Your Lists/Privacy Policy

Privacy Policy

Last updated: 17 June 2026

This Privacy Policy describes how Lutarea ("we", "us", or "our") handles information in connection with the mobile application Your Lists (the "App") for Apple iOS and iPadOS. The App is associated with the bundle identifier com.lutarea.yourlists.

1. Summary

Your Lists is designed to store and process your list data on your device. We do not operate our own backend database that receives the contents of your lists for advertising or resale. The App does not sync your live list database through Apple CloudKit; optional backup uses iCloud Drive files you control (see below). The App does not include third-party advertising or analytics SDKs in the current version.

2. Data we process

Depending on how you use the App, categories of information may include:

  • Lists and items — titles, notes, completion or wishlist status, sort order, nested groups, categories, genres, and similar fields you enter.
  • Images and attachments — cover images you choose from your photo library or attach to items, and files stored in the App's local storage.
  • Links — URLs you save; opening a link uses the system browser or handler you approve.
  • Preferences — theme, language, display options (for example, grouping by genre), and similar in-app settings stored locally.
  • Security settings (optional) — if you enable app passcode, a hash of your code is stored in the device Keychain; Face ID or Touch ID is handled by iOS when you turn it on. Biometric templates are not sent to Lutarea.
  • Import and export data — when you import or export list files (for example .ylist JSON documents), that data is read or written on your device or shared through system share sheets you initiate.
  • Optional iCloud Drive backup — if you enable backup in Settings, the App writes .ylist backup files to the shared Lutarea iCloud container iCloud.com.lutarea.backups under the folder Your Lists Backups (visible in the Files app under Lutarea BACKUPS). Lutarea does not receive the contents of those backups on its own servers. Backups created in an older per-app iCloud container are not moved automatically.
  • Local notifications (optional) — if you set wishlist reminder or event dates, the App may schedule on-device notifications through iOS. No Lutarea push server is used.
  • Spotlight (optional) — the App may index item titles locally so you can open them from system search; indexing stays on the device.
  • Share Extension (optional) — when you add a link from another app, the extension may store the URL, title, and chosen list identifier in the App Group until the main App imports it locally.
  • Home screen widgets (optional) — if you add widgets, the App writes a limited on-device snapshot (list titles, item counts, in-progress items, cover thumbnails) to the App Group for its widget extension. Widget content may be visible on your home screen without opening the App.
  • Shortcuts (optional) — actions you run may read a URL from the clipboard or open the App via deep links (yourlists://). Processing stays on the device.
  • Link preview metadata — when you add or edit a link, the App may fetch public page metadata (for example title or preview image) from the URL you entered to help fill in fields. That request goes to the site you specified, not to a Lutarea analytics service.
  • Diagnostics visible to Apple — if you opt in to share analytics with Apple as part of your device settings, Apple may collect crash or usage diagnostics according to Apple's policies.

3. Purposes and legal bases (EEA, UK, and similar)

Where the GDPR or similar laws apply, we rely on appropriate bases such as:

  • Performance of a contract / steps at your request — providing the App and its features you choose to use.
  • Legitimate interests — securing the App, preventing abuse, and improving stability, where not overridden by your rights.
  • Consent — where required for optional permissions (for example access to photos), as managed by iOS.

4. Storage and retention

Data is stored locally using Apple's on-device persistence technologies (including SwiftData as implemented in the App). Optional iCloud Drive backups, widget snapshots, and Share Extension queues use Apple-managed storage on your device or in your iCloud account. We do not receive a continuous feed of your list contents on Lutarea servers solely because you use the App.

Retention is controlled by you: you can delete lists and items in the App or uninstall the App. Exported backup files are files you manage yourself.

5. Sharing

We do not sell your personal information. Data may be processed by:

  • Apple — as platform provider (App Store, device security, photo picker, iCloud Drive, App Groups, and system frameworks).
  • People you choose — when you export or share list files through the system share sheet or other channels you control.
  • Law and safety — if we are legally required to disclose information, or to protect rights and safety, subject to applicable law.

6. International transfers

Because core list data stays on your device, international transfer questions mainly arise if you choose to share data with others or use Apple services subject to Apple's own terms and safeguards.

7. Security

The App supports optional passcode and biometric lock and a privacy overlay in the app switcher when it is in the background. You are responsible for keeping your device and Apple ID secure. Local database, media, and App Group files may use Apple file protection until first unlock after device restart. Exported files may contain your personal data; protect them accordingly.

8. Your rights

Depending on your location, you may have rights to access, rectify, delete, restrict, port, or object to certain processing of your personal data. Many requests can be fulfilled directly in the App by editing or deleting your content. You may also contact us using the email below.

9. Children

The App is not directed at children under the age where parental consent is required in your jurisdiction. Do not use the App for children below that age without appropriate parental authority and compliance with local rules.

10. Changes

We may update this Privacy Policy from time to time. We will adjust the "Last updated" date above. Where required by law, we will provide additional notice.

11. Contact

Privacy-related questions for Your Lists: support@lutarea.com.

Lutarea