Privacy Policy

Last updated: 7 October 2026

This policy has two parts: the first covers the operation of the website https://remindery.de/shopping/, the second the Remindery: Shopping List app.

Controller

Controller within the meaning of the EU General Data Protection Regulation (GDPR):

Patrick Steinborn
Remindery Apps
Wulfsdorfer Weg 85b
22926 Ahrensburg, Germany
Phone: +49 156 79823172
Email: kontakt@remindery.de

This Website

Hosting (GitHub Pages)

This website is hosted by GitHub, Inc., 88 Colin P. Kelly Jr. St., San Francisco, CA 94107, USA, as a "GitHub Pages" site. When you open the page, GitHub processes technically necessary data in server logs, in particular your device's IP address. The purpose is to deliver the page and to keep operation stable and secure. We ourselves have no access to these logs.

The legal basis is Art. 6(1)(f) GDPR – our legitimate interest in operating the website securely and reliably.

Transfer to the USA: GitHub is certified under the EU-US Data Privacy Framework and additionally offers Standard Contractual Clauses as a safeguard. GitHub determines how long the logs are retained; for details, see GitHub's privacy statement: https://docs.github.com/privacy

No Cookies on This Website

This website sets no cookies and embeds no external fonts, scripts, or trackers. That is also why you will not find a cookie banner there: there is nothing to consent to.

Google Play (Download and Usage Statistics)

The app is distributed through the Google Play Store. When you visit the Play Store and download the app, Google processes data as its own controller, which is outside our influence; Google's privacy policy applies: https://policies.google.com/privacy

Google also collects technical information and statistics during usage (e.g. install and crash reports) and provides them to us only in aggregated, anonymized form – we cannot identify individual users from this data.

After a few completed shopping trips, the app may show the Google Play rating dialog (Play In-App Review). The dialog belongs to Google Play, and Google processes the data for it as its own controller. The app learns neither whether the dialog appeared nor whether or how you rate.

The Remindery: Shopping List App

The Short Version

Data only leaves your device if you share a list. If you never share a list and never send feedback, your shopping list stays exclusively on your device. The app works entirely without an account. Exceptions: the image search, which starts only when you tap (see “Image Search”), and advertising, which starts after 5 days at the earliest and only after your choice (see “Advertising”).

Local Data Storage

All data you enter into the app – lists, items, quantities, notes, categories, history, and settings – is first stored on your device (the app's local SQLite database). Uninstalling the app removes all stored data from your device. The app deliberately does not take part in Android's data backup (cloud backup) or in the transfer when you switch devices. To move to a new phone, use the app's backup export feature (a JSON file in a place of your choosing); what happens to that file afterwards is your own decision, or is subject to the privacy policy of the provider where you store it.

Shared Lists

If you share a list using a 6-character code, the app transmits data to our server so the other members can see and edit the same list.

Whatever you write into a shared list is stored unchanged so that the other members can see it – we do not read or analyse it. Please do not enter health information or other people's personal data in item names or notes of a shared list (for example medication with a name).

• Server location: Frankfurt am Main (eu-central-1), no transfer to a third country.
• Processor: Amazon Web Services EMEA SARL, Luxembourg (data processing agreement under the AWS Service Terms, including Standard Contractual Clauses).
• Stored per shared list: the list content (list name, colour, items with name, quantity, note, category, done/archived/deleted timestamp, creation time), a technical timestamp per field together with a random device identifier generated when the app was installed, a freely chosen display name per member (a pseudonym – you may enter any name), the hashes of two random device/membership secrets, join and last contact time, the "currently shopping" status (valid for 10 minutes), the join code (valid for 24 hours).
• Not stored: accounts, real names (unless you voluntarily enter your real name as a display name), email addresses, phone numbers, location, advertising ID, device model. Lists that are never shared never leave the device.
• IP address: processed to deliver the request and stored only as a hash of a shortened address prefix, valid for 2 hours and then deleted automatically (the database removes expired entries in the background, usually within a few days), to protect against guessing join codes.
• Recipients: only the other members of the same shared list see its content, display names, and the "currently shopping" status. No one else – except us after a report (see "Reporting, Removal and Block List").
• Purpose and legal basis: providing the "share list" feature you requested (Art. 6(1)(b) GDPR); abuse prevention, e.g. the rate limit against guessing codes (Art. 6(1)(f) GDPR).
• Retention: the whole list (including its code) is deleted once the last member leaves it, or at the latest 180 days after any member's last contact (daily automatic cleanup). Your own membership is deleted once you leave the list, or likewise after 180 days without contact from your device. The join code expires after 24 hours. The database keeps automatic backup copies (point-in-time recovery) that reach back at most 35 days; deleted data is gone from them by then at the latest.
• Aggregated statistics: we evaluate how many lists are shared and how many devices are on each list – without any personal reference, without content, only as a number.
• Technical and organisational measures: encrypted transport (TLS) and storage, only hashed secrets (no plaintext passwords), minimal server permissions; server logs (CloudWatch, 14 days) never contain list content, join codes, or credentials – only route, status, and error type.

Reporting, Removal and Block List

The Terms of Use apply to shared lists. For this we process the following data.

• Report of a member: If you report a member of a shared list in the app, we store the list ID, the member ID of the reported member, your own member ID, the display name of the reported member, the time, and – only if you write one – a free text of at most 500 characters. We receive no contact details from you; the reported member is not notified.
• Purpose and legal basis: Protecting members and moderating shared lists (Art. 6(1)(f) GDPR); where we must handle reports under the Digital Services Act, also Art. 6(1)(c) GDPR in conjunction with Art. 16 DSA.
• Provider access: We do not, as a rule, look at the content of a shared list. Only after a report do we review the reported member's entries in that list. We are told about new reports by an email that contains only a number, no content.
• Retention of the report: 90 days, or earlier once it has been handled (at most 35 days longer in the database's backup copies).
• Creator flag: The server remembers which member shared the list (member ID) so that only that member can remove other members. The flag is deleted with the list.
• Block list: If a member is removed from a list, we store with that list the hashes of the removed device's device identifier and device key, the time, and whether the creator or we removed them. The purpose is that this device cannot rejoin the list (Art. 6(1)(f) GDPR). The block list lives with the list and is deleted with it (at the latest 180 days after any member's last contact). The removed device keeps its local copy.
• Statistics: Without any personal reference, we count how many members were removed and how many reports were received – only as a number.

Feedback ("Report a wish or a bug")

If you use the feedback screen in the app, we transmit the type you chose (wish, bug, or praise), your text, an optional email address you entered, plus the app version, Android version, a device identifier (manufacturer/model), your configured language, whether you currently share a list, and the number of your lists to our server. All of this is shown to you before sending – nothing goes along secretly.

• Purpose: product improvement and, if you provide an email address, follow-up questions about your message (Art. 6(1)(f) GDPR, our legitimate interest in improving the app and answering your enquiry).
• The message is sent without a device identifier and without any link to a shared list.
• Abuse prevention: so that no one can flood the channel, the server counts messages per hash of a shortened IP address prefix; this counter is valid for 2 hours and then deleted automatically (Art. 6(1)(f) GDPR).
• Retention: 12 months, then automatic deletion (at most 35 days longer in the database's backup copies). On request, we delete your message earlier – just write to us at kontakt@remindery.de.
• If you have no connection or our server cannot be reached, the app first stores your message only on the device and sends it automatically the next time it starts.

Voice Input

The microphone icon in the input bar opens your Android operating system's speech recognition (a system dialog). The app itself sends nothing to us or to third parties; what happens to your voice recording is determined by your device manufacturer or Google (depending on your system's configured speech recognition service) – see your device's own privacy information for details.

Image Search ("View images")

The item sheet has a "View images" button. Only if you tap it, the Google image search opens in a browser window (Chrome Custom Tab or your default browser). The item name (without amount or note) is transmitted to Google as the search term; Google may process, among other things, your IP address. Google's privacy policy applies. The app itself sends nothing to us in the process. Without this tap, nothing goes to Google. The legal basis is your action of explicitly starting the search (Art. 6(1)(b) or (f) GDPR).

Home Screen Widget and Background Sync

The app shows no notifications. The widget runs entirely on your device. Only for shared lists does the app check our server for changes in the background about every 15 minutes (Android WorkManager), so that the list and the widget stay up to date. This involves the same data described under "Shared Lists". No push service (e.g. Firebase Cloud Messaging) is used; no data is transmitted to Google or third parties.

Advertising (only after your choice)

For the first 5 days after the first launch, the app shows no advertising. The advertising SDK Google AdMob is part of the app, but it is not started during that time: no consent dialog appears, and no advertising data flows. After that the app asks once whether you want to continue for free or choose the purchase "Ad-free" (see "Purchases"). Only if you choose "Continue for free" (or close the prompt without choosing) do we start the advertising SDK and show a small banner at the bottom of the screen, never inside your list. If you buy before the SDK has been started, it never starts; if you buy later, it no longer starts from the next app launch.

• Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google AdMob). Google acts as an independent controller, or as a joint controller with us, for serving the ads; we ourselves receive no advertising data and do not analyse any.
• Data processed: your device's advertising ID, IP address (from which an approximate location is derived), device and software information, interactions with the ad (e.g. impression, tap), and crash and diagnostic data from the SDK. Transmission is TLS-encrypted.
• Purposes: serving and billing ads, fraud prevention and security, measuring ad performance; with your consent, also personalised ads.
• Consent check: Once the advertising SDK has been started, the app asks Google at every launch whether consent is required for your location (User Messaging Platform). This sends your IP address and device information to Google – worldwide, also outside the EU. The consent dialog itself is shown only where it is required.
• Consent: In the EU, the EEA, the United Kingdom and Switzerland, the app obtains your consent before the first ad through Google's consent dialog (User Messaging Platform, based on the IAB Transparency & Consent Framework, TCF). "Consent" and "Do not consent" are given equal weight. The legal basis is your consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG (access to the advertising ID and device). Where the dialog relies on legitimate interest for individual purposes (Art. 6(1)(f) GDPR), the dialog says so, and you can object there. We have not pre-enabled "legitimate interest".
• You can decline: The app then shows only limited (non-personalised) ads. For serving these and for fraud protection, Google processes a minimum of data on the basis of Art. 6(1)(f) GDPR.
• Withdraw at any time: Where consent is required, the app's settings show the entry "Change ad consent"; there you can change your choice with effect for the future. You can also reset or delete the advertising ID in the Android settings. After buying "Ad-free", no advertising data is processed any more.
• Transfer to third countries: Google may transfer data to the USA and other countries. Google LLC is certified under the EU-US Data Privacy Framework; Standard Contractual Clauses also apply.
• Retention: determined by Google. The app stores your consent choice on your device until you change it or uninstall the app.
• More: How Google uses data from apps that use its advertising services: https://policies.google.com/technologies/partner-sites · Google's privacy policy: https://policies.google.com/privacy · List of advertising partners: in the consent dialog under "Manage options".

Purchases ("Ad-free")

The optional one-time purchase "Ad-free" (€1.49, one-off, no subscription, tied to your Google account) is handled entirely by Google Play. Google Play processes payment and account data as an independent controller; we receive no payment data and run no server for this. At launch, the app only asks Google Play for the purchase status (also during the first 5 days) and stores it on your device; this is not tracking and only serves to hide advertising after the purchase. Legal basis: performance of a contract (Art. 6(1)(b) GDPR). If the purchase is refunded, it lapses and the banner returns. Google's privacy policy applies: https://policies.google.com/privacy

No Tracking Besides Advertising

The app contains no analytics/tracking SDK. The only third-party SDK is Google's advertising SDK, which, as described above, is started only after your choice.

No Automated Decision-Making

We do not use automated individual decision-making, including profiling (Art. 22 GDPR).

Your Rights as a Data Subject

The GDPR grants you, among others, the rights of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection (Art. 21), as well as the right to lodge a complaint with a data protection supervisory authority (Art. 77).

Right to object under Art. 21 GDPR: Where we process data on the basis of our legitimate interests (Art. 6(1)(f) GDPR) – this concerns the server logs generated when you visit our website, abuse prevention when sharing lists, the handling of reports, the block list, and the handling of your feedback – you have the right to object to that processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

For lists you never share, we hold no data about which we could provide information, or which we could rectify, erase, or transfer – these rights come to nothing there in practice, because we simply have nothing stored. For shared lists, reports, feedback messages, and server logs, you can exercise your rights without restriction; the quickest way is kontakt@remindery.de. Please note for the website's server logs that we have no access to them ourselves – in that respect GitHub is the right addressee.

For any privacy-related questions, you can reach us at: kontakt@remindery.de

Changes to This Privacy Policy

Should future app features require further processing of personal data, we will update this privacy policy accordingly and publish it in the app and at this location. The current version published here always applies.