YOUR THINGS ARE YOURS

Your privacy.

Updated 13 September 2026. This policy explains how Lissle handles information in its website and iPhone app. Contact: hello@lissle.com.

What we keep

When you start, Firebase creates a guest identifier. If you create an account, we also keep your email address and any name you provide. Firebase Authentication manages your sign-in credentials. We store your shopping items, favourites, shared-list membership, loyalty card details and codes, occasions, and reminder preferences in Firebase Firestore so they can be restored and synced.

If you choose an image when adding a card, image decoding happens on your device. A reduced copy may be saved with the card so you can show the original code at a checkout. Camera frames used for scanning are processed on your device and are not saved by Lissle.

Optional voice input

The microphone starts only when you tap it. In the iPhone app, speech is converted to text on your device where supported. Lissle does not save or upload this audio. In a web browser, your browser’s speech service may send audio to its provider to recognise your words. You will see recognised items added automatically after a pause; saved items sync just like typed items. You can edit or remove them. Stop with the square button. Typing is always available.

Optional location

Store reminders are off until you enable them. To find shops, your coordinates are sent to our website service and to an OpenStreetMap Overpass provider. Nearby-store results are cached using rounded coordinates for reuse; the cache does not include your account identifier. The lookup itself is authenticated, and infrastructure can process request information such as IP addresses, URLs containing coordinates, response times and errors. We therefore treat location requests as potentially linked to your account, rather than promising they are anonymous.

On iPhone, the nearby store boundaries and reminder cooldowns are kept on your device. iOS can check these boundaries in the background when you allow Always location access. We do not store a history of your movements. Turn off Store reminders in You, or revoke location permission in system Settings, to stop this feature.

iPhone builds with automatic shop updates also use location changes to refresh nearby shops while Lissle is in the background. Those map requests use Apple Maps on supported iPhone builds, with OpenStreetMap Overpass as a fallback. The map provider can receive your coordinates and IP address. Requests do not include your account identifier, shopping items or loyalty card details. The phone keeps the latest local shop area and the information needed to choose relevant reminders. Switching off Store reminders clears that local shop area and stops automatic updates.

Optional notifications

On iPhone, occasion and store reminders are scheduled locally. Web notifications use Firebase Cloud Messaging; we store the browser’s notification token with your account. Device settings and the switches in You control these features. We do not use notifications for advertising.

Account emails

When you create an email account, we use Resend to send a welcome email using your email address and the name you provided. We keep a delivery record to prevent duplicate welcome emails and manage sending limits. Firebase Authentication handles verification and password-reset emails. These account emails are separate from optional Lissle news.

Lissle news and community

You can separately opt in to occasional Lissle news and early feature invitations by email. We save your choice and when it changed. This is optional, and you can turn it off in You at any time. We will use this preference only for Lissle communications, not sell it to other organisations.

Friend invitations

Your personal invitation code links back to your account. When a friend creates and verifies a new account through your link, we record one invitation credit. We store the account relationship and a protected hash of the verified email to prevent duplicate counts. No passwords are stored in invitation records. Your invitation total is shown only to you as a numbered badge. Your friends’ names and emails are never shown. Account deletion removes your invitation profile and credits associated with your account.

Sharing you choose

A private invitation code lets someone join your shared list and read or change its items. Members can read the list name, content and membership identifiers. Member labels are shown instead of email addresses. Share codes only with people you trust. Leaving a list or deleting your account have different effects: leaving keeps your contributions in the shared list; deleting your account removes items and list names attributed to you, including in lists you previously left. Other members keep their own contributions.

Reports and blocking

When you report shared content, we store a copy of the content, your reason and optional explanation, and the relevant account and list identifiers. Only authorised Lissle reviewers can access reports and take action; your reporter identity is not shown to the reported member. Reports and review records are normally removed after 90 days. Account deletion removes reports submitted by or about that account, associated review records and the account’s review attribution.

We keep blocked-account identifiers and sharing restrictions to enforce safety choices. Deleting your account removes your own block preferences. References to your deleted account are also removed from other members’ block preferences. Hidden-item preferences stay with your account until deletion. Shared-item undo copies expire after ten minutes and are removed by the next cleanup task.

Resend delivers a generic daily email alert to the authorised operator while reports are pending. Reported content and account details are not included in these alerts.

Understanding how Lissle is used

The private owner dashboard shows account totals, recent registrations and sign-ins, and counts of saved cards, shopping items, shared lists, occasions, reminder opt-ins and open reports. This helps us understand which features are used and plan improvements. These figures come from existing account records, sign-in dates, shared-list membership and feature activity. The source records can be linked to an account, even though the dashboard presents totals rather than individual shopping lists or card details.

We do not use these figures to track you across other companies’ apps or websites. Dashboard access is limited to authorised Lissle operators. We currently calculate these totals when the dashboard is opened, without keeping a separate history of user-level analytics events. Account deletion removes the underlying active account records as described below.

Keeping the service working

Our hosting and authentication providers process request and sign-in information to operate and protect Lissle. This can include IP addresses, request URLs, status and timing information, and errors. These operational records may be associated with an account or device and follow the provider’s retention settings. They are used for service reliability, troubleshooting and security.

Services that help Lissle run

Google Firebase provides authentication, data storage and web notifications. Vercel hosts the website and its services. Resend delivers welcome emails and operator report alerts. OpenStreetMap Overpass providers supply store information. These providers may process information outside your country under their applicable safeguards. We use information to provide and secure the features you request, answer support requests, and meet applicable obligations.

Lissle is free at launch, with no ads and no advertising tracking. We do not sell your personal information. Existing legacy billing records, if any, may remain with Stripe for subscription management and required record keeping. No new subscription is required to use Lissle.

Storage and security

Data is transmitted over encrypted connections. Access controls protect private lists and cards. Browsers may keep cached copies on your device to help when offline; protect access to your device. We keep account data while your account is in use, and remove active account records when you request deletion. While deletion is in progress, a private deletion record prevents new writes and lets us retry interrupted cleanup. After completion, only the former account identifier and a cleanup time remain to block stale sessions; this record becomes eligible for daily removal after 24 hours. Provider backups, security logs and records required by law may follow separate retention periods.

Your choices and rights

You can edit or remove cards, shopping items and occasions in the app. You can disable reminders and delete your account in You. Depending on your location, you may have rights to access, correct, receive a copy of, restrict or object to certain processing of your personal information. Email us for help or to request a copy of your data. We may need to verify account ownership. You can also contact your local data protection authority; in the UK, this is the Information Commissioner’s Office.

Children and changes

Lissle is an everyday planning tool and is not designed to collect information from children under 13. Contact us if you believe a child’s information needs removing. We will update this page if our practices change and provide further notice when required.