Privacy Policy

Papa List · Last updated: June 30, 2026

Papa List is a collaborative shopping-list app made by Codesuma ("we", "us"). This policy explains what information the app handles, how it is used, and the choices you have. We keep the app simple, and we keep this policy simple too.

The short version

• No account or email is required to use the app.
• We only handle the lists you create and the basic information needed to sync and share them.
• We do not show ads, and we do not sell your data.
• We do not collect your location, your contacts, or advertising identifiers.

Information we handle

Anonymous identity. When you first save something, the app creates an anonymous account for you on our backend (a random user ID and a security token). This lets your lists sync across your devices and with people you share with. It does not require your name, email, or phone number.

Your content. The lists you create — list names, items, categories, and whether items are checked off — are stored so they can be saved and synced.

Sharing information. If you share a list, we store a display name or short sharing ID (handle) that you choose, and a record of which lists are shared with which members, so everyone on a list sees the same content.

Optional sign-in. If you choose to sign in with Google to secure your account, we receive your email address from Google to link your account. This is optional — the app works fully without it.

On-device storage. Your lists are also stored locally on your device (so the app works offline). This data stays on your device and is removed if you clear the app's data or uninstall it.

What we do not collect

• Precise or approximate location.
• Your contacts or address book.
• Advertising identifiers — the app contains no ads and no advertising SDKs.

How we use information

• To provide the app: saving your lists and syncing them across your devices in real time.
• To enable sharing: letting the members you invite see and edit a shared list.
• To keep the service working and secure (for example, preventing abuse).

We do not use your information for advertising or profiling, and we do not sell it.

Who we share it with

We share your information only as needed to run the app:

• People you invite. Members of a list you share can see that list's contents and the display name/handle you chose.
• Infrastructure providers. We use Supabase (database and authentication) and Fly.io (hosting) to operate the service on our behalf. Your data is processed on their infrastructure under their security measures.
• Legal reasons. If required by law or to protect rights, safety, and the integrity of the service.

Data security

Data is encrypted in transit (HTTPS/WSS) between the app and our servers. Your account is protected by a security token rather than a password you have to manage.

Data retention and your choices

You can delete individual items and whole lists at any time inside the app, which removes them from your devices and our servers. To delete your account and all associated data, email us at info@codesuma.dev and we will process your request.

Children

Papa List is not directed to children and is intended for a general audience. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will remove it.

International processing

Our service providers may store and process data on servers located in other countries. By using the app, you understand your information may be processed in those locations.

Changes to this policy

We may update this policy from time to time. We will revise the "Last updated" date above when we do, and significant changes will be reflected on this page.

Contact

Questions about this policy or your data? Email us at info@codesuma.dev.