Privacy Policy
My GroceriesList · kanzari.hamza@gmail.com· Last updated: May 29, 2026
This policy describes how Hamza Kanzari collects, uses, and protects your personal data when you use My GroceriesList. We are committed to transparency and your right to privacy.
Data We Collect
| Data | Purpose | Retention | Third Parties | Legal Basis |
|---|---|---|---|---|
| Email address | Account creation, authentication, and transactional emails (e.g. password reset) | Retained for the lifetime of the account. Deleted within 30 days of account deletion. | Supabase (authentication and database infrastructure) | Contractual necessity |
| Display name and avatar | Personalising the user profile shown to household members | Retained for the lifetime of the account. Deleted within 30 days of account deletion. | Supabase (database infrastructure) | Contractual necessity |
| Grocery lists and items | Core app functionality — storing, syncing, and sharing grocery lists across devices and household members | Retained for the lifetime of the account. Deleted within 30 days of account deletion. | Supabase (database infrastructure) | Contractual necessity |
| Household and group membership | Enabling shared grocery lists between users who belong to the same household group | Retained for the lifetime of the account. Deleted within 30 days of account deletion. | Supabase (database infrastructure) | Contractual necessity |
| Subscription and purchase status | Determining whether a user has an active Pro subscription to unlock premium features | Retained for the lifetime of the account. Deleted within 30 days of account deletion. | RevenueCat (subscription management) | Contractual necessity |
| Device locale and currency preference | Displaying prices and dates in the user's preferred format | Retained in the user profile for the lifetime of the account. | None | Legitimate interest |
| Usage analytics (anonymous) | Understanding how the app is used in order to improve features and fix issues | Aggregated and anonymised — not linked to individual accounts. | None | Legitimate interest |
Your Rights
You have the right to access, correct, or delete your personal data at any time. To exercise these rights, contact us at kanzari.hamza@gmail.com.
Changes to This Policy
We may update this policy as our practices change. The “Last updated” date at the top of this page reflects the most recent revision.