Privacy policy
Lysflo is a shared shopping list for a household, made by Alanview Group LLC ("we", "us"). This policy covers the Lysflo apps for iPhone and Android and this website. It says what Lysflo stores, why, who can see it, and how to delete it.
Lysflo has no ads, no analytics and no tracking. We don't sell your data, and we don't share it with anyone for their own use.
What Lysflo stores
| What | Why |
|---|---|
| Your name and email address | To sign you in, and to show the people in your household who is in it. |
| Your password, stored only as a one-way hash | If you sign up with email and password. Nobody can read the password back out of it, us included. |
| Your Google account ID, profile photo address, and the sign-in tokens Google returns | If you choose Continue with Google. Your photo is shown as your picture in the app. |
| Your list: items, amounts, categories, when each was added and bought, and who added or bought it | This is what the app is for. Bought items stay as your household's history until the household is deleted. |
| Stores, aisles, products, other names for products, and which aisle each product is in | To sort the list in the order you walk a store, and to suggest things you have added before. |
| Your household's name, its members and their roles, and its join codes | To share one list between the people in a household. |
| Sign-in sessions, with the IP address and type of device each one was started from | To keep you signed in and to keep your account secure. A session ends when you sign out or after a week without use. |
| A record of each change the app sends after being offline | So a change made without signal is applied exactly once. These records are deleted after 60 days. |
Lysflo doesn't collect your location, contacts, photos, payment details, health information, or anything about other apps on your phone.
What stays on your phone
- Your sign-in session, and your name, email address and photo address, kept in the phone's secure storage so the app can open without signal.
- A copy of your household's list, stores and products, so Lysflo works offline. Signing out or deleting your account erases it from the phone.
- Your choice of light or dark appearance.
The camera is used only while the Scan sheet is open, to read a household join code. The picture never leaves the phone and isn't saved. Only the code it reads is used.
Who can see your data
People in your household. Everyone in a household can see its list, stores, aisles and products, and each member's name, email address, profile photo and role. People join a household only with a join code from its owner. Codes stop working after 7 days. The owner can remove members, and anyone else can leave.
Companies that run Lysflo for us. They handle data only to provide their service to us:
- Vercel hosts the Lysflo server and this website.
- Neon hosts the database.
- Expo delivers app updates. Each time the app opens, it asks Expo's update server whether a newer version is available. That request carries the app's version and your phone's platform and, like any internet request, your IP address. It carries no account or list data.
- Google handles sign-in if you choose Continue with Google, under Google's privacy policy. The profile photos of people who signed in with Google load from Google's servers.
Apple and Google also run the App Store and Google Play, where you download Lysflo. What they collect is covered by their own privacy policies.
When the law requires it. We'll disclose data if we're legally required to, for example by a valid court order. If Alanview Group LLC or Lysflo is ever sold or merged, your data would pass to the new owner under this policy.
Your data is stored in the United States. It travels between the app and our servers over encrypted HTTPS connections, and the database encrypts it at rest.
How long we keep it
Until you delete it. Deleting your account removes it immediately, as described below. Copies in our database host's short-term recovery backups expire on their own as those backups roll over. Our hosting provider keeps server error logs for a short time to help us fix problems.
Deleting your account
In the app, tap your picture at the top of the list, scroll to Privacy, and tap Delete account. This permanently deletes:
- your account, your sign-in details and all your sessions
- every household where you are the only member, with its list, stores, aisles and products
A household you share with other people keeps going for them. If you owned it, ownership passes to the member who joined first. Items you added to or ticked off on a shared list stay there with your name removed.
You can also delete your account without the app.
Your rights
You can ask us for a copy of your data, to correct it, or to delete it. Email admin@alanview.com from the address on your account and we'll reply within 30 days. You can change your name in the app at any time.
Depending on where you live, laws such as the GDPR in the EU and UK or the CCPA in California give you these rights. We give them to everyone. If you're in the EU or UK, we handle your data because it's needed to provide the app you signed up for, and to keep it secure. You can also complain to your local data protection authority.
We don't sell personal information, and we don't share it for cross-context behavioral advertising.
Children
Lysflo isn't directed at children under 13, and we don't knowingly collect their data. If you think a child under 13 has given us personal information, email us and we'll delete it.
Changes to this policy
When this policy changes, the date at the top changes too. If a change affects what we collect or who can see it, we'll also say so in the app or on this site before it takes effect.
Contact
Alanview Group LLC
admin@alanview.com