Privacy Policy

This policy covers Shopping List, an iPhone app by Benjamin Conrad, and Shopping List Cloud, its optional online service with a web app and an MCP server for AI assistants. Shopping List is not affiliated with Bring! Labs AG, the Mealie project or the Open Food Facts projects.

You choose offline or online when you first open the app. In offline mode, your lists are never sent to the developer. Online requires Sign in with Apple, and the developer’s server stores:

• an account identifier issued by Apple and the name Apple shares when you first sign in (your email address is not requested);
• your households, their members and invitations, and the names of your lists and their items, with quantity, unit, note and barcode when available, and whether an item is checked off;
• session and access tokens for the app, the web app and the assistants you connect, and a token from Apple used to revoke Sign in with Apple when you delete your account.

This information is used only to provide Shopping List Cloud: storing and syncing your lists, sharing them with your household, showing icons and categories, and preventing abuse. Like any web server, it also receives standard network information such as your IP address and the time of a request.

The server chooses a category and an icon for each item. Item names it does not know are sent, without any account, household or list information, to typesafe.ai and, when a new icon is drawn, to OpenAI. Generated icons are not linked to you and may be shown for anyone’s items with the same name.

If you connect an AI assistant, it can read and change the lists of the household you approved. What you tell the assistant, and the list data it reads, is processed by the assistant’s provider under its own privacy policy. You can disconnect an assistant at any time in the web app.

The app uses the camera only to recognise EAN and UPC barcodes. Frames are processed on the device; no photos or videos are saved or sent anywhere.

The app keeps your local lists and items, scanned product details, stores and shopping history, your settings, and the credentials for Shopping List Cloud and the providers you connect (in the iOS Keychain). This information stays in the app’s private storage.

If you connect Bring, a Mealie server or your own Shopping List Server, the app communicates directly with it and sends the list and item details needed to sync. When you scan a barcode, the app may send the barcode and your language and country to the Open Food Facts services to look up the product. These services process the data under their own privacy policies.

This website counts visits with a self-hosted instance of Plausible Analytics. It uses no cookies, stores no personal data and does not track you across websites.

The developer does not sell personal information, use it for advertising, create advertising profiles, share it with data brokers or track you. The app contains no advertising or analytics SDKs.

Shopping List Cloud data is kept until you delete it. Settings → Shopping List Cloud → Delete Account permanently deletes your account and revokes Sign in with Apple. Households in which you are the only member are deleted with their lists; shared households stay with their other members. Copies of your lists stay on your iPhone. Deleting the app removes its local data.

Credentials are stored in the iOS Keychain, and all connections use HTTPS. No method of storage or transmission is completely secure.

Shopping List is a general-audience app and is not directed to children. It does not knowingly collect children’s personal information.

This policy may be updated when the app or its data practices change. The effective date at the top of this page is updated with every material change.

For privacy questions, write to [email protected] or see the Shopping List support page.