinglist@as-devs.com.

What we collect

Data	Why	Kept until
Email address	To create your account, sign you in and let group owners invite you.	You delete your account.
Username	Shown to the other members of your group.	You delete your account.
Your lists: items, stores, quantities, notes, category order	The function of the app. Shared with the members of your group, and with nobody else.	You delete them, or delete your account.
Group membership	To know whose list you can see.	You leave the group or delete your account.
Purchase status (“ads removed”)	To stop showing you ads on every device you sign in on.	You delete your account.
Advertising ID and standard ad-request data. On iPhone, the advertising identifier (IDFA) is used only if you allow tracking when the app asks.	Used by Google AdMob to serve ads in the free version.	Governed by Google’s policy, linked below.
Crash and error reports: what went wrong and where in the app, the app version, the device model and the Android or iOS version	To find and fix crashes. No email, username or list content is attached, and IP addresses are not stored.	Deleted automatically within 90 days.
Language, theme and unit preference	Stored only on your own device, never uploaded.	You uninstall the app.

We do not collect your location, contacts, photos, files, call or message data, or health data. The app requests no location permission: to pick a starting language it reads the region already set in your device’s language settings, which requires no permission and never leaves your device.

Who your data goes to

Supabase — hosts the database and the sign-in system. Data is stored in the EU and encrypted in transit. Supabase privacy policy.
Google AdMob — serves ads in the free version and receives the advertising ID. How Google uses data from apps that use its services.
Sentry — receives the crash and error reports described above, so that we can fix what broke. Stored in the EU. It never sees your account details or your list. Sentry privacy policy.
Google Sign-In — only if you choose to sign in with Google, and only to verify who you are.
Sign in with Apple — only if you choose it, and only to verify who you are. The app asks Apple for your email address and nothing else; if you choose to hide it, we only ever receive the private relay address Apple creates for you.
RevenueCat — the purchase system the app is built on. It receives your account identifier so that a future purchase could be recognised; there is nothing on sale today, so it processes no payments. It never sees your list. RevenueCat privacy policy.

We do not sell your data and we do not share it with anyone not listed above.

Advertising and your consent

The free version shows ads through Google AdMob. If you are in the EEA, the UK or Switzerland, you are asked for consent the first time you open the app, and you can change that choice at any time in Account → Settings → Ad privacy options.

On iPhone, the app also asks whether it may use your device’s advertising identifier (Apple’s App Tracking Transparency prompt). If you decline, you still see ads, but they are not personalised with that identifier. You can change your answer at any time in iOS Settings → Privacy & Security → Tracking.

Deleting your account and data

In the app: Account → Settings → Delete account. Deletion is immediate and permanent.

Without the app installed: see smartshoppinglist.as-devs.com/delete-account.

Deleting your account removes your login, your profile, and your group together with its shared list, its items and its stores — for every member of that group. There is no grace period and no backup copy kept for our own purposes; encrypted infrastructure backups are cycled out within 30 days.

Your rights

If you are in the EEA or the UK, the GDPR gives you the right to access, correct, export, restrict or erase your data, and to object to processing. The lawful bases we rely on are performing our contract with you (running the app), your consent (personalised ads), and our legitimate interest in keeping the service working and free of abuse. Most of these you can exercise directly in the app; for anything else, write to the address above and we will respond within 30 days. You may also complain to your national data protection authority.

Children

The app is not directed at children under 13 and we do not knowingly collect their data. If you believe a child has created an account, write to us and we will delete it.

Changes

If this policy changes materially, the new version is published here with a new effective date, and the app’s in-app link points at it.