Privacy Policy

Effective Date: April 2, 2026

Introduction

Goodlist ("we," "us," or "our") operates the Goodlist mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our App.

By using Goodlist, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the App.

Information We Collect

Account Information

When you sign up for Goodlist, we collect information through your chosen sign-in provider:

  • Google Sign-In: Your email address, display name, and profile photo URL
  • Apple Sign-In: Your email address (or a private relay email) and display name

You may also provide or update your display name and profile photo within the App.

User-Generated Content

We store the content you create within the App, including:

  • Lists (collection names and settings)
  • Product items (names, brands, descriptions, prices, URLs, and images)
  • Personal notes and reviews attached to items
  • Photos you upload to items or notes

Clipboard Data

When you use the "Import Link" feature, the App reads your device clipboard to detect product URLs you have copied. This data is only read when you navigate to the import screen and is used solely to streamline the import process. Clipboard contents are not stored or transmitted unless you choose to import the detected link.

Usage Data

We collect usage data to understand how the App is used and to improve the experience. This includes events such as sign-in, sign-out, and general feature usage (e.g., items added, collections created, invites sent). Your account identifier and email are associated with usage events to provide a personalized experience and support. We use PostHog for product analytics.

Error and Crash Data

We use Sentry to collect error reports and crash data. This helps us identify and fix issues. Error reports may include device information, app state, and stack traces, but do not intentionally include personal content.

How We Use Your Information

  • Provide the Service: To create your account, store your lists and items, and enable sharing and collaboration features.
  • Product Extraction: When you save a product by URL, we use AI services to extract product information (name, brand, price, images) from the web page. The URL and page content are processed — not your personal data.
  • Improve the App: Usage analytics help us understand which features are valuable and where the experience can be improved.
  • Error Monitoring: Crash reports help us quickly identify and resolve bugs and stability issues.

How We Share Your Information

We do not sell your personal information. We share data with the following third-party service providers solely to operate and improve the App:

  • Firebase Authentication (Google): Handles sign-in and identity verification.
  • InstantDB: Our real-time database that stores your account data, lists, items, and collaboration data.
  • Amazon Web Services (S3 & CloudFront): Stores and delivers product images and photos you upload. Images are stored in user-scoped directories with access-controlled URLs.
  • PostHog: Processes product analytics events, associated with your account identifier.
  • Sentry: Processes error and crash reports.
  • OpenAI: Processes web page content for AI-powered product data extraction. Personal user data is not sent to OpenAI.
  • Firecrawl: Fetches web page content from product URLs you share, for product data extraction.

Sharing and Collaboration

Goodlist is designed for sharing with people you choose. When you share a list:

  • Invited collaborators can view items, notes, and photos within that list.
  • Collaborators can add items, write notes, and comment on existing items.
  • Invite links expire after 24 hours and can be revoked at any time.
  • Only people you explicitly invite can access your lists.

Share Extension

Goodlist includes an iOS Share Extension that lets you save products directly from other apps (such as Safari or shopping apps). When you use the Share Extension, the shared URL is sent to our servers for product data extraction using the same process described above. The Share Extension accesses your authentication credentials via a shared keychain group so you don't need to sign in again.

In-App Browser

The App includes an in-app browser that lets you browse product pages without leaving Goodlist. Websites you visit in the in-app browser may set cookies or collect data according to their own privacy policies. We do not access or store your browsing history from the in-app browser.

Third-Party Content

Product images, names, and descriptions displayed in the App are sourced from URLs you provide. This content originates from third-party websites and is displayed for personal reference purposes. If you are a content owner and believe your content is being used improperly, please contact us to request its removal.

Device Permissions

The App may request the following device permissions:

  • Camera: To take photos of products for your notes and items.
  • Photo Library: To select existing photos to attach to items and notes.
  • Clipboard: To detect copied product URLs when importing items (read-only, with user initiation).

These permissions are optional and only used when you initiate the action.

Data Storage and Security

Your data is stored using industry-standard cloud services. Account data and content are stored in InstantDB with user-scoped access controls. Images are stored on Amazon S3 and delivered via CloudFront CDN with access-controlled URLs.

We use HTTPS for all data transmission. While we take reasonable measures to protect your information, no method of electronic storage or transmission is 100% secure.

Your Rights

You have the right to:

  • Access your data: All your lists, items, notes, and photos are visible within the App.
  • Delete your account: You can delete your account from within the App at any time. This permanently removes your profile information, all collections you own (and their items), your notes and photos, and your authentication credentials.
  • Control sharing: You can remove collaborators from your lists and revoke invite links at any time.

Children's Privacy

Goodlist is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us and we will promptly delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy within the App or on our website. The "Effective Date" at the top of this policy indicates when it was last revised.

Contact Us

If you have questions or concerns about this Privacy Policy, please contact us at:

[email protected]