Privacy Policy

Last updated: October 17, 2026

1. Data Controller

The entity responsible for data processing is:

2. Data Collected

We collect and process the following categories of personal data:

Data Category	Examples	Legal Basis
Account Data	Username, email address, password (encrypted)	Art. 6(1)(b) GDPR (contract performance)
Usage Data	Shopping lists, purchased items, product preferences	Art. 6(1)(b) GDPR (contract performance)
Technical Data	IP address, device ID, app version, operating system	Art. 6(1)(f) GDPR (legitimate interest)
Location Data	Approximate location for supermarket finder and deals	Art. 6(1)(a) GDPR (consent)
Voice Data	Temporary voice recordings (processed locally)	Art. 6(1)(a) GDPR (consent)
Camera/Photos	Scanned shopping lists, receipts (temporary)	Art. 6(1)(a) GDPR (consent)
Region & Language	Country code (e.g., DE, AT), preferred language	Art. 6(1)(f) GDPR (legitimate interest)

2.1 Login and Security Log

We additionally log sign-ins and sign-outs with a timestamp and IP address to detect unauthorized access to your account. Guest accounts are logged without an IP address. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the security of accounts). The IP address is deleted from the entry after 30 days; the activity entry itself is deleted after 90 days. Deletion runs weekly. You can view these entries through the data export in your account settings. The IP address is shown truncated there, for IPv4 to the first three octets, for IPv6 to the first four groups. Deleting your account also deletes these entries completely.

3. Purpose of Data Processing

Your data is processed for the following purposes:

• Providing app features: Creating and managing shopping lists
• Personalization: AI-based product recommendations based on your preferences
• Collaboration: Sharing lists with other users
• Deal Alerts: Notifications about offers near you
• Security: Protection against misuse and fraud
• Improvement: Analysis of anonymized data for app optimization
• Error analysis and troubleshooting: Identifying and fixing technical faults. For this we may also access personal usage data — such as failed imports, error logs or content you created — where this is necessary to find the cause. Legal basis: Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(f) GDPR (legitimate interest in a functioning service).
• Support: Answering inquiries and technical support — including us contacting you when we detect a technical error affecting your use of the app
• Regional Services: Providing location-appropriate deals and content

4. Data Sharing

Your data is only shared with third parties in the following cases:

4.1 Hosting and Technical Service Providers

• Server Hosting: Storage on secure servers in Germany/EU
• Firebase (Google): Push notifications

4.2 Map Services and Location Data

• OpenStreetMap (OSM Foundation): Display of supermarket locations near you
  • Server location: EU (Germany)
  • Privacy compliant, Open Data Initiative
  • No sharing of personal data
• Nominatim (OpenStreetMap): Converting GPS coordinates to addresses (geocoding)
  • Server location: EU
  • Only anonymized location queries
  • No storage of personal data

4.3 Deal and Product Data

• Marktguru API: Offer data from supermarkets (REWE, EDEKA, Lidl, ALDI, etc.)
  • Server location: Germany
  • No sharing of your personal data
  • Only retrieval of public offer data
• OpenFoodFacts: Product information for barcode scans
  • Non-profit, Open Database
  • Server location: EU (France)
  • No personal data transmitted

4.4 AI Services

Claude (Anthropic PBC, USA). For features that you trigger yourself, we send the content needed for them to Anthropic. This covers: voice commands (as text), photos of receipts and price tags, loyalty cards, recipes, and appointments or notices, recipe texts, list and pantry contents for recipe and meal-plan suggestions, your preferences and your diet, if you have entered them, titles of existing family events and your request text for household suggestions, and photos you upload to the community cookbook (automatic review). For product names, icons, categories and price estimates, only the product names are sent to Anthropic, with no link to your account.

Anthropic processes this data on our behalf (Art. 28 GDPR). According to Anthropic, requests and responses are normally deleted within 30 days, and kept longer only if Anthropic has to retain them to prevent abuse or because of legal obligations. The legal basis is Art. 6(1)(b) GDPR, because the analysis is part of the feature you asked for. We base the translation of feedback and support messages for our team on Art. 6(1)(f) GDPR. The transfer to the USA relies on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR), which are part of our contract with Anthropic. If Anthropic is unavailable, we process some requests on a server of our own in Germany.

4.5 Data Transfer to Third Countries

4.6 No Sharing for Advertising Purposes

4.6a Advertising in app versions up to 1.16.28

SwipeList up to and including version 1.16.28 included Google AdMob (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to display advertising banners. AdMob could read information such as the advertising ID on your device and transmit it to Google. On iOS, the app also showed the system prompt for app tracking. These versions did not contain a separate consent dialog for advertising. From version 1.16.29, SwipeList contains no advertising and no advertising SDK. We recommend updating the app. On iOS you can also switch tracking off under Settings › Privacy & Security › Tracking, and on Android you can delete the advertising ID under Settings › Google › Ads. Information on processing by Google: https://policies.google.com/technologies/ads

4.7 Subscriptions and Purchases – RevenueCat

For subscriptions and in-app purchases we use RevenueCat, Inc. (USA) as a processor. The payment itself is handled by Google Play or the Apple App Store; we do not see your payment data. RevenueCat receives your SwipeList user ID, an app user ID and the purchase receipts (product, time, term, status) so that we can unlock your subscription and restore purchases. The legal basis is Art. 6(1)(b) GDPR (performance of a contract). The transfer to the USA relies on the EU Commission's standard contractual clauses in the data processing agreement with RevenueCat. The data is kept as long as your account exists, and beyond that as far as commercial and tax retention obligations require.

5. Storage Duration

• Account data: Until account deletion
• Shopping lists: Until manual deletion by you
• Technical logs: Maximum 90 days
• Voice recordings: Deleted immediately after processing (local)
• Scanned photos: Deleted immediately after text recognition
• Translation cache: Automatically deleted after 24 hours

6. Your Rights (GDPR)

You have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR): You can request information about your stored data
• Right to rectification (Art. 16 GDPR): You can have incorrect data corrected
• Right to erasure (Art. 17 GDPR): You can request deletion of your data
• Right to restriction (Art. 18 GDPR): You can have processing restricted
• Right to data portability (Art. 20 GDPR): You can receive your data in a common format
• Right to object (Art. 21 GDPR): You can object to processing
• Right to withdraw consent (Art. 7(3) GDPR): You can withdraw given consents at any time

7. Data Security

We implement technical and organizational security measures:

• Encryption: TLS/SSL for all data transmissions
• Password Hashing: Passwords are hashed with bcrypt
• Two-Factor Authentication: Optionally available
• Access Controls: Strict permission systems
• Regular Audits: Security reviews
• Backups: Encrypted, regular data backups

8. Cookies and Tracking

The app uses minimal cookies and tracking:

• Necessary Cookies: Authentication and session management

For more details, see our Cookie Policy.

9. Data Processing for Minors

The app is intended for persons aged 16 and older. If we discover that data has been collected from persons under 16 without parental consent, it will be deleted immediately.

10. International Use

SwipeList is available internationally. Deal features are currently limited to Germany and Austria. We track your region to provide location-appropriate services and to inform you when features become available in your area.

11. Automated Decision-Making and Profiling (Art. 22 GDPR)

SwipeList uses AI-powered features for product suggestions, categorization, and price estimates. These serve solely to improve your user experience.

12. Required and Optional Data

For using SwipeList, we distinguish between:

• Required Data: Email address and password (for registration and login)
• Optional Data: Username, profile picture, location (for extended features like nearby deals)

Without the required data, you cannot use the app. The optional data enhances your experience but is not mandatory.

13. Changes to the Privacy Policy

We reserve the right to update this privacy policy to adapt it to changed legal situations or features. You will be notified of significant changes via email or in-app notification.

14. Right to Complain

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your data violates the GDPR.

15. Contact for Privacy

For questions about data protection or to exercise your rights, contact us:

We will respond to your request within 30 days in accordance with Art. 12(3) GDPR.