Privacy Policy
This policy explains what ShopAir stores, why, who else can see it, and how to get rid of it. We have tried to write it in plain language rather than legal boilerplate.
The short version. ShopAir stores your account details and the lists, items and loyalty cards you create, so the app can sync them between your devices and the people you share with. None of that is sold, and none of it is used to target advertising at you. ShopAir does measure which adverts brought people to the app, using AppsFlyer, and the section on advertising measurement below says exactly what that involves. You can delete everything from inside the app.
What ShopAir collects
Account information. Your email address and display name. These come from you when you sign up. Your email is how invitations reach you, and your name is what other members of a shared list see.
Your content. The lists you create, the store attached to a list, the items on it and their quantities and categories, whether each item is ticked off, and the loyalty cards you save, including the card number, barcode and cardholder name you enter.
Sharing and activity data. Who belongs to each list and in what role, invitations sent and received, contact requests, and a log of recent actions on your lists (for example that an item was added or checked off, by whom, and when).
Notification data. If you enable push notifications, a device token used to deliver them, plus your notification preferences.
Technical data. Standard operational data such as crash and error reports and basic request logs generated by our infrastructure provider.
ShopAir does not ask for or store your address book, your location, or your payment card details, and shows no advertising inside the app.
Advertising measurement. ShopAir uses AppsFlyer to work out which adverts brought people to the app. AppsFlyer receives your device advertising identifier, IP address, device model and operating system version, and a record of in-app events such as starting a trial. It also receives your ShopAir account identifier, which is a random string that means nothing outside this app. AppsFlyer passes that measurement back to the advertising networks ShopAir advertises on. On iPhone, none of it happens unless you allow tracking when the app asks. ShopAir does not send AppsFlyer your email address or anything from your lists.
Why ShopAir uses it
- To run the app. Storing your lists and syncing them in real time across your devices and other members.
- To make sharing work. Matching an invitation to the right account by email address, and showing members who did what.
- To send notifications you have asked for, such as when someone adds an item to a shared list.
- To keep the service secure. Investigating abuse, debugging faults, and preventing unauthorised access.
Where the GDPR applies, our legal bases are performance of a contract (running the service you signed up for), your consent (push notifications), and our legitimate interests (security and debugging).
Who else can see your data
Other members of your lists. This is the main one. When you share a list, the people on it see your display name, your email address, the items you add and your activity on that list. When you share a loyalty card, the recipient gets a copy of its details.
Google Firebase.ShopAir runs on Firebase, used for authentication, the Firestore database, cloud functions and push notifications. Firebase stores and processes data on our behalf as a processor. Their handling is governed by Google's privacy documentation.
AppsFlyer. The attribution service described above. It receives device and campaign data as a processor, and forwards measurement to the advertising networks ShopAir buys ads on. It never receives your lists, your items or your loyalty cards.
ShopAir does not sell your personal data. Beyond the advertising measurement described above, it does not share your data with advertisers or data brokers. We may disclose data if we are legally required to, or where it is necessary to protect our rights or someone else's safety.
Where data is stored
Data is held on Google Cloud infrastructure, with our server functions running in the europe-west1 region. Google may process data in other countries; where data leaves the European Economic Area, Google relies on standard contractual clauses and equivalent safeguards.
How long ShopAir keeps it
We keep your content for as long as your account exists. When you delete your account, your profile, the lists you own and their items, your loyalty cards, your invitations and contact requests, and your activity entries are deleted. Backups and infrastructure logs may persist for a short period afterwards before rolling off.
One thing worth understanding: content you contributed to a list owned by somebody else, whether items you added to their list or a loyalty card you shared with them, stays with that owner after you leave or delete your account, because it is part of their list.
Your rights and choices
- Change your name. Tap your profile at the top of Settings.
- Control notifications. Each notification type has its own switch in Settings, and you can turn them off entirely in your device settings.
- Leave a shared list. You are removed from it and stop receiving its updates.
- Delete your account and data. Settings → Delete account. This is immediate and cannot be undone.
Depending on where you live, you may also have the right to access, correct, export or restrict the processing of your personal data, and to complain to your local data protection authority. Write to us at the address below and we will help.
Children
ShopAir is not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child has created an account, contact us and we will remove it.
Changes to this policy
If we change what we collect or how we use it, we will update this page and the date at the top. Significant changes will be signalled in the app as well.
Contact
For any privacy question, or to exercise your rights, email privacy@shopair.app. See also our Terms of Use.