Privacy Policy

1. Introduction

Welcome to ListLyzer. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our mobile application.

2. Information We Collect

2.1 Information You Provide

• Registered account information (email address and password credentials) • Shopping lists and items you create • Shops and products you add • Receipt details you enter manually • For Subscription receipt scanning: receipt images you choose to upload and the resulting OCR data

2.2 Information Sent to Server Features

• Guest and Free personal app data stays on your device • Registered/cloud accounts send account credentials to the backend for authentication • Subscription cloud sync sends personal app data to the backend so it can sync across devices • Subscription receipt scanning uploads the receipt images you select and related scan data to the backend • App-usage analytics and crash-reporting services are currently disabled

3. How We Use Your Information

We use your information to: • Provide and maintain the app and its server features • Authenticate registered/cloud accounts on the server • Process shopping lists and receipt data • Extract receipt text on the backend with Tesseract OCR • Retain images from successful receipt scans and anonymize data derived from them for potential use in training an automated data-identification model • Sync personal app data across devices for users with a Subscription Where the GDPR applies, our legal basis for uploading and processing receipt images for automated extraction is performance of our contract with you, namely providing the receipt-scanning service you request. Our legal basis for preparing and using retained scan data to improve an automated data-identification model is our legitimate interest in improving receipt extraction. Training uses anonymized data. You may object to this processing by contacting privacy@listlyzer.com.

4. Data Storage and Authentication

• Guest and Free personal app data stays locally on your device • Personal cloud sync is available only as a Subscription capability • Registered/cloud account passwords are authenticated server-side; the app does not store a locally usable password hash • Receipt images uploaded for successful scans are retained on the server as described in Section 7 • After processing, uploaded receipt images are not returned to or displayed to any user in the app, including the person who uploaded them

5. Data Sharing

We do not sell, trade, or rent your personal information to third parties. Receipt images are processed on the ListLyzer backend using Tesseract OCR running locally there. We do not send receipt images to an LLM, a third-party AI or OCR service, or any external provider for training or otherwise. Other data may be shared only in these circumstances: • With your explicit consent • To comply with legal obligations • To protect our rights and safety • With service providers needed to operate account, cloud, or subscription features App-store subscription purchases are processed by the App Store or Google Play and their service providers under their own policies.

6. Your Controls

You can use in-app controls to: • Access and correct the app data available to you • Export all account data available in the app as JSON and export receipt and receipt-item data as CSV from Settings → Export Data • Delete your registered/cloud account from Settings → Delete Account; after the server confirms deletion, all cloud data for the account is deleted, local data for that cloud account is cleared, and you are logged out Deleting your ListLyzer account does not cancel an App Store or Google Play subscription. You must manage or cancel that subscription separately through the store.

7. Data Retention

Cloud account data is kept while the account is active or as needed to provide the requested cloud features. In-app account deletion removes the account and all associated cloud data when the server confirms the request; it is not held for an additional 30-day deletion period. For a successful receipt scan, uploaded images are retained on the server for automated data extraction. Before any training use, data derived from those images is anonymized and may then be used to train an automated data-identification model. The uploaded images are not displayed back to any user after processing, including the person who uploaded them. A daily retention sweep automatically deletes server-side receipt images once they are older than 30 days, and account deletion also removes retained images associated with the account.

8. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.

9. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this privacy policy.

10. Cookies and Tracking

App-usage analytics and crash reporting are currently disabled in ListLyzer. Subscription purchases and subscription management are handled through the App Store or Google Play, which process data under their own policies.

11. Changes to This Policy

We may update this privacy policy from time to time. The “Last Updated” date above identifies the current revision available in the app.

12. Contact Us

If you have questions about this privacy policy or our data practices, please contact us at: Email: privacy@listlyzer.com Address: [Your Company Address]