Privacy Policy

Last updated: 30 May 2026

Lista is a simple app for saving places you love and sharing them with friends. This policy explains what we collect, why, and the control you have. We've tried to keep it plain — no fine print games.

The short version. We collect your email (to sign you in), the lists and places you save, and who you share them with. We don't run ads, we don't sell your data, we don't use advertising or tracking tools, and we don't follow your location in the background. You can delete everything, including your account, from inside the app.

Who we are

Lista (“we”, “us”) is the data controller for the information described here. You can reach us at hello@listaa.co for any privacy question or request.

What we collect

Account information — your email address, used to create your account and sign you in. If you sign in with Apple or Google, we receive the name and email those services share with us.
Your profile — a display name and, optionally, an avatar image.
Your content — the lists you create and the places you save: place names, areas and cities, map coordinates read from links you paste, and any notes you write. We also store who you choose to share a list with.
Basic technical logs — when the app talks to our servers, our hosting provider records standard request information such as IP address and timestamps, to keep the service secure and reliable.

About location. Lista does not track where you are. The only location data we handle is the place inside a map link you choose to paste — for example, a Google Maps link you want to save.

How we use it

To create and secure your account and sign you in.
To save, sync and display your lists and places across your devices.
To let you share lists with the friends you choose, and to show you lists friends have shared with you.
To keep the service working, diagnose problems, and prevent abuse.

We do not use your information for advertising, and we do not sell it.

Services we rely on

To run Lista we share the minimum necessary with a few trusted providers:

Supabase — hosts our database and handles sign-in. Your account and content are stored here. (Servers in the EU / Frankfurt.)
Map & address lookup — when you paste a Google Maps link, the app opens that link to read the place, and uses OpenStreetMap's address-lookup service to fill in the area and city. Those services receive the request needed to do that.
Email delivery — used to send your sign-in code.

Your choices and rights

Edit or delete any list, place or note at any time.
Delete your account from inside the app, which removes your profile and the content tied to it.
Access or export — email us and we'll help you get a copy of your data or delete it.

Depending on where you live, you may have additional rights (for example under the GDPR) to access, correct, or restrict use of your data. Contact us and we'll honour them.

Keeping data, and keeping it safe

We keep your information for as long as your account is active. When you delete your account, we delete the data associated with it, except where we must keep limited records to meet legal obligations. We use industry-standard measures, including encryption in transit and database access controls, to protect your information.

Children

Lista isn't directed at children under 13, and we don't knowingly collect their information. If you believe a child has provided us data, contact us and we'll remove it.

Changes to this policy

If we make meaningful changes, we'll update the date above and, where appropriate, let you know in the app.