Without an account, Listfinite stores your list items and preferences only on your device. With an account, we process your email address, account and session identifiers, profile preferences, list items, item relationships, sync status, timestamps, and revision information. Native releases also process technical crash diagnostics and app-installation identifiers used for reliability reporting. Support messages contain the information you choose to send us.

Your lists remain available on your device when you sign out, and you can continue editing them offline. The app retains a non-secret account identifier so those offline changes can sync when you sign back into the same account. To prevent accidental disclosure, the app will not sync that local workspace to a different account.

We use information to create and secure accounts, synchronize lists across your devices, preserve offline changes, resolve sync conflicts, provide support, prevent abuse, troubleshoot failures, and operate and improve Listfinite. We do not sell personal information, serve advertising, or use cross-app advertising trackers.

Account authentication is handled by Instant Auth. Synced Listfinite data and operational logs are processed by our cloud hosting and database providers, including Google Cloud. Native releases use Firebase Crashlytics to process crash traces, non-fatal error traces, timestamps, app and operating-system versions, device model and state, and random installation identifiers. Listfinite does not attach account identifiers, email addresses, credentials, list contents, screenshots, or custom activity logs to Crashlytics reports, and does not include Google Analytics. Apple and Google may also provide store and operating-system crash diagnostics when a device user has enabled the applicable diagnostic-sharing setting. We may disclose information when required by law, to protect people or the service, or as part of a business transfer subject to appropriate safeguards.

Native account credentials are stored using the operating system’s secure credential storage, and native lists use the app’s private database. On the web, session information and lists use browser storage. Data is transmitted over HTTPS. We keep synced account data while your account is active. After account deletion, we retain a minimal deletion-status record for up to 90 days and deletion audit events for up to 365 days; these records do not contain your list content. Routine database backups and point-in-time recovery logs use a seven-day retention window, so deleted data may remain in restricted recovery systems until that window expires and is not returned to active use. Separately created recovery copies are removed when their documented operational purpose ends. Google states that Firebase Crashlytics retains crash traces and associated installation identifiers for 90 days before beginning removal from live and backup systems.

You can use Listfinite without an account, sign out while keeping your lists available offline, or delete device-only data by removing the app or clearing the site’s browser storage. Signing out removes your credentials from the device but does not delete your local lists or synced account. Use “Delete my profile” below to permanently delete the account and its synced profile, lists, and tombstones. You may also contact us to ask about access, correction, deletion, or other privacy rights available where you live.

Listfinite is not directed to children under 13, and we do not knowingly collect personal information from children under 13. A higher minimum age may apply in some countries. Contact us if you believe a child has provided personal information.

Our providers may process information in the United States and other countries where they operate, subject to applicable safeguards. We may update this policy when the product or legal requirements change. We will publish the revised date here and provide additional notice when a material change requires it.