Lista

Privacy Policy

This page explains how Lista collects, uses, shares, and retains personal information.

Lista Privacy Policy

Effective date: 2026-05-29

This Privacy Policy (Policy) applies to all information, including personal data within the meaning of applicable law (Information), which Kernelics LLP, address: 27 Old Gloucester Street, London, United Kingdom, WC1N 3AX, registration number OC448443 (Operator or We, Us, or Our) and/or its affiliates may obtain about you in the course of your use of the mobile app Lista (the Application, "Lista").

This Privacy Policy explains how we handle personal information when you use the Lista mobile app, our website where this policy is published, and our support communications. You can contact us about privacy at legal@kernelics.com.

Information We Collect

We process Information that you freely provide or generate when you use the Application, or in any other way when you contact us, including:

  • account information, such as your email address, display name, avatar, selected country, authentication method, and password-related information if you sign up by email;
  • content you create or share, such as shopping lists, templates, product names, descriptions, quantities, manual prices, group information, invitations, sharing permissions, avatars, and template cover images;
  • subscription information, such as your subscription status, trial status, entitlement information, and subscription-sharing group membership;
  • support information, if you contact us through the website, by email, or through another support channel;
  • device and technical information needed to operate Lista, such as app version, device information, diagnostics, crash reports, security logs, and push notification tokens.

If you sign in with Apple or Google, that provider authenticates you and may share basic account information with us, such as your email address or identity token, depending on your settings and the provider's rules.

Lista does not access your contacts or precise location. Your country may be set by default based on the app store used to download Lista and can be changed by you. If you choose to add a custom avatar or template cover image, you may allow access to your camera or photo library. If you enable push notifications, we process a device push token so we can deliver those notifications.

This Information is needed first of all to maintain the security and operation of the Website, for troubleshooting, and for internal analytics and reporting.

How We Use and Process Your Information

We use your Information for a variety of reasons, depending on how you interact with the Application, including:

  • create and manage your account;
  • provide, sync, share, and secure shopping lists, templates, groups, invitations, and subscription-sharing features;
  • show your display name and avatar to people who share a list, template, group, or subscription-sharing group with you;
  • process subscriptions and paid access;
  • send service notifications, such as shared-list or shared-template activity, where you have enabled them;
  • send transactional emails, such as email verification and password recovery messages;
  • respond to support requests;
  • monitor app reliability, fix bugs, prevent abuse, and improve Lista.

Lista may suggest products based on predefined products and products you have previously added, to make list entry faster. Lista does not currently show third-party ads, sponsored product placements, coupons, affiliate offers, or retailer promotions.

We process your Information to provide access to the Application, to improve and administer it, to communicate with you, to provide security and fraud prevention, and to comply with applicable laws. We may also process your Information for other purposes with your consent.

We may not process your Information without a legally sufficient reason. Therefore, we will only process your Information, if:

  • processing is necessary to comply with statutory obligations;
  • where provided for by applicable law, the processing is necessary for the legitimate interests of the Operator where such processing doesn't have a significant impact on your interests, your fundamental rights and freedoms. Please note that when processing your Information on the above grounds, the Operator will always endeavor to maintain a balance between its legitimate interests and the protection of your privacy.

We don't process sensitive information (such as racial origin, political views, health information and biometric data).

AI Price Estimation

When you request a price estimate, Lista may send product names, descriptions, quantities, your selected country, and currency code to our AI service provider to generate an estimated price. We do not intentionally send your account ID, email, username, list name, or group details for this purpose.

Price estimates may be stored so they can be shown later, corrected, replaced with manual prices, or deleted.

AI-generated price estimates are advisory only and do not produce legal or similarly significant effects.

Sharing and Service Providers

The Operator may also share Information with third parties in order to achieve the purposes set out in section 2 of the Policy. We may share your Information with third party suppliers, providers, contractors or agents (third parties) who perform services for us or on our behalf and need access to such information to do so. We have contracts with third parties that are designed to protect your Information. This means that they can't do anything with your Information unless we have instructed them to do so. They will also not share your Information with any organization other than us. They will also undertake to protect the data they hold on our behalf and keep it for a period of time specified by us. Please note that the level of protection of Information in some countries may not be the same as that in your jurisdiction and by using the Application you consent to such transfer.

The following are third parties to whom we may share Information:

  • Apple and Google for app distribution, sign-in, payments, subscriptions, and platform services;
  • RevenueCat for subscription entitlement management;
  • hosting and infrastructure providers, including AWS, DigitalOcean, and our own server infrastructure;
  • push notification providers, including Firebase Cloud Messaging and Apple/Google notification infrastructure;
  • analytics and diagnostics providers, such as Firebase Analytics, Firebase Crashlytics, and similar tools we may use to monitor app reliability;
  • OpenAI for AI price estimation when you request it;
  • support, security, legal, or operational service providers where necessary.

When you use a plain-text share option, the list content you choose to share is passed to the app or service you select.

We do not sell your personal information.

Retention and Account Deletion

We will retain your Information for as long as necessary to fulfill the purpose for which it was collected or to comply with legal and regulatory requirements, unless a longer retention period is required or permitted by applicable law.

If we have no ongoing legitimate business need to process your Information, we will either delete or anonymize such Information or, if this is not possible (for example, because your Information has been retained in backup archives), we will securely store your Information and isolate it from any further processing until deletion is possible.

You always can delete your account in the app or request deletion at https://lista-shopping.com/delete-account or app@support.lista-shopping.com. Account deletion removes your personal account data. Lists, groups, and templates solely owned by you are deleted. Content you added to a list, group, or template owned by another user may remain in that shared space because Lista does not store that content with an author reference.

Deleting Lista or deleting your account does not necessarily cancel an active app-store subscription. You must cancel subscriptions through your Apple App Store or Google Play account settings.

Your Rights and Choices

You can manage certain account information in the app, including your display name, avatar, country, password, notification settings, and shared access. Your email address cannot currently be changed in the app.

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal information. To exercise privacy rights, contact us at legal@kernelics.com.

Where UK or EU data protection law applies, we rely on the following legal bases: contract, to provide Lista and manage accounts and subscriptions; legitimate interests, to keep Lista secure, improve reliability, and prevent abuse; consent, where required for optional permissions, notifications, or marketing; and legal obligation, where we must keep or disclose information by law.

If you are in the UK and are unhappy with how we handle your personal information, you can complain to the UK Information Commissioner's Office at https://ico.org.uk, but we ask that you contact us first so we can try to resolve your concern.

International Transfers

We may process and store information in the United Kingdom, the European Economic Area, the United States, and other countries where we or our service providers operate. Where required, we use appropriate safeguards for international transfers.

Security

We take technical, organizational and legal measures to ensure the protection of your Information from unauthorized or accidental access to it, destruction, alteration, blocking, copying, distribution, as well as from other unlawful actions.

Children

Lista is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us so we can delete it.

Policy Updates and Changes

This Policy may be updated. The Operator has the right to make changes at its own discretion, including, but not limited to, in cases when the relevant changes are related to changes in the applicable law, as well as when the relevant changes are related to changes in the operation of the Application. If we make material changes, we will take reasonable steps to notify you, such as by updating the effective date, posting a notice, or notifying you in the app.

We welcome your questions and suggestions regarding the implementation or modification of this Policy. You may contact us at the e-mail address legal@kernelics.com for feedback. You may also use this address to submit requests to exercise your rights or complaints regarding the incorrectness of your Personal Information or the unlawfulness of its processing.

Contact

Kernelics LLP
27 Old Gloucester Street, London, United Kingdom, WC1N 3AX
Privacy contact: legal@kernelics.com
Support contact: app@support.lista-shopping.com