Privacy Policy

Everything you type into this app stays on your phone, unless you choose to share a list with someone. There is no account and no sign-in. Purchase checks and app usage diagnostics are sent separately; your private lists are not included.

What we collect

We use PostHog to receive app usage and purchase diagnostics, including first opens, paywall views, store-price loading, purchase and restore outcomes, and store error details. These events include a randomly generated installation identifier, platform, app version, build and update identifiers. They do not include your private lists, photos, name, email address or precise location. We do not use advertising or track you across other companies’ apps.

PostHog estimates an approximate location (country and city) from your connection so we can see roughly where the app is used. The IP address itself is not stored. PostHog receives these diagnostics through its EU service. Its privacy policy is at posthog.com/privacy. Purchases also use Apple or Google and RevenueCat, as described below. Sharing a list sends the selected list only; see Sharing a list below.

What stays on your phone

All of it. Your gift list and who it is for, what you spent and your budget, your Christmas dinner timings, your food shopping list, your Secret Santa draw, your films, your days out, any recipes you add, the theme you chose and any photograph you set behind the countdown. This is stored only in the app's own storage on your device.

Deleting the app deletes all of it. There is no copy anywhere else, and that also means we cannot restore it for you.

Sharing a list

You can share a shopping list, a present list, or one person's Secret Santa name. When you do — and only when you do — that one list is sent to our server and stored against a short code. Whoever you send the code to can put it into their own copy of the app to see the list.

Only the list you chose is sent. Sharing the food shop does not send your presents or your budget. Sharing one person's Secret Santa name does not send anybody else's — each person gets their own separate code.

There is no account attached to a share. We do not know who created it or who opened it, and we do not log the contents. A share is deleted automatically after 60 days, and the person who created it can delete it sooner from within the app.

Anyone who has the code can open the list, so treat a code like the list itself and only send it to the people it is meant for.

Photographs

If you choose your own photo as a theme, the app asks permission to open your photo library. The picture you pick is copied into the app's own storage and never leaves your phone. The app has no access to any other photo, and it does not use the camera.

Notifications

If you turn the daily nudge on, the reminders are scheduled by your phone itself. Nothing is sent from a server, and nothing about them reaches us.

The one-off purchase

Unlocking the app is handled by Apple or Google, and the receipt is checked through RevenueCat, who manage the purchase on our behalf. We never see your card details, your billing address or your full account details — the app store handles payment entirely.

To tell your phone apart from anyone else's, RevenueCat uses an anonymous identifier it generates for the installation. It is not linked to your name or email, and we cannot use it to identify you. RevenueCat's own privacy policy is at revenuecat.com/privacy.

Children

The app is for a general audience and is not directed at children under 13. It does not request children’s names or contact details. Usage diagnostics and purchase checks described above can contain installation identifiers.

Your rights

Under UK GDPR you have the right to see, correct or delete the personal data a company holds about you. We do not require an account, name or email to use the app. Diagnostics and purchase checks use installation identifiers. Contact us if you want help exercising these rights.

A list you chose to share sits on our server until it expires. You can delete it from the app at any time, and it is removed automatically after 60 days. If you cannot reach it — you have changed phone, say — email us with the code and we will delete it for you.

Changes to this policy

If the app ever gains a feature that changes any of the above, this page is updated and the date at the top changes. This version explains app usage diagnostics, purchase checks and optional shared lists.

Contact

Questions about this policy, or about the app: sales@posterkingzuk.com.