PackList — Privacy Policy

Last updated: May 4, 2026

This Privacy Policy describes how PackList ("the App", "we", "us") handles your information. We are committed to protecting your privacy and being transparent about our practices.

1. Information We Collect

PackList is designed with privacy in mind. We collect minimal data:

• Lists and items: The checklists you create are stored locally on your device and, if you enable sharing, on Google Firebase Firestore.
• Anonymous authentication: We use Firebase Anonymous Authentication to identify devices for list sharing. No personal information (name, email, phone) is collected.
• Usage patterns (local only): The app tracks which items you frequently add or check to provide smart suggestions. This data is stored exclusively on your device using AsyncStorage and is never transmitted to any server.
• Preferences: Theme, language, and notification settings are stored locally on your device.
• Voice input (only when you use it): When you tap the microphone to create a list, your speech is processed for transcription. We do not store audio recordings. See section 6 for details.

2. Information We Do NOT Collect

• We do not collect your name, email address, or phone number.
• We do not collect your location.
• We do not collect photos, contacts, or any personal files.
• We do not retain audio recordings of your voice — only the text transcription is processed, and only at the moment you use the feature.
• We do not sell, trade, or share your data with third parties for marketing purposes.

3. Third-Party Services

The App uses the following third-party services, each with their own privacy policies:

• Google Firebase (Authentication, Firestore): Used for anonymous authentication and shared list storage. Firebase Privacy Policy
• Google AdMob: Used to display banner advertisements. AdMob may collect device identifiers and usage data for ad personalization. You can opt out of personalized ads in your device settings. Google Privacy Policy
• Expo / EAS: Used for app updates and notifications infrastructure. Expo Privacy Policy
• Google Speech Services (only when you use the voice feature): Your spoken input is sent to your device's system speech recognizer to be converted to text. On most Android devices this is provided by Google. Google Privacy Policy
• Groq (only when you use the voice feature): The transcribed text is sent to Groq's hosted Llama model to generate a structured checklist. The text is not retained beyond the request. Groq Privacy Policy

4. List Sharing

When you share a list, the list data (name, items, and check states) is stored on Firebase Firestore and accessible to anyone with the sharing link. No personal information is attached to shared lists — only an anonymous device identifier.

5. Notifications

If you enable notifications, the App schedules local reminders for recurring lists. These notifications are processed entirely on your device. No notification data is sent to external servers.

6. Voice Input

The voice-to-list feature is opt-in and only activates when you tap the microphone. Here is exactly what happens:

• Microphone access: The App asks for microphone permission the first time you use the feature. You can revoke it at any time in your device settings.
• Speech-to-text: Your spoken input is transcribed by your device's system speech recognizer. On most Android devices this routes through Google Speech Services, which means audio briefly leaves your device for transcription.
• List generation: The transcribed text (not the audio) is then sent to Groq, our AI provider, to generate a structured checklist. The text is processed in real time and not stored on our servers.
• What we keep: Only the final list — the items, name, and emoji you confirm — is saved, exactly as if you had typed it manually.
• What we do not keep: Audio recordings, raw transcripts, and intermediate AI outputs are never stored by PackList.

An internet connection is required for the voice feature because both transcription and list generation rely on cloud services.

7. Advertisements

The App displays banner ads through Google AdMob. By default, we request non-personalized ads only. AdMob may still collect certain device information as described in Google's privacy policy. You can manage ad preferences in your device's Google Settings.

8. Data Storage and Security

• Local data is stored on your device using AsyncStorage and is protected by your device's security features.
• Cloud data (shared lists) is stored on Google Firebase servers with encryption in transit and at rest.
• We do not store any data on our own servers.

9. Data Deletion

You are in full control of your data in PackList. There are three ways to delete your data, with different scopes:

In-app deletion (immediate)

• Delete a single list: swipe left on a list card and tap "Delete", or open the list and use the menu → "Delete".
• Reset learning data: open the app, go to Settings → "Clear learning data". This wipes the on-device usage profile (items you frequently add/remove) and the synced cloud copy.
• Uninstall the app: removes all local data on your device immediately.

Full account & cloud data deletion

To request the deletion of all data associated with your device's Anonymous Auth identifier — including all synced lists on Firebase Firestore, your usage profile, and the Anonymous Auth record itself — send an email to annunziatoco@gmail.com with subject "PackList — Data Deletion Request" from the email associated with your device. You will receive confirmation of deletion within 7 days.

What gets deleted vs. retained

• Deleted: all lists, list items, weather context, recurring schedules, usage profile, user profile (country/household/diet preferences), Anonymous Auth identifier on Firebase.
• Retained: nothing. The deletion is complete and irreversible. Cached anonymized analytics aggregates (if any) cannot be associated back to your identifier after deletion.

10. Children's Privacy

The App does not knowingly collect information from children under 13. The App is rated for all ages and does not contain age-restricted content.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected by updating the "Last updated" date at the top of this page.

---

Contact

If you have questions about this Privacy Policy, please contact us at:
annunziatoco@gmail.com