MyList — Task Management App
Effective Date: May 8, 2026
This Privacy Policy explains how MyList ("we", "us", or "the app") handles your information when you use the iOS application MyList. We've tried to write this in plain language so you actually know what's going on. If anything's unclear, please contact us using the details at the bottom.
MyList is operated by Peter Tomanek, an independent developer based in Canada. You can reach us at staypuft00@gmail.com.
Account information: When you create an account, we collect your email address and a password (the password is hashed; we never see it in plain text). This is required so we can:
Your lists and tasks: The categories, tasks, notes, and step-by-step subtasks you create are stored on our servers so they're available on every device you sign in to. You can edit or delete any of this content at any time.
Photos you choose to import: When you use the "Import from Photo" feature, the image you select is sent to our server, then forwarded to Anthropic's Claude API which reads handwriting/text and extracts tasks. Images are processed and not retained on our servers after the response is returned. We do not use your photos for training, advertising, or any purpose other than fulfilling your specific request.
In-app purchases: When you buy credits, Apple processes the transaction. We receive a receipt that we verify with Apple's servers to confirm the purchase is legitimate, then we add the credits to your account. We do not receive your credit card information. Apple's own Privacy Policy covers their handling of payment data.
Diagnostic information: We may collect basic crash reports and error logs to help us fix bugs. This does not include the contents of your lists.
We share data only with the service providers we need to actually run the app. We have data-processing agreements with each of them, and they're contractually limited to using your data on our behalf:
That's it. No advertisers, no data brokers, no analytics resellers.
We keep your account and your lists for as long as your account is active. If you delete your account from inside the app (Settings → Account → Delete Account), your account row and all your lists, tasks, and credit balance are permanently removed from our database within a few seconds.
Diagnostic logs may be retained for up to 90 days for debugging purposes, but these do not contain your list contents.
MyList is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we'll delete it.
Our servers are located in regions chosen by Supabase. If you're using MyList from outside Canada, your data may be transferred to and processed in Canada or other countries where Supabase operates. We rely on the same protections (encryption in transit, encryption at rest, data-processing agreements) regardless of where you are.
We use industry-standard practices to protect your data: HTTPS/TLS for all network communication, encrypted database storage on Supabase, password hashing for authentication. That said, no online service can guarantee 100% security. If we ever experience a data breach affecting your information, we'll notify you within a reasonable timeframe.
If we make a meaningful change to this policy we'll update the Effective Date at the top and (for substantive changes) notify you in-app the next time you open MyList. Continued use of the app after a policy change means you accept the updated terms.
Questions about this policy, your data, or privacy in general? Email us at staypuft00@gmail.com. We try to respond within a few business days.