List Ninja — Privacy Policy

List Ninja is built to keep your data yours. Most of what you do in the app never leaves your device. This policy explains the little that does, and why.

The short version

• Your lists, tasks, notes, photos, and settings are stored locally on your device by default. We can't see them.
• You only create an account if you want to use shared lists. Everything else works fully signed-out.
• We don't sell your data, and we don't use it for advertising or cross-app tracking.

Information we collect

If you create an account (optional, for shared lists), our sign-in provider (Google Firebase Authentication) stores:

• Your email address, or the private relay identifier from Sign in with Apple.
• A display name you choose, used to show who added or completed a task on a shared list.

When you use a shared list, the tasks on that specific list — their text, notes, categories, due dates, and completion status — are stored in the cloud (Firebase Firestore) so they can sync to the people you share with. Only members you invite can access a shared list.

Content you choose to share by link (a template, bundle, or a copy of a list) is uploaded so the recipient can import it. You control when this happens.

We do not collect analytics, advertising identifiers, location, or a profile of your activity.

Device permissions

List Ninja asks for these only when you use the related feature, and the data stays on your device:

• Microphone & Speech Recognition — to add tasks by voice. Speech is processed by Apple's on-device/standard dictation; we don't store recordings.
• Camera & Photos — to attach photos to a task. Photos are saved on your device only.
• Calendar — to show your events beside your tasks and to add planning blocks and due dates to a dedicated "List Ninja" calendar. Calendar data stays on your device; we never send it anywhere, and we never modify your other calendars.
• Face ID — to unlock secret lists. Authentication is handled by iOS; we never receive your biometric data.

How your data is stored and protected

Cloud data (accounts and shared lists) is stored with Google Firebase and protected in transit with encryption (HTTPS). Access to shared lists is restricted by security rules so only invited members can read or write them.

Data sharing

We don't sell or rent your information. Cloud data is processed only by Google Firebase, our infrastructure provider, to operate accounts and shared lists on our behalf. Shared-list content is visible to the members you invite to that list.

Deleting your data

You can delete your account at any time in the app: Settings → Account → Delete account. This removes your account and your shared-list membership. Lists and tasks stored locally on your device remain on your device and can be removed by deleting them or uninstalling the app.

Children

List Ninja is not directed to children under 13, and we do not knowingly collect personal information from them.

Changes

We may update this policy as the app evolves. Material changes will be reflected here with a new "Last updated" date.

Contact

Questions about your privacy? Email support@listninja.app.