Privacy policy
1. Controller
Antonio Parenti · codebits.ch · Switzerland
Email: support@codebits.ch
2. Principle: no accounts, no data collection
Listification works without registration and without a user account. Your shopping lists, favourites, photos and settings are stored locally on your device. We run no servers holding your lists, and we use no third-party analytics, statistics or crash-tracking services. We do not sell data. Advertising is the one place where data goes to a third party — section 5 says how, and on what consent. If your device is signed in to iCloud, the app also syncs your lists through your own iCloud, which is how they reach your other devices. They sit in your Apple Account then, not with us. Sharing a list adds the people you invited — see the two sections below. There is one exception: the optional AI categorisation in section 10, which – for Pro users only, and only once you switch it on – sends individual item names to our server.
If you back up your device with iCloud Backup, the local app data is included in your Apple backup; that process is handled by Apple and governed by your iOS settings.
3. Shared lists (iCloud)
The app syncs your lists between your own devices through your own iCloud (section 2); as long as you do not share a list, nobody but you can see it. Once you do, it is synchronised with the people you invited through Apple iCloud (CloudKit). The data sits in the iCloud account of whoever owns the list. We run no server of our own for this and we have no access to the contents.
- Only the people you invite have access — by link or by name. You can end the share again at any time in the app.
- So that the app can show who changed something, it stores the Apple-issued identifier of the iCloud users involved alongside items and lists. The name shown comes from the share itself and is supplied by Apple.
- Apple's privacy policy governs the processing and storage in iCloud.
- Lists you do not share are unaffected by any of this.
4. Notifications
Notifications for shared lists are switched on in the app, but nothing is delivered until you have given iOS permission. The app asks for it at exactly the moment you share a list or accept an invitation — never at launch. In the settings you can switch them off again, choose the occasions separately, or mute individual lists.
The text of every notification is composed on your device — from your lists, and for a shared list fetched straight from your iCloud when needed. We send no push messages, we run no push server, and we do not learn whether or when a notification was shown.
So that your device learns about changes at all, Listification relies on the silent background notifications of Apple's iCloud sync. Those carry no text and are never displayed. You can switch notifications off again at any time in the app, mute individual lists, or withdraw permission entirely in the iOS settings. Your notification settings and which lists you have muted are kept in step with your other devices through your own iCloud (Apple's iCloud key-value storage) — only on/off values, times and list identifiers, never list names or contents.
5. Advertising (free version only)
The free version shows an advertising banner via Google AdMob (Google Ireland Ltd. / Google LLC). The following applies:
- Whether the advertising is personalised is your decision. If you agree in the consent dialogue, personalised advertising is served; if you decline or do not answer, non-personalised advertising only.
- In addition, iOS asks through App Tracking Transparency for permission to use your device's advertising identifier (IDFA). Without that permission the identifier is not used and the advertising stays non-personalised. You can change it at any time under “Settings ▸ Privacy & Security ▸ Tracking”.
- To deliver the ad and to prevent fraud, Google processes technical data such as the IP address and general device information. Details: Google privacy policy.
- In the EU/EEA and Switzerland, consent is obtained on first launch via Google's consent dialogue (UMP). You can change your choice at any time in the app settings under “Privacy options (advertising)”, provided your country offers such a choice.
- Listification Pro removes the advertising entirely; no advertising-related data processing takes place at all in that case.
6. Purchases (Listification Pro)
Subscriptions and one-off purchases are handled entirely through Apple (App Store / StoreKit). We receive no payment data and no billing addresses – only the anonymous confirmation from Apple that a purchase is active. Apple's privacy terms apply.
7. Barcode scanner
When you scan a product barcode, only the barcode number is sent to the Open Food Facts database (world.openfoodfacts.org) in order to determine the product name and category. No personal data or device identifiers are sent along with it. The camera is also used to photograph an item: the picture stays on your device, and the text on it is read on the device as well, with Apple's Vision framework. Camera access is optional in both cases.
8. Shops nearby
The “Shops nearby” feature uses your location on the device only, to search for grocery shops via Apple Maps (MapKit). The search query is processed by Apple in accordance with Apple's privacy terms. We do not receive or store your location. Sharing your location is optional and can be withdrawn at any time in the iOS settings.
9. Siri and Shortcuts
If you add items using Siri, Apple processes your voice input in accordance with Apple's privacy terms. The app only receives the resulting item text and, when Siri asks, the list you name; to ask, Siri reads out the names of your lists.
10. Categorisation
Automatic aisle assignment starts on the device (a dictionary and – on newer devices – Apple's own on-device AI). No data leaves your device in the process. In the free version, and whenever the switch below is off, that is all that ever happens.
In addition, a cloud AI categorisation is in operation. It belongs to Listification Pro, is switched off by default, and only becomes active once you turn it on yourself under “Settings ▸ AI categorization”. It is also only ever used on devices without Apple's own on-device AI: where that is available, it alone is asked and nothing goes over the network.
When it does run, only the item name you typed is transmitted – one separate request per item to our server api.codebits.ch, which passes it on to the AI provider Anthropic (Claude, USA) to be classified. Not transmitted: the name of the list or the fact that the item belongs to it, the other items, quantities, notes and photos, your iCloud identifier, an account, your location or an advertising ID. Every request carries a signature proving that it comes from the app; it is the same in every installation and identifies neither you nor your device. Anthropic's own terms govern the processing there.
On our server the pair item name → category is stored, so that the same word is never sent to Anthropic a second time. That cache is the same one for every user, holds no reference to a person or a device and is kept with no fixed deletion date; a single entry therefore cannot be traced back to you or to a device. If you switch the feature off again, nothing further is sent from that moment on.
11. Widget
The home screen widget reads local app data only. No network transmission takes place.
12. Your rights
Under the Swiss Data Protection Act (revDSG) and – where applicable – the GDPR, you have, among others, the right to information, rectification and erasure. Deleting the app removes the data on the device. If your device is signed in to iCloud, the copy in your own iCloud is untouched by that; you remove it in the iOS Settings under your Apple Account → “iCloud”, where the app data stored in iCloud can be deleted. For any questions, an email to support@codebits.ch is all it takes.
13. Children
The app is aimed at a general audience. We do not knowingly collect any data from children; the app itself generally does not collect any personal data.
14. Changes
If features change, we will adapt this policy and update the date above. The current version is always available at this address.