Privacy Policy

ShoppingLoop · Last updated: 18.10.2026

Polska wersja: Polityka prywatności

This policy explains what personal data the ShoppingLoop app and the shopping-loop.com website use, why we use it, who else receives it, and what you can do about it.

Who is responsible for your data

The controller of your personal data under the EU General Data Protection Regulation (GDPR) is Ilya Bohaslauchyk, a private individual in Poland, who makes and runs ShoppingLoop as a free, non-commercial project.

Email: support@shopping-loop.com

In this policy, "we" and "us" mean Ilya Bohaslauchyk. We have not appointed a data protection officer. Write to support@shopping-loop.com about anything in this policy.

What we collect and why

Your email address. We use it to create your account, send you sign-in codes, and tell you about important changes to the service.

Legal basis: performing our agreement with you (Art. 6(1)(b) GDPR).

Your display name. You choose it after your first sign-in. Other users use it to find you and invite you to lists, and it is shown to the people on your lists.

Legal basis: Art. 6(1)(b) GDPR.

Your app language. We save the language the app is shown in, so that your sign-in emails arrive in the same language.

Legal basis: Art. 6(1)(b) GDPR.

Information from Google or Apple, if you sign in with them. Google sends us your email address, your name and a link to your profile picture. Apple sends your email address (or a private relay address, if you choose to hide yours) and, the first time only, your name. Our sign-in system stores what they send with your account. The app uses only the name, and only to suggest a display name.

Legal basis: Art. 6(1)(b) GDPR.

Your lists. This means list names, items, whether an item is done, when lists and items were created, completed or deleted, who is on each list, and what role each person has.

Legal basis: Art. 6(1)(b) GDPR.

Invitations, notifications and blocks. This means who invited whom to which list and with what role, whether the invitation was accepted or declined, the notifications the app shows you and whether you have read them, and the people you have blocked.

Legal basis: Art. 6(1)(b) GDPR.

An Apple sign-in token, if you sign in with Apple. We keep the token Apple issues so that, when you delete your account, we can tell Apple to remove ShoppingLoop's access to your Apple ID.

Legal basis: Art. 6(1)(b) GDPR.

Sign-in sessions. For each device you use your account on, our sign-in system keeps your IP address and the type of device or browser. This is what lets you sign out of all your devices at once.

Sign-in history. Our sign-in system keeps a record each time you sign up, ask for a sign-in code, sign in, sign out or connect a Google or Apple account, each time the details stored with your account change (such as the app's language), and each time the app renews your sign-in, which happens about once an hour while you use it. Each record holds your email address, your IP address and the time. It may also hold the name Google or Apple gave us and, for a connected account, your account ID at Google or Apple. We use it to look into suspicious sign-ins and misuse of accounts.

Technical logs. Supabase logs every request the app makes to our servers, with your IP address and the time. We use them to find and fix faults.

Legal basis for these three: our legitimate interest in keeping your account secure and the service working (Art. 6(1)(f) GDPR).

Messages you send to support. This means your email address and what you write.

Legal basis: Art. 6(1)(b) GDPR when your message is about your account or the service, and otherwise our legitimate interest in answering you (Art. 6(1)(f) GDPR).

You need an email address (or a Google or Apple account) to have an account, and a display name to use the app. Without them, we can't provide the service. Everything else you add is up to you.

What we don't do. ShoppingLoop is free, and there is nothing to buy in it. We don't show ads, track you across other apps or websites, or sell your data, and the app contains no advertising tools. The app doesn't ask for your location, contacts, photos or camera, and it sends no push notifications. The Auto theme estimates daylight from your device's time zone, and it does this on the device.

Who can see your data

• Every ShoppingLoop user can find you by your display name when inviting someone to a list, and sees your display name only.
• When you are invited to a list, its owners see your display name, the role you were invited with, and that the invitation is pending. The person who invited you is told whether you accepted or declined. If you block them, they are told only that you declined.
• People on a list with you see the list's contents and everyone's display name, email address and role.
• Service providers that process data for us under data processing agreements:
  • Supabase: the database, sign-in and live sync. Your account and lists are stored in Ireland (EU).
  • Resend: sends sign-in code emails and our replies to support email.
  • Cloudflare: hosts this website and forwards email sent to support@shopping-loop.com.
• Independent controllers, which use your data under their own privacy policies:
  • Apple: the App Store and Sign in with Apple, if you use it.
  • Google: Sign in with Google, if you use it, and Gmail, where email sent to support@shopping-loop.com is kept.
• Public authorities, when the law requires us to share data.

Transfers outside the European Economic Area

Resend, Cloudflare and Google are US companies. Supabase is too, but it stores your account and lists in the EU. Not every country outside the European Economic Area (EEA) protects personal data as strongly as EU law does, so the GDPR allows data to go there only with an extra safeguard. We rely on one of two:

• The EU–US Data Privacy Framework. The European Commission has decided that US companies certified under it protect personal data well enough. You can check whether a company is certified on the official list.
• Standard Contractual Clauses. These are model contract terms written by the European Commission, in which a provider promises to protect your data to EU standards. They are built into our providers' data processing agreements. The text is published on EUR-Lex.

To see the safeguard that covers a particular provider, write to support@shopping-loop.com and we will send you a copy.

How long we keep data

• Your account, display name, language and lists: for as long as you have an account.
• Deleted lists and items: they go to the bin ("Show deleted") and are erased permanently 30 days after you delete them.
• Invitations and notifications: erased 30 days after they were sent, whether or not anyone answered. An invitation nobody answers expires then.
• Blocks: until you unblock the person or delete your account.
• When you delete your account: your account, email address, display name and sessions are deleted at once, along with every invitation and notification you sent or received and every block you made. Every list you are the only owner of is also deleted, including shared ones, so their other members lose them too. Lists with another owner stay with that owner. Items you added to other people's lists stay in those lists, because they belong to the list, not to you. If you signed in with Apple, we revoke the Apple token first, then delete it. The records listed below keep their own periods and aren't deleted with your account: the sign-in history, technical logs, email records, backups and support email.
• Sign-in sessions: until you sign out on that device, sign out of all devices, or delete your account.
• Sign-in history: 12 months. Each record is erased 12 months after it's made. It isn't deleted when you delete your account: records of your past sign-ins, with your email address and IP addresses, stay until they're 12 months old.
• Technical logs: up to 7 days, at Supabase.
• Records of emails we send: Resend keeps each email it sends for us, including sign-in codes and our replies to support, with its recipient and whether it was delivered, for 30 days.
• Records of email sent to support: Cloudflare keeps the sender, the recipient, the time and whether each message was forwarded, for 30 days.
• Backups: up to 7 days.
• Support email: up to 2 years after the last message. We keep it longer only if we need it to establish or defend a legal claim.

Data stored on your device

To work without an internet connection, the app stores the following on your device: your sign-in session, a copy of your lists, changes not yet sent, your display name, and your sort and theme settings.

• Signing out removes the copy of your lists and your display name. Changes not yet sent stay until you sign in to the same account again, so they aren't lost.
• Deleting your account removes all of it.
• Deleting the app removes all of it too.

Your rights

You have the right to:

• access your data and get a copy of it;
• correct it. You can change your display name in the app (Account → Edit name). For anything else, write to us;
• erase it. In the app, go to Account → Delete account, or write to us;
• restrict how we use it;
• object to uses based on our legitimate interest;
• data portability: to receive the data you gave us in a common, machine-readable format;
• complain to a supervisory authority: in Poland, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl), or the authority in the EU country where you live or work.

To use these rights, write to support@shopping-loop.com. To protect your data, we act only on requests we can tie to your account: we reply only to the email address on your account, and we send a copy of your data only there. If you write from a different address, we first ask you to confirm from the account's address. A copy covers the lists you're on, but not other members' email addresses. We answer within one month.

We make no decisions about you by automated means alone, and we don't profile you.

Children

ShoppingLoop is not meant for children under 16. If your child under 16 has an account, the quickest way to remove it is in the app on their device: Account → Delete account. You can also write to us. We delete an account only when the request is confirmed from the account's email address, because deleting an account also deletes every list it alone owns, for everyone on that list. If it becomes clear to us in another way that an account belongs to a child under 16, we may close it.

Security

Every connection between the app and our servers is encrypted. Access rules in the database let only a list's members read it. Sign-in codes can be used only once and expire. You can sign out of all your devices at any time (Account → Sign out of all devices). No system is completely secure, so if you find a problem, please tell us at support@shopping-loop.com.

This website

shopping-loop.com uses no cookies for analytics, advertising or tracking. Cloudflare, which serves the site, processes your IP address to deliver pages and protect the site from attacks.

Legal basis: our legitimate interest in running a secure website (Art. 6(1)(f) GDPR).

Changes to this policy

When we change this policy, we post the new version here and update the date at the top. If a change matters to how your data is used, we tell you in the app or by email before it takes effect.