Privacy policy
Last updated: 2 October 2026
Who we are
Listy is operated by Harish, based in Australia. If you have a question about anything here, email harish.united@gmail.com.
What we collect
Only what the app needs in order to work:
- Your email address, so you can sign in and recover your account.
- Your display name, which is what other people see on lists you share with them.
- Your lists and tasks — the names you give them, their schedules, and which ones you've ticked.
- Completion records — when a task was ticked and, on a shared list, who ticked it.
What we don't collect
Listy has no analytics, no advertising, no tracking pixels and no third-party marketing tools. We don't ask for your location, contacts, photos, microphone or camera, and we don't build a profile of you or your behaviour.
Your PIN, if you set one, never leaves your phone. It's stored in your device's own secure keychain and we never see it.
Why we collect it
To run the app, and nothing else. Your email identifies your account. Your lists are stored so they're there when you open the app and so they stay in step with anyone you've shared them with. Completion records are what the app uses to show your progress over time.
Who can see your data
You can. And so can anyone you deliberately share a list with — but only that list, and only for as long as they're a member of it. They can't see your other lists.
We don't sell your data, rent it, or share it with advertisers. We'd only disclose it if we were legally required to.
Where it's stored
Listy uses Supabase to store data and handle sign-in. Supabase acts as our data processor and holds your data on their servers; they don't use it for their own purposes. You can read their privacy terms at supabase.com/privacy.
Data is held in Supabase’s Sydney region (ap-southeast-2), Australia.
How long we keep it
Until you delete it. Deleting a list removes it. Deleting your account removes your account and everything in it.
One exception worth being clear about: if you shared a list with someone else, their copy of that list and their own ticks remain theirs. Lists you own are deleted with your account.
Deleting your account
Open the app, go to the You tab, and choose Delete account at the bottom. It's permanent and it doesn't need to go through us. If you can't sign in, ask us to delete it instead.
Security
Traffic between the app and our servers is encrypted in transit. Access to your lists is enforced at the database level, so one account cannot read another's data even if the app asked it to.
No system is perfect. If you believe your account has been accessed by someone else, change your password and email us.
Children
Listy isn't directed at children under 13, and we don't knowingly collect data from them. If you believe a child has created an account, email us and we'll remove it.
Your rights
You can see your data in the app, correct it in the app, and delete it in the app. If you'd rather have a copy of everything we hold, email us and we'll send it.
Depending on where you live you may have further rights over your data. Email us and we'll honour them.
Changes to this policy
If this policy changes in a way that matters, we'll update the date at the top and tell you in the app before the change takes effect.