Privacy Policy
Last updated 30 October 2026
ShoppingList.App is a shared shopping list for Android, iPhone, iPad, Mac, Apple Watch and the web. This policy explains what happens to the information you put into it. It complements our company privacy policy.
In short: there's no account in the apps, and no advertising, tracking or analytics. We store your lists and the name you type so the people you share a list with can see them. Anyone who has a list's link can read and change that list.
Who is responsible
Task Venture Capital GmbH, Eickedorfer Vorweide 24, 28879 Grasberg, Germany. Managing Director: Philipp Kunz. Register: Amtsgericht Bremen, HRB 35230 HB.
Contact, including privacy requests: hello@task.vc.
What the apps send to shoppinglist.app
The Android, iPhone, iPad, Mac and Apple Watch apps have no accounts. They use our service at https://shoppinglist.app unless you enter another server. The service stores:
- Lists: the list name, and when the list was created, last changed, and last loaded by any app or browser.
- Items: name, quantity, unit, category, notes, whether the item is checked off, and when it was added or changed.
- The name you type in the app: stored with the items you add or check off ("added by", "checked by"), so the others on the list can see who did it. It can be any name or nickname; the default is "Me".
The apps use shared networking and interface libraries without analytics or advertising. They do not collect persistent device identifiers, your location, contacts, photos or usage statistics. While a list is open, a temporary random presence identifier and your display name identify its live connection. Updates travel over an encrypted connection, with occasional reconciliation requests.
What stays on your devices
The apps keep a copy of the lists you've opened, so they stay readable offline, along with your settings (server address, your name, appearance).
On iPhone with an Apple Watch, the iPhone app passes your server address, name and recent lists to the watch through Apple's watch connection. The Watch app then talks to the service itself, and uses the iPhone only when it can't reach the service. If you use Handoff, the open list's ID, name and link and your server address pass to your other devices through Apple. None of this reaches us beyond the requests described above.
Sharing works by link
Every list has a link and an ID. Anyone who has them can open the list and see its items and the names on them, add, change and delete items, rename the list, and delete the whole list. On the website they can also add comments, photos and receipts. A link can't be revoked; only deleting the list ends access for everyone. Share a list only with people you want to have that access.
Using your own server
The apps can connect to a ShoppingList server that you or someone else runs. In that case your lists go only to that server, nothing reaches us, and that server's operator is responsible for them.
The website
The web app at https://shoppinglist.app works with the same lists. It offers optional accounts. If you create one, we store your email address, your password (as a salted hash, never in plain text), your display name, emoji and color, and a sign-in session that expires after seven days. With the web app you can also add comments, photos and receipts to lists; these are stored with the list and are visible to everyone who has its link. The web app sets no cookies. Your browser's local storage keeps your sign-in token, profile, theme and recent lists, and changes made offline wait in your browser until they can be sent.
Logs, hosting and recipients
To keep the service secure and working, technical logs are recorded: IP address, app or browser version, the requested address (which contains the list ID), and the time. The service's own log adds the internal IDs of the lists, items, comments and accounts it changes, but no names, contents or email addresses. Logs are kept for at most 14 days and are not used to identify you or to build profiles.
To protect the service against abuse, our network edge looks up who operates the network a connection comes from. For this, only the connecting IP address is sent to the regional internet registries, among them ARIN in the USA, and to Team Cymru in the USA. The results are kept for 30 days.
The service runs on serve.zone infrastructure that Task Venture Capital GmbH operates itself in Germany, and your data is stored there. Apart from these IP lookups, we don't pass your data to other recipients or transfer it outside the EU.
Legal basis
We process list contents, names and account data to provide the service you use (Art. 6(1)(b) GDPR), and technical logs and the IP lookups for our legitimate interest in a secure, working service protected against abuse (Art. 6(1)(f) GDPR).
How long we keep data, and how to delete it
- There is no automatic deletion yet: a list stays until someone deletes it. Deleting a list removes it with its items and with the comments, photos and receipts added on the website.
- The apps can't yet delete a list for everyone. Use Delete List on the website, or send us the list's link at hello@task.vc and we delete it.
- "Remove from This Device" in the apps deletes only your copy; the list stays available to everyone with its link.
- Web accounts are kept until you ask us to delete them; sign-in sessions expire after seven days.
- Technical logs are deleted after at most 14 days, the results of IP lookups after 30 days.
- We keep backups of the service for 30 days, so deleted lists, items and files remain in backups for up to 30 days before they are gone for good.
Your rights
Under the GDPR you can ask us for access to your data, its correction or deletion, restriction of processing, data portability, and you can object to processing based on legitimate interests. Email hello@task.vc; since the apps have no accounts, please include the link of the list your request is about. We answer within one month. You can also complain to a supervisory authority, for example Die Landesbeauftragte für den Datenschutz Niedersachsen.
We aren't required to appoint a data protection officer (§ 38 BDSG). The managing director handles privacy requests personally.
What we don't do
We don't sell or rent your data, don't share it with anyone for their own purposes, don't show ads, and don't build profiles or make automated decisions about you.
Changes
We update this page when the apps or the service change what they store, and change the date at the top.