Privacy Policy

ReadyList ("we", "us", or "our") provides a collaborative checklist app for groups planning vacations, weddings, moves, and other events. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using ReadyList you agree to the practices described here.

Information we collect

We collect only what we need to run the service:

• Account information. When you sign in with Google or Apple, we receive your email address and, where the provider supplies it, your name and profile picture. We use this to create and identify your account. If you use Apple's "Hide My Email", we only ever receive the relay address Apple generates for you, never your real one.
• Content you create. Events, checklist items, your task progress, team membership, and messages you post in event chat.
• Invitations. When you invite someone to an event, we process the email address you provide in order to send the invitation.
• Messages you send us. If you use the contact form, we receive your name, email, and message so we can respond.
• Technical data. Basic log and device data (such as browser type and IP address) generated automatically when you use the app.
• App usage. Inside the app, we record a small set of actions linked to your account, such as creating a list, sharing or accepting an invitation, and completing your first task. This helps us understand whether ReadyList is working for groups. It contains no task text, messages or names. When you join through an invitation, we also record who invited you. We also record when your account was last active.
• Website analytics. On our website we record anonymous page views to understand which pages people find useful. This uses no cookies and no advertising identifiers, and it cannot be used to identify you or follow you to other sites. Each view records the page, the referring site, an approximate location, and your browser, operating system, and device type. We deliberately strip invitation links and email-preference tokens out of the recorded address before it is sent.

How we use your information

• To provide, maintain, and improve ReadyList.
• To authenticate you and keep your account secure.
• To send transactional emails such as event invitations and task reminders.
• To send occasional product news — new features and app releases — but only if you have explicitly opted in. This is off by default, and you can change it at any time on the email preferences page or from the link at the bottom of any email we send.
• To respond to your support requests and messages.
• To detect, prevent, and address technical issues or abuse. Our team does not routinely view the content of your events or checklists. We may access it only to investigate a report, respond to a support request you make, or meet a legal obligation, and every such access is logged. We never read event chat messages, except a specific message someone has reported to us.

We do not sell your personal information, and we do not use it for third-party advertising.

Service providers

We rely on a small number of trusted providers to operate ReadyList:

• Supabase — database, authentication, and hosting of your account and event data.
• Google — sign-in (OAuth) when you choose to log in with Google.
• Apple — sign-in when you choose Sign in with Apple.
• Expo — delivery of push notifications to the iPhone app.
• Resend — delivery of reminder, invitation, and contact emails.
• Vercel — hosting and delivery of the web application, and anonymous website analytics.

These providers process data on our behalf and are bound to keep it secure. They may store data in jurisdictions outside your own.

Cookies and local storage

We use your browser's local storage and cookies to keep you signed in and to remember interface preferences (for example, dismissed prompts and your language). We do not use third-party advertising or tracking cookies, and our website analytics sets no cookies at all.

Data retention

We keep your information for as long as your account is active. You can delete individual events at any time, and you can request deletion of your account and associated data by contacting us. App usage records are deleted when you delete your account.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information. To exercise any of these rights, reach out through our contact form and we will respond within a reasonable timeframe.

Children

ReadyList is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, please contact us so we can remove it.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. Significant changes will be communicated within the app where appropriate.

Contact us

Questions about this policy or your data? Use our contact form and we'll be happy to help.