Privacy Policy — MayaList

Last updated: 2026-07-03

This Policy explains how MayaList ("the app") handles your personal data.

1. Who we are

MayaList is a collaborative shopping list app. For privacy questions, contact: mayalist.dev@gmail.com.

Data Protection Officer (DPO): the MayaList team — mayalist.dev@gmail.com.

2. Data we collect

• Authentication data (email and password login): name and email.

• Content you create: lists, items (name, quantity, price), chat messages, and purchase history.

• Participants you add to your lists (email).

• Device identifier (Android: SSAID; iOS: identifierForVendor), used solely for fraud/abuse prevention — to limit the free trial to one per device. We do not use IMEI, serial number, or advertising identifier.

We do not collect sensitive data and we do not use your data for advertising.

3. How we use it

• To enable login and identify you in the app.

• To create, sync, and share your lists in real time with the participants you choose.

• To keep your purchase history.

4. Legal basis

We process your data based on your consent and on the performance of the service you request by using the app. The device identifier is processed based on the legitimate interest of preventing fraud and abuse of the trial period, limited to that purpose.

5. Where the data is stored

Data is stored on Supabase (Postgres database), in the Brazil region (São Paulo — sa-east-1). Supabase Inc. acts as data processor. Some supporting services may process data on servers in other countries, with the international transfer safeguards required by applicable law.

6. Sharing

Your list data is visible only to the participants you add to that list. We do not sell or share your data with third parties for marketing purposes. By adding participants by email, you declare that you have a legitimate basis to use that contact and are responsible for that addition.

7. Security

We use security rules that restrict access to each list's data to its participants only.

8. Minimum age

MayaList is not directed at children under 13, and we do not knowingly collect data from children under 13. By using the app, you declare that you are at least 13 years old. Minors under 18 must use it with the consent and supervision of a parent or legal guardian.

9. Your rights

At any time you may: confirm and access your data, correct incomplete data, request deletion of your data and account, and withdraw consent. To delete your account and all associated data, use "Settings > Privacy > Delete my account" in the app, see the account deletion page, or write to mayalist.dev@gmail.com.

10. Retention and deletion

We keep your data for as long as your account exists. Chat messages are temporary: only the most recent are kept and older ones are deleted automatically. When you delete your account, we remove your profile, the lists you own, and associated data.

11. Changes

We may update this Policy. Relevant changes will be announced in the app.

Contact: mayalist.dev@gmail.com