Updated: October 19, 2026
Shared Lists is provided under the RigelTec brand. For privacy questions, access or correction requests, or deletion assistance, email support@rigeltec.com.
To remove your account or individual content, visit account and data deletion. You can request deletion by email without reinstalling the app.
Information processed by the app
- Account information: a user identifier; your display name and email when provided; and a profile-photo URL if supplied through Google sign-in. Guest mode also creates an authenticated user identifier, even without an email address.
- Shared content: list titles and categories, items, list-chat messages, item comments, assignments, due dates, recurrence schedules and time zones, completion status, participant details, invitation codes and timestamps.
- Conversation state: message counts and per-account read state used to display unread indicators.
- Preferences and device information: notification preferences, device-registration identifiers, notification tokens and platform information needed to send notifications.
- Operational records: service and security logs, failed-operation or delivery information, and access-control/deletion records needed to operate the service and prevent abuse.
The app does not provide photo/video uploads, microphone recording, contact-book access or precise-location features. A Google profile-photo URL is different from access to your photo library. Text you enter in lists or messages can contain personal or sensitive information; avoid entering information you do not want participants to see.
Why this information is used
- Provide sign-in and guest access, maintain accounts and link a guest account to a registered sign-in.
- Store and synchronize lists and conversations between authorized participants.
- Support assignments, recurring items, unread indicators and relevant activity notifications.
- Manage invitations, participant removal, ownership transfers and deletion requests.
- Respond to support requests, troubleshoot failures and protect the service against misuse.
What other participants can see
Participants can see shared list content, messages, comments, assignments, completion information and display names associated with activity. People who join later can see earlier list content and conversation history. Only invite people you intend to share with.
Unread indicators are based on your account's conversation state; they are not a promise of WhatsApp-style read receipts for other participants. Notification previews may show list names, item text or message content on a device's lock screen, depending on its settings.
Service providers
Shared Lists uses Firebase and Google Cloud for authentication, database storage, synchronization, backend processing and Firebase Cloud Messaging notifications. Google sign-in is processed by Google. These providers may process information in countries other than your own; using a European database or invitation endpoint does not mean all processing stays in Europe.
This website and support email use OVHcloud services. When you email support, your address, message and any attachments are processed to handle the request. Google's and OVHcloud's privacy information is available at Google Privacy Policy and OVHcloud Privacy Policy.
Data retention and deletion
Account and shared-list data is retained while it is used to provide the service, unless you delete it or request its removal.
- Ordinary list deletion: owned lists are hidden and recoverable in Trash for 30 days, unless permanently deleted sooner. Automated cleanup removes expired lists and their contents; completion is not guaranteed at an exact second.
- Account deletion: your sign-in account, profile, notification registrations, read state, memberships, list-chat messages and item comments are removed through server-side cleanup. Owned lists are permanently deleted if you choose that option; accepted transfers preserve the lists for their new owners.
- Shared items: items in other people's lists remain with account attribution anonymized and assignments to the deleted account cleared. Personal information typed into item text is not automatically detected or removed.
- Security identifiers: deleted-account/list/item markers, revoked invitation records, participant-block identifiers and disabled notification-token ownership records may remain to prevent stale devices or requests from recreating deleted data or bypassing restrictions. No automatic expiry is currently configured for these security records.
- Operational receipts: notification-delivery receipts are scheduled for cleanup after 30 days and write-operation receipts after 90 days. Cleanup runs periodically, so removal may occur later than the threshold.
Hosting, email and cloud services also maintain operational or security logs according to their configured retention settings. Support correspondence may be retained to resolve and document your request. Contact us for information about records associated with you; this policy does not promise that all provider logs or independently saved copies disappear immediately.
Your choices
You can manage notification preferences, leave lists, edit or delete content when permitted, and delete your account. For access, correction, deletion, portability or an objection to processing, contact support@rigeltec.com. We may need to verify your identity before acting on a request. Where applicable, you can also raise a concern with your data protection authority.
Authors can edit their own messages. Message authors and list owners can delete messages. Before deleting an account, owners can transfer lists to an existing registered participant who accepts, or permanently delete the lists they still own.
Guest access and local storage
Guest accounts use Firebase authentication and cloud storage. Linking a guest account to Google or email sign-in helps preserve access on another device. If the original unlinked guest session is lost, account recovery may not be possible.
The app stores local preferences, drafts and queued changes needed for its operation. Offline item additions sync when connectivity returns. Not every feature is available offline.
Website links and cookies
These website pages do not add advertising cookies, analytics scripts or tracking pixels. The QR code contains the direct Google Play app URL; scanning it does not pass through a RigelTec tracking service. Following an external link subjects that visit to the destination's own privacy practices.
The hosting provider may process technical access information such as your IP address and requested URL. Invitation links contain a code in the URL; treat them as shareable access information. The website does not query the app database to validate a code.
Security
The app uses encrypted network connections and authenticated access controls to restrict shared content to authorized participants. These measures reduce risk but do not guarantee absolute security. Do not send passwords, sign-in codes or private invitation links to support.
Children
Shared Lists is not directed to children under 13. If you believe a child has provided personal information, contact us so we can investigate and handle the request.
Updates and contact
We may update this policy as the app and service change. The updated date will appear on this page. For questions, email support@rigeltec.com or visit Contact.