Privacy Policy
Last updated: 6 September 2026
This policy explains what personal data vlists collects, when and how we collect it, and how we do and do not use it. vlists is a list-manager app for saving, reusing, and getting reminded about your checklists. We keep data collection to the minimum needed to run the service, and we never sell your data or use it for advertising.
What we collect, and when
Account information
When you create an account, we collect your name and email address. Your password is stored only as a secure, irreversible hash, never in plain text. If you choose to sign in with a third-party sign-in option, we receive your name, email address, and a basic account identifier from that provider to create and identify your account.
Your content
When you create or copy lists, add or check off items, favourite a list, or schedule a reminder, we store that content and your delivery preferences so we can show them back to you and keep them in sync across your devices.
Feedback you send
When you send feedback from within the app, we collect the title and description you write, along with your account email, so we can read and reply to you.
Data kept only on your device
Some information never leaves your device or reaches our servers: whether you have completed onboarding, whether you have turned on biometric app lock, and any reminders scheduled to appear on your device. Your biometric (Face ID or fingerprint) data is handled entirely by your operating system and is never accessible to us.
How we use your data
To provide the service
To create and secure your account, and to store and sync your lists across the devices where you are signed in.
To send reminders you asked for
If you opt in to email reminders, we use your email address to notify you when a list reminder is due. You control this in Settings and can switch to on-device reminders or turn it off.
To respond to you
To read and reply to feedback or support requests you send us.
How we do not use your data
We do not sell or rent your personal data. We do not use your lists, items, or other content for advertising, and we do not show you ads. We do not track you across other apps or websites, and we do not build advertising or marketing profiles about you.
Affiliate links and third-party services
Affiliate links
Some checklist and blog pages on our website include Amazon affiliate links. If you click one of these links and make a purchase, we may earn a commission, at no extra cost to you.
Amazon OneLink
The web pages that carry affiliate links load Amazon's OneLink script. This script uses your IP address to route you to your local Amazon store, and it may set cookies. It runs only on pages that have affiliate links.
In the app
The vlists app does not run the OneLink script. When you tap a Buy link in the app, it opens in your device's browser.
Diagnostics and crash reports
What we collect
To keep vlists reliable, the app sends us diagnostic information as it runs: crash reports and error logs, and basic performance data such as which core actions ran, whether they succeeded, and how long they took. On the web we also collect basic page-load performance. Each report includes your app version, device type and model, operating system version, and your approximate region (your country), and on the web your browser type.
How we keep it private
Error messages and technical details are automatically stripped of personal information, such as email addresses, tokens, and long numbers, on your device before anything is sent, and we never include the contents of your lists or items. Reports are grouped using a randomly generated identifier for your app installation and a one-way, irreversible hash of your account id, so we can tell devices and accounts apart without the diagnostic data carrying your identity. We do not use advertising identifiers, and we do not collect precise location.
Why we collect it
Only to detect crashes, diagnose failures, and keep the app fast and reliable. We do not use diagnostic data for advertising, we do not sell it, and we do not use it to track you across other apps or websites.
Where your data is stored and who can access it
Where it lives
Your account and content are stored on secure servers hosted within the European Union, protected by encryption in transit.
Who we share it with
We share data only with the service providers who help us run vlists, such as cloud hosting for your account and content, and an email provider that delivers account, reminder, and feedback emails. They receive only as much as they need to provide that service to us, and are not permitted to use your data for their own purposes.
Retention and your choices
How long we keep it
Crash reports and diagnostic events are kept only for a limited period, up to 90 days, and are then deleted automatically.
We keep your account and content for as long as your account is active, and until you ask us to delete them.
Access and deletion
You can request a copy of your data, or ask us to delete your account and associated content, at any time by contacting us. You can also delete your account yourself at any time.
Children's privacy
vlists is not directed to children under 13, and we do not knowingly collect data from them.
Changes to this policy
We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above.
Contact us
Questions about this policy or your data? Email us at support@myvlists.com.