Lista.

Privacy Policy

Last updated: 3 June 2026

Lista is a simple app for saving places you love and sharing them with friends. This policy explains what we collect, why, and the control you have. We've tried to keep it plain — no fine print games.

The short version. We collect your email (to sign you in), the lists and places you save, and who you share them with. We don't run ads, we don't sell your data, we don't use advertising or tracking tools, and we don't follow your location in the background. You can delete everything, including your account, from inside the app.

Who we are

Lista (“we”, “us”) is the data controller for the information described here. You can reach us at hello@listaa.co for any privacy question or request.

What we collect

Account information — your email address, used to create your account and sign you in. If you sign in with Apple or Google, we receive the name and email those services share with us.
Your profile — a display name and, optionally, an avatar image.
Your content — the lists you create and the places you save: place names, areas and cities, map coordinates read from links you paste, and any notes you write. We also store who you choose to share a list with.
Basic technical logs — when the app talks to our servers, our hosting provider records standard request information such as IP address and timestamps, to keep the service secure and reliable.

About location. Lista does not track where you are. The only location data we handle is the place inside a map link you choose to paste — for example, a Google Maps link you want to save.

How we use it

To create and secure your account and sign you in.
To save, sync and display your lists and places across your devices.
To let you share lists with the friends you choose, and to show you lists friends have shared with you.
To publish a list at a private web address when you share it, so someone without the app can open it. That page shows the list's name and its places — including any notes you wrote on them, and the name credited beside a note. Anyone holding the link can view it, so treat the link itself as the key. You can make a list private at any time, which turns its link off.
To keep the service working, diagnose problems, and prevent abuse.

We do not use your information for advertising, and we do not sell it.

Services we rely on

To run Lista we share the minimum necessary with a few trusted providers:

Supabase — hosts our database and handles sign-in. Your account and content are stored here. (Servers in the EU / Frankfurt.)
Google Maps Platform — when you paste a Google Maps link, the app opens that link to read the place, and uses Google's Geocoding and Static Maps services to fill in the area, city and country and to show a small map image of each place. When a place can't be found from its coordinates alone — a venue named in a post or a screenshot, for example — we also ask Google's Places service for it, which means sending that name, and the city we think it's in, to Google. Google receives the request needed to answer, such as the place's coordinates or the name being looked up. See Google's Privacy Policy.
Email delivery — used to send your sign-in code.

Your choices and rights

Edit or delete any list, place or note at any time.
Delete your account from inside the app, which removes your profile and the content tied to it.
Access or export — email us and we'll help you get a copy of your data or delete it.

Depending on where you live, you may have additional rights (for example under the GDPR) to access, correct, or restrict use of your data. Contact us and we'll honour them.

Keeping data, and keeping it safe

We keep your information for as long as your account is active. When you delete your account, we delete the data associated with it, except where we must keep limited records to meet legal obligations. We use industry-standard measures, including encryption in transit and database access controls, to protect your information.

Children

Lista isn't directed at children under 13, and we don't knowingly collect their information. If you believe a child has provided us data, contact us and we'll remove it.

Changes to this policy

If we make meaningful changes, we'll update the date above and, where appropriate, let you know in the app.