Privacy Policy
Last updated: 7 October 2026. Data controller: Croobo, obrt za promidžbu, vl. Marijan Klarić.
Browsing flyers and building a list in the app require no sign-in. The list is kept on the server, tied to your phone; it is tied to your account only once you sign in.
What is collected
| Data | Source | Why |
|---|---|---|
| Email address, name and Google account identifier | Google sign-in | So a list belongs to you and comes back on a new device |
| Your shopping lists | You build them | That is the service itself |
| Device identifier | The app generates it randomly on first launch | Rate limiting; it does not reveal who you are |
| A hash (SHA-256) of the phone identifier: the Android ID, or a random key the app stores in the iPhone Keychain | The app | So lists made without signing in stay yours, and the free trial cannot be restarted by clearing app data or reinstalling |
| Device and browser type, IP address, and the approximate country or region inferred from it | Requests to the server and trusted service providers | Sign-in security, abuse protection, basic analytics, and subscription operation |
| How the app is used: launches, first item added, subscription offer shown, purchase | The app | So we know whether what we build is used and worth building further |
| Subscription and trial status, Stripe customer and subscription IDs for web purchases | Stripe, or Apple and Google through the billing intermediary | To determine access and let you manage a web subscription |
If crash reporting is enabled in the app, technical data about the device and the point of failure is sent with the report. List contents are not part of it.
We do not store card numbers. Stripe processes web payments, while Apple or Google processes mobile payments. We store Stripe customer and subscription IDs and the subscription's status and duration to provide access. You enter payment form details directly with the payment provider.
What we do not do
- Data is not sold or passed to advertisers.
- There are no ads and no tracking across other apps and sites.
- The app does not request location permission or collect GPS location. The server or a trusted service provider may infer only an approximate country or region from an IP address for security, basic analytics, and subscription operation.
- Retail chains receive nothing about you or your lists.
Legal basis
Account data and lists are processed to perform the service you requested. Technical data from requests is processed on the basis of our legitimate interest in keeping the service secure and available. The phone identifier hash and the trial start date are processed on the basis of our legitimate interest in preventing abuse of the free trial.
How long it is kept
- Account and lists — until you delete your account.
- Lists made without signing in — until you delete them in the app.
- Phone identifier hash and trial start date — for as long as Listo offers a free trial; no name, email or list contents are kept with them.
- Device sign-ins — at most 60 days from last use.
- Shared links — until you stop sharing or delete your account.
- Server logs — briefly, to detect faults.
- Usage data — at most 12 months.
Who the data is entrusted to
| Who | What | Processed in |
|---|---|---|
| Google and Apple | Sign-in and subscription billing | EU and USA |
| Stripe | Web billing and subscription management | According to Stripe's processing terms |
| Hosting provider | Account and lists | EU |
| Usage measurement service | The events in the table above, without list contents | EU |
| Crash reporting service | Technical error data | USA |
| Billing intermediary | Subscription status | USA |
None of them receive your lists for their own processing. For transfers outside the EU we rely on the European Commission's standard contractual clauses.
Your rights
You have the right to access your data, to rectification, erasure, restriction and objection to processing, and to data portability. You do not need to request deletion of your account — do it yourself, in the app's Settings, and it takes effect immediately.
If you believe we handle your data improperly, you can contact the Croatian Personal Data Protection Agency (AZOP) and, if you live in another country of the European Economic Area, the data protection supervisory authority there.
Children
The app is not intended for children under 13 and does not knowingly collect their data.
Changes
If this policy changes, the date of the last change is shown here. Material changes are announced in the app.
For any questions about data and to exercise your rights: support@uselisto.com.