Privacy Policy

We collect the following types of information when you use Listorix: Account Information • Email address (when you sign up) • Display name (optional) • Store preference (local, supermarket, or online) • Monthly budget (optional) Usage Data • Shopping lists and grocery items you create • Item prices and quantities • Shopping trip history and totals • Preferred categories and frequently bought items Device Information • Device type and operating system version • App version • Anonymous crash reports and performance data

We use the information we collect to: • Provide and maintain the App's core features (list management, history, insights) • Sync your data across devices when you are signed in • Generate personalised spending insights and budget alerts • Improve price suggestions based on anonymised data • Send notifications about shopping reminders (if enabled) • Debug issues and improve App performance • Comply with legal obligations We do not use your data for advertising or sell it to third parties.

Local Storage Your shopping list and history are stored on your device using AsyncStorage. This data is available even without an internet connection. Cloud Storage When you create an account, your data is synced to Supabase, a secure cloud database provider. Supabase stores data on servers located in the European Union (Frankfurt, Germany). Retention • Active account data: retained while your account is active • Deleted account data: permanently removed within 30 days of account deletion • Local device data: remains on your device until you uninstall the App or clear data

We share your data only with: Supabase (supabase.com) Our backend database and authentication provider. They process data on our behalf under a Data Processing Agreement. We do not share your data with: • Advertising networks • Data brokers • Social media platforms • Any third party for marketing purposes We may share anonymised, aggregated data (e.g., "the average grocery spend in Bangalore is ₹3,200/month") that cannot be traced back to you.

Voice Input When you use the voice input feature, audio is processed locally on your device. We do not send audio recordings to our servers. Receipt Scanning Photos taken for receipt scanning are sent to our secure edge functions for processing. Receipt images are not stored after the text has been extracted. Camera permissions are only used when you explicitly open the scanning feature.

Under applicable Indian data protection law (DPDP Act 2023) and other regulations, you have the right to: • Access — Request a copy of all personal data we hold about you • Correction — Ask us to correct inaccurate or incomplete data • Erasure — Request deletion of your personal data • Data Portability — Receive your data in a machine-readable format (use Export History in the app) • Withdraw Consent — Opt out of any processing based on consent To exercise these rights, please use the feedback option in the App. We will respond within 30 days.

We implement industry-standard security measures including: • All data in transit encrypted using TLS 1.3 • Data at rest encrypted using AES-256 • Row-level security policies on our database so users can only access their own data • Regular security audits of our infrastructure • Two-factor authentication available for your account No method of electronic storage is 100% secure. We strive to use commercially acceptable means to protect your data but cannot guarantee absolute security.

Listorix is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us through the feedback option in the App and we will promptly delete that information.

The mobile App does not use cookies. We use the following tracking technologies: • Anonymous crash reporting (to fix bugs — no personal data included) • App usage analytics to understand which features are used (aggregated, not linked to individual users) You can opt out of analytics data collection in the App settings (future update).

We may update this Privacy Policy from time to time. We will notify you of significant changes via an in-app notification or email. The date at the top of this policy indicates when it was last updated. We encourage you to review this policy periodically.

For privacy-related questions or to exercise your data rights, please reach out through the feedback option in the App. We are an independent solo developer and will respond to all privacy queries as promptly as possible, typically within 5–10 business days.