Privacy Policy
ShopBuddy ("we", "our", or "us") is a free shared shopping list app. This policy explains what data we collect, how we use it, and your rights.
1. What We Collect
When you create an account, we collect:
- Name and email address — used to identify your account
- Shopping list content — items you add to shared lists
- Authentication tokens — if you sign in with Apple or Google, we receive a token to verify your identity. We do not receive your Apple or Google passwords.
We do not collect payment information, location data, contacts, or any other sensitive personal data.
2. How We Use Your Data
- To provide the app: syncing your list across devices and with family members
- To identify you within a shared family group
- To send transactional emails if necessary (e.g. password reset)
We do not sell your data. We do not use your data for advertising.
3. Data Storage
Your data is stored in Google Firebase (Realtime Database and Authentication), hosted in the EU (europe-west1). Firebase is operated by Google LLC and subject to Google's privacy terms.
4. Data Sharing
We share your name and a display color with members of your family group so they can see who added each item. We do not share your data with any other third parties, except as required by law.
We use Google Analytics 4 on getshopbuddy.com and in the web app to understand how ShopBuddy is used. Alongside page views, this records product events such as opening the sign-up form, creating an account, signing in, adding or checking off an item, starting shopping mode, creating a list, sharing an invite, and joining a family.
These events carry only metadata — for example which button was used, or how many items were cleared at once. We do not send your item names, list contents, display name, or email address to Google. We do attach your account identifier, so that activity from the same account on different devices can be recognised as one person rather than several.
The iOS app uses Firebase Analytics to record the same product events, again as metadata only and never your item names or list contents. On iOS this is off by default and starts only if you agree to it, and you can withdraw that agreement at any time in Settings. We do not use advertising identifiers and do not track you across other companies' apps or websites. The Android app collects no analytics.
Both Google Analytics and Firebase Analytics also record basic technical information automatically: your app or browser version, device type, operating system, language, and an approximate location — country or region, derived from your IP address rather than from location services. The app never asks for or uses your device's location. Firebase also assigns a random identifier to each app installation so repeat visits can be counted without knowing who you are.
5. Data Retention
Your account and shopping list data is retained for as long as your account exists. You can delete your account at any time from the app settings, which permanently removes all your personal data from our systems.
6. Children's Privacy
ShopBuddy is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us with their data, please contact us and we will delete it.
7. Your Rights
Depending on your location, you may have rights to access, correct, or delete your personal data. To exercise these rights, or if you have questions, contact us at:
8. Changes to This Policy
We may update this policy from time to time. The "last updated" date at the top of this page will reflect any changes. Continued use of ShopBuddy after changes constitutes acceptance of the updated policy.