Privacy Policy

• Your email address and display name, so we can sign you in and label your list.
• Optional profile details you choose to add: avatar photo, handle, short bio, home location.
• The bucket-list items you create: titles, notes, categories, dates, locations and map pins, steps/goals, and completion dates.
• Photos you upload to items or your profile.
• Check-in files you import, converted into items on your list.
• Badges, level/XP, and Life List progress derived from the above.

• No advertising, and no ad networks.
• No analytics or behavioural tracking pixels, and no cross-site tracking.
• We never sell, rent, or trade your data. Ever.
• We don't read your list to market to you.

Everything you add is private by default. Content becomes visible to others only when you deliberately share it:

• Share links for a single item show that item's title, status, dates, location, photo, and steps to anyone with the link.
• Milestone cards you generate are viewable by anyone with the link.
• Public profile (off unless you turn it on) shows your avatar, display name, bio, home location, badges, Life List progress, and completed pins. Your to-do items and private notes are never shown.
• Collaborators you invite by email can see and update the specific items you shared with them.

You can turn any of these off, and deleting a share link revokes access immediately.

We use a hosting and database provider to run the app and store your data, and a mapping service to geocode place names you type so we can drop a pin. Sign-in with Google uses Google's OAuth to confirm your identity — we receive your email, name, and profile picture, and nothing else from your Google account. These providers process data on our behalf and are not permitted to use it for their own purposes.

• Export: you can request a copy of your data at any time.
• Delete: Profile settings → Delete account permanently removes your account, items, goals, badges, milestones, Life List progress, share links, and uploaded photos.
• Correct: edit any item or profile field directly in the app.

Deletion is immediate and irreversible — there is no hidden archive copy.

Data is encrypted in transit, access is scoped per-user at the database level, and photos are served through expiring signed URLs unless you've made them public. We keep your data for as long as your account exists. Delete the account and it's gone.

The List isn't intended for children under 13, and we don't knowingly collect their data.

If this policy changes in a way that affects what we collect, we'll say so in the app before it takes effect. Questions, export requests, or complaints: use the contact address listed on our sign-in page or reply to any email you receive from us.