My Lists

Privacy notice

Last updated: 5 October 2026

Who is responsible

My Lists (myfamilylist.org) is run by Anton Sokolov, the controller of your personal data under the EU General Data Protection Regulation (GDPR). Questions and requests: [email protected].

What we process and why

  • Account — your email address (to sign in), your name in the app, an optional photo, your language and settings, and your plan. To provide the service you asked for (Art. 6(1)(b)).
  • What you add — lists, households and their members, pantry contents, prices, stores, receipts and the people you add as friends. Art. 6(1)(b).
  • Messages — invitations you send to other people, summaries and reminders, and phone notifications if you turn them on; the email address of someone you invite is used to invite them. Each email lets the recipient stop such emails. Art. 6(1)(b), and our legitimate interest in letting you invite people (Art. 6(1)(f)).
  • Location — only when you choose to share it, to set where a store is. Your consent (Art. 6(1)(a)).
  • Technical and security data — information about your device and connection, and records of activity and errors, used to run the app, keep it secure and prevent abuse. Our legitimate interest in a safe, working service (Art. 6(1)(f)).
  • Usage statistics — only if you allow them: how the app is used, without advertising or tracking across sites. Your consent (Art. 6(1)(a)); you can withdraw it at any time in your profile.
  • Visits to the welcome page — counted anonymously, by approximate area. Our legitimate interest (Art. 6(1)(f)).

Automated processing

Some features use automated processing, including artificial intelligence, by our service providers — for example to translate text, suggest details or read receipts. It is not used to make decisions about you, and your content is not used to train such systems.

Who else sees your data

  • People you share with — friends see the lists you share with them; members of your households see the household and what belongs to it.
  • Our administrators — to run and support the app, as far as needed.
  • Service providers — for hosting, sign-in, email, notifications and automated processing, acting on our instructions under data processing agreements.

We never sell your data or share it for advertising.

Transfers outside the EU

Some service providers may process data outside the European Economic Area. Such transfers rely on an adequacy decision of the European Commission or on its Standard Contractual Clauses.

How long we keep it

  • Your account and what you add: until you delete them or your account.
  • Technical, security and usage records: up to six months; usage statistics end earlier if you withdraw consent.
  • Data kept to prevent abuse or to honour a request to stop emails: only as long as needed for that purpose.

Storage on your device

We store only what is strictly necessary on your device: a cookie that keeps you signed in, and your language and screen preferences. No consent is needed for these.

Security

We protect your data with appropriate technical and organisational measures, including encrypted connections and passwordless sign-in.

Your rights

You have the right to access your data, to have it corrected or erased, to restrict or object to its processing, to receive it in a portable format, and to withdraw consent at any time. In the app, Profile → Download my data gives you a copy and Profile → Delete my account erases your account. For anything else, write to [email protected]; we answer within one month.

An email address is needed to sign in; without it we cannot provide the app. You may also complain to a data protection authority — in Bulgaria the Commission for Personal Data Protection (cpdp.bg) — or the authority where you live.

Children

The app is meant for adults and families. Children under 14 should use it only with a parent’s permission.

Changes

If this notice changes, we update the date above and tell you in the app when the change matters.