YOUR THINGS ARE YOURS

Your privacy.

Updated 18 October 2026. This policy explains how Lissle handles information in its website and iPhone app. Contact: hello@lissle.com.

What we keep

When you create a free account, we keep your email address and any name you provide. If you choose guest mode, Firebase creates a guest identifier instead. Creating or joining shared lists requires a free account. Registering from your guest profile keeps its saved items. Firebase Authentication manages your sign-in credentials. We store your shopping items, favourites, shared-list membership, loyalty card details and codes, occasions, and reminder preferences in Firebase Firestore so they can be restored and synced.

If you choose an image when adding a card, image decoding happens on your device. A reduced copy may be saved with the card so you can show the original code at a checkout. Camera frames used for scanning are processed on your device and are not saved by Lissle.

Offline saved lists

Offline-enabled versions of Lissle save a copy of the shopping lists you open, new shared-list items and tick marks waiting to sync on your device. This lets you use a previously saved list without phone reception. Shared lists show the last copy received on that phone; other people’s changes appear when you reconnect. These copies belong to the signed-in account and are cleared when you sign out or change accounts. They do not include your password or sign-in tokens.

When an offline shared-list addition syncs, we keep a private record of its item ID, list, original text and timestamps in your account so a lost connection cannot add the same item twice. This record is not shown to other members and is removed when you delete your account.

Seasonal gift plans

Christmas plans save the recipient names or nicknames you enter, gift ideas, optional prices and budgets, shops, product links and purchase progress in your account. Plans stay separate from Family shopping lists. Only you can access a private plan. If you share a plan using its private invitation code, your invited partner can read and change the children’s and pets’ lists. Adult and partner names, gifts, budgets and costs remain private to the plan owner, including in shared plans. Share the code only with someone you trust.

Saved years stay available until the plan owner deletes them. Removing a partner stops their access and cancels the invitation. Leaving a partner’s plan keeps its gift information with the owner. Deleting your account removes plans you own and your access to other parents’ plans. Child names are labels in your plan, not separate child accounts.

Optional voice input

The microphone starts only when you tap it. In the iPhone app, speech is converted to text on your device where supported. Lissle does not save or upload this audio. In a web browser, your browser’s speech service may send audio to its provider to recognise your words. You will see recognised items added automatically after a pause; saved items sync just like typed items. You can edit or remove them. Stop with the square button. Typing is always available.

Optional location

Store reminders are off until you enable them. To find shops, your coordinates are sent to our website service and to an OpenStreetMap Overpass provider. Nearby-store results are cached using rounded coordinates for reuse; the cache does not include your account identifier. The lookup itself is authenticated, and infrastructure can process request information such as IP addresses, URLs containing coordinates, response times and errors. We therefore treat location requests as potentially linked to your account, rather than promising they are anonymous.

On iPhone, the nearby store boundaries and reminder cooldowns are kept on your device. iOS can check these boundaries in the background when you allow Always location access. We do not store a history of your movements. Turn off Store reminders in You, or revoke location permission in system Settings, to stop this feature.

iPhone builds with automatic shop updates also use location changes to refresh nearby shops while Lissle is in the background. Those map requests use Apple Maps on supported iPhone builds, with OpenStreetMap Overpass as a fallback. The map provider can receive your coordinates and IP address. Requests do not include your account identifier, shopping items or loyalty card details. The phone keeps the latest local shop area and the information needed to choose relevant reminders. Switching off Store reminders clears that local shop area and stops automatic updates.

Optional notifications

On iPhone, occasion and store reminders are scheduled locally. Web notifications use Firebase Cloud Messaging; we store the browser’s notification token with your account. Device settings and the switches in You control these features. We do not use notifications for advertising.

Account emails

When you create an email account, we use Resend to send a welcome email using your email address and the name you provided. We keep a delivery record to prevent duplicate welcome emails and manage sending limits. Firebase Authentication handles verification and password-reset emails. These account emails are separate from optional Lissle news.

Lissle news and community

You can separately opt in to occasional Lissle news and early feature invitations by email. We save your choice and when it changed. This is optional, and you can turn it off in You at any time. We will use this preference only for Lissle communications, not sell it to other organisations.

Friend invitations

Your personal invitation code links back to your account. When a friend creates and verifies a new account through your link, we record one invitation credit. We store the account relationship and a protected hash of the verified email to prevent duplicate counts. No passwords are stored in invitation records. Your invitation total is shown only to you as a numbered badge. Your friends’ names and emails are never shown. Account deletion removes your invitation profile and credits associated with your account.

Sharing you choose

A private invitation code lets someone join your shared list and read or change its items. Members can read the list name, content and membership identifiers. Member labels are shown instead of email addresses. Share codes only with people you trust. Leaving a list or deleting your account have different effects: leaving keeps your contributions in the shared list; deleting your account removes items and list names attributed to you, including in lists you previously left. Other members keep their own contributions.

Reports and blocking

When you report shared content, we store a copy of the content, your reason and optional explanation, and the relevant account and list identifiers. Only authorised Lissle reviewers can access reports and take action; your reporter identity is not shown to the reported member. Reports and review records are normally removed after 90 days. Account deletion removes reports submitted by or about that account, associated review records and the account’s review attribution.

We keep blocked-account identifiers and sharing restrictions to enforce safety choices. Deleting your account removes your own block preferences. References to your deleted account are also removed from other members’ block preferences. Hidden-item preferences stay with your account until deletion. Shared-item undo copies expire after ten minutes and are removed by the next cleanup task.

Resend delivers a generic daily email alert to the authorised operator while reports are pending. Reported content and account details are not included in these alerts.

Understanding how Lissle is used

The private owner dashboard shows account totals, recent registrations and sign-ins, and counts of saved cards, shopping items, shared lists, occasions, reminder opt-ins and open reports. This helps us understand which features are used and plan improvements. These figures come from existing account records, sign-in dates, shared-list membership and feature activity. The source records can be linked to an account, even though the dashboard presents totals rather than individual shopping lists or card details.

We do not use these figures to track you across other companies’ apps or websites. Dashboard access is limited to authorised Lissle operators. We currently calculate these totals when the dashboard is opened, without keeping a separate history of user-level analytics events. Account deletion removes the underlying active account records as described below.

Optional website analytics

Google Analytics is off unless you choose Accept analytics. It measures public landing-page visits and App Store link clicks using analytics cookies, browser and device information, and limited public marketing source information. Google may derive approximate location from your IP address and process information outside your country.

Analytics does not run in the iPhone app or on private app pages. We do not send Lissle account identifiers, names, email addresses, shopping lists, loyalty cards, occasions, gift plans or precise location to it. Choose Decline analytics to use Lissle without this measurement, or change your choice through Cookie settings on the landing page. Your choice is saved on this device. Read how Google uses information from sites that use its services.

Optional signup source information

If you accept the updated website analytics choice, Lissle remembers the first recognised campaign link you use on that browser for up to 30 days. If you create an account while that choice is active, we save its source, campaign and creative label with your account, together with the signup date and whether the signup used the website or app. We do not save raw links, advertising click identifiers or browsing history for this purpose. An older landing-only analytics choice does not enable this feature.

At signup you may also choose to tell us how you found Lissle. This answer is optional, stays with Lissle and is marked as your answer, rather than proof that an advert led to your signup. It does not enable website analytics. App Store installations do not automatically pass an individual campaign source to your account.

Only authorised Lissle operators can view these source records in the private dashboard. We use them to understand which marketing brings people to Lissle. They are not sent to Google Analytics, Meta or TikTok. We retain a saved source until you remove it here or delete your account. Removal keeps only a minimal withdrawal marker to prevent a delayed request from restoring it. Declining analytics also clears the browser source; when signed in, it removes the saved account source. Your analytics choice lasts up to 180 days on this device. You can use Lissle without either type of optional measurement.

Keeping the service working

Our hosting and authentication providers process request and sign-in information to operate and protect Lissle. This can include IP addresses, request URLs, status and timing information, and errors. These operational records may be associated with an account or device and follow the provider’s retention settings. They are used for service reliability, troubleshooting and security.

Services that help Lissle run

Google Firebase provides authentication, data storage and web notifications. Google Analytics provides optional public landing-page measurement. Vercel hosts the website and its services. Resend delivers welcome emails and operator report alerts. OpenStreetMap Overpass providers supply store information. These providers may process information outside your country under their applicable safeguards. We use information to provide and secure the features you request, answer support requests, and meet applicable obligations.

Lissle is free at launch, with no in-app ads and no tracking across other companies’ apps or websites. We do not sell your personal information. Existing legacy billing records, if any, may remain with Stripe for subscription management and required record keeping. No new subscription is required to use Lissle.

Storage and security

Data is transmitted over encrypted connections. Access controls protect private lists and cards. Browsers may keep cached copies on your device to help when offline; protect access to your device. We keep account data while your account is in use, and remove active account records when you request deletion. While deletion is in progress, a private deletion record prevents new writes and lets us retry interrupted cleanup. After completion, only the former account identifier and a cleanup time remain to block stale sessions; this record becomes eligible for daily removal after 24 hours. Provider backups, security logs and records required by law may follow separate retention periods.

Your choices and rights

You can edit or remove cards, shopping items and occasions in the app. You can disable reminders and delete your account in You. Depending on your location, you may have rights to access, correct, receive a copy of, restrict or object to certain processing of your personal information. Email us for help or to request a copy of your data. We may need to verify account ownership. You can also contact your local data protection authority; in the UK, this is the Information Commissioner’s Office.

Children and changes

Lissle is an everyday planning tool and is not designed to collect information from children under 13. Contact us if you believe a child’s information needs removing. We will update this page if our practices change and provide further notice when required.