Privacy Policy

Last updated: October 2026

1. What we collect

We collect the information you provide when you create an account — your name and email address. If you sign in with Google, we receive your name and email from Google. We also collect the tasks and lists you create within the app, which are stored securely in our database.

2. Your list data is yours

Your tasks and lists are private to you. We do not read, analyse, sell, or share the content of your lists with anyone — ever. As the operators of Listdot, we have the technical ability to access data stored in our database (as is true of any cloud-based service), but we have a strict policy of never accessing user list content. Your lists are your business, not ours.

3. How we use your information

We use your information solely to provide and improve the Listdot service. Your email is used for account authentication and occasional product updates. We do not sell, rent, or share your personal information with third parties for marketing purposes.

4. Data storage and security

Your data is stored securely using Supabase, a managed database platform. All data is encrypted in transit using TLS and encrypted at rest. Row-level security policies ensure that each user can only access their own data — other users cannot see your lists or tasks. We retain your data for as long as your account is active. You can request deletion of your account and all associated data at any time by contacting us.

5. Payments

Payment processing is handled by Stripe. We do not store your payment card details — these are handled entirely by Stripe and subject to their privacy policy. We receive only a confirmation of payment status.

6. Cookies

We use cookies solely for authentication purposes — to keep you logged in across sessions. We do not use cookies for tracking or advertising.

7. Third-party services

Listdot uses the following third-party services: Supabase (database and authentication), Stripe (payments), Resend (transactional email), Google OAuth (optional sign-in), OpenAI (voice input, Pro only) and Vercel (hosting). Each of these services has their own privacy policy governing their use of data. When you use voice input, your recording and the names of your lists are sent to OpenAI to turn your speech into tasks; we do not keep the recording. Apart from that, none of these services receive the content of your lists or tasks.

8. Your rights

You have the right to access, correct, or delete your personal data at any time. To request a copy of your data or to delete your account, please contact us at hello@listdot.app and we will respond within 7 days.

9. Changes to this policy

We may update this privacy policy from time to time. We will notify you of significant changes by email. Continued use of the service after changes constitutes acceptance of the updated policy.

Questions? Contact us at hello@listdot.app