Privacy Policy

Introduction

Welcome to Lista AI. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our app.

Information We Collect

Account Information

When you create an account, we collect:

• Email address
• Name (if provided)
• Profile picture (if using Google or Apple Sign In)
• Authentication credentials

Usage Data

We automatically collect certain information when you use our app:

• List items and categories you create
• Chat messages and interactions with our AI
• Device information and operating system
• App usage statistics and analytics
• IP address and general location data

Subscription and Payment Information

When you subscribe to our premium service:

• Payment information is processed by Apple App Store, Google Play Store, or Stripe
• We receive confirmation of your subscription status
• We store your subscription tier and renewal date
• We do not directly store your credit card or payment details

How We Use Your Information

We use the information we collect to:

• Provide and maintain our service
• Process your list management requests through AI
• Sync your data across devices
• Process and manage your subscription
• Send subscription renewal reminders
• Improve our app and develop new features
• Send you important updates and notifications
• Provide customer support
• Prevent fraud and abuse
• Comply with legal obligations

Data Storage and Security

Your data is stored securely using industry-standard encryption:

• All data is encrypted in transit using HTTPS/TLS
• Data is stored in secure Firebase databases with encryption at rest
• We implement appropriate security measures to protect against unauthorized access
• Regular security audits and updates
• Access to data is restricted to authorized personnel only

AI and Data Processing

When you interact with Lista AI:

• Your messages are processed by our AI service (Anthropic Claude) to understand your intent
• We do not train AI models on your personal data
• Chat messages are stored to provide conversation history
• AI processing is done securely with encryption
• AI service providers process data according to their own privacy policies

Data Sharing

We do not sell your personal data. We may share information with:

• Service Providers: Firebase (Google), Anthropic (AI services), Stripe (payment processing)
• App Stores: Apple App Store and Google Play Store for subscription management
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In case of merger, acquisition, or sale of assets

All service providers are contractually obligated to protect your data and use it only for the purposes we specify.

Your Rights

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your account and data
• Export your data in a portable format
• Opt-out of marketing communications
• Object to processing of your data
• Withdraw consent at any time

To exercise these rights, contact us at [email protected]or use the account deletion feature in the app's preferences.

Account Deletion

You can request deletion of your account at any time through:

• The app's preferences/settings screen
• Emailing us at [email protected]

Deletion Process

When you request account deletion:

• Your account is immediately marked for deletion
• You will receive a confirmation email
• You have 30 days to cancel the deletion request if you change your mind
• During the 30-day period, your account is deactivated but data is preserved
• After 30 days, all your personal data will be permanently deleted, including:
  • Account information (email, name, profile picture)
  • All list items and chat messages
  • Usage data and analytics
  • Preferences and settings

Data We May Retain

After account deletion, we may retain certain data as required by law:

• Transaction records for tax and accounting purposes (typically 7 years)
• Records necessary to resolve disputes or enforce our agreements
• Anonymized, aggregated data that cannot identify you personally
• Data we are legally required to retain

Subscription Data

For users with active subscriptions:

• Subscription status and billing information are managed by Apple, Google, or Stripe
• If you delete your account with an active subscription, your subscription will continue until the end of your billing period unless you cancel it separately
• To cancel subscriptions, you must do so through your App Store, Play Store, or Stripe account
• Subscription history may be retained for legal and accounting purposes even after account deletion

Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately and we will delete it promptly.

Third-Party Services

Our app uses third-party services that may collect information:

• Firebase (Google): For authentication, database storage, and analytics
• Anthropic: For AI-powered chat functionality
• Stripe: For payment processing (web only)
• Apple App Store: For iOS subscriptions and payments
• Google Play Store: For Android subscriptions and payments
• Google Sign In / Apple Sign In: For authentication

These services have their own privacy policies governing their use of your information:

• Firebase Privacy Policy
• Anthropic Privacy Policy
• Stripe Privacy Policy
• Apple Privacy Policy
• Google Privacy Policy

Data Retention

We retain your data according to the following policies:

• Active accounts: Data is retained for as long as your account is active
• Deleted accounts: Personal data is deleted 30 days after deletion request (with 30-day grace period)
• Subscription records: Retained for 7 years for legal and tax purposes
• Anonymized data: May be retained indefinitely for analytics
• Legal requirements: Some data may be retained longer if required by law

International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States. We ensure appropriate safeguards are in place to protect your data in accordance with this privacy policy and applicable data protection laws (such as GDPR for EU users).

Cookies and Tracking

Our web application uses cookies and similar technologies to:

• Keep you logged in
• Remember your preferences
• Analyze usage patterns
• Improve our service

You can control cookies through your browser settings, but some features may not work properly if you disable cookies.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by:

• Posting the new policy on this page
• Updating the "Last updated" date
• Sending you an email notification for significant changes
• Displaying an in-app notification

Your continued use of the service after changes constitutes acceptance of the updated policy.

Your California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect
• Right to know if we sell or share your personal information (we don't)
• Right to delete your personal information
• Right to non-discrimination for exercising your rights

To exercise these rights, contact us at [email protected]

Contact Us

If you have questions about this privacy policy or wish to exercise your privacy rights, please contact us:

• Email: [email protected]
• Website: listaai.app

We will respond to your request within 30 days.