Effective date: May 5, 2026
Last updated: May 5, 2026
We operates the MultiList mobile application for Android (the “App”). This Privacy Policy explains how we collect, use, and share information when you use the App.
By using the App, you agree to this Policy. If you do not agree, please do not use the App.
1. Information the App processes
1.1 Information you provide
Account credentials (cloud sync): If you enable cloud synchronization, you may register or sign in with email and password. Authentication is handled through Supabase Auth. We (via our backend) process your email address and authentication identifiers needed to operate your account.
Content you create in the App: This may include notes, checklists, calendar items, product reviews (including ratings, text, barcodes you scan or enter, and images you attach where supported), and related metadata. This content is primarily stored locally on your device in app databases (Android Room) and may be synchronized to our cloud backend when you are signed in (see Section 2).
1.2 Information collected automatically
App preferences and identifiers stored on-device: The App uses AndroidX DataStore to store settings and operational values such as a randomly generated device identifier (UUID) used only to coordinate synchronization between your devices for the same account. This identifier is not an advertising ID.
Diagnostics and usage: The App includes Google Firebase Crashlytics, which may collect crash reports and diagnostic signals to help us fix defects. The App also includes Google Firebase Analytics, which may collect usage and device-related information (for example app interactions and device metadata) as described in Google’s documentation.
1.3 Optional features that access device data
Barcode scanning: The App uses Google ML Kit / Google Play services code scanning to read barcodes through the device camera when you choose to scan. Processing may involve on-device analysis; Google’s services may collect information according to Google’s policies for these SDKs and Google Play services. The scanned value is used to find or attach information you store in the App.
Opening and saving backups / exports: Where the App uses Android DocumentFile or the system document picker, files are accessed only when you select them, per Android permission and storage access rules.
1.4 Purchases
If you purchase a subscription (e.g., “Sync Pro”), purchases are processed by Google Play Billing. We do not receive your full payment card details. Google provides us with purchase and entitlement information needed to validate subscription status. Your transactions are also subject to Google’s terms and privacy policy.
1.5 Information from others / sharing into the App
The App may receive shared images or plain text from other apps when you use Android Share into MultiList. That content is handled according to your action and stored locally (and in the cloud if sync is enabled).
2. Cloud synchronization (Supabase)
When you sign in, the App may sync your data between devices using Supabase services:
Database (PostgREST): structured sync data associated with your account.
File storage: certain image files related to your workspace may be stored in Supabase Storage.
Supabase processes this information as a service provider / infrastructure provider on our behalf. Data is transmitted over the Internet (the App declares the INTERNET permission).
3. How we use information
We use the information above to:
provide core App functionality (creating, displaying, and organizing your content);
operate authentication and cloud synchronization;
process subscriptions and enforce optional plan limits where applicable;
maintain security and integrity of the service;
diagnose crashes and improve stability (Crashlytics);
understand usage patterns and improve the product (Analytics).
We do not sell your personal information.
4. Sharing with third-party services
Depending on how you use the App, data may be processed by:
Category
Provider
Purpose
Authentication, database, file sync
Supabase
Account login, API access, storage for synced data
Crash reporting
Google Firebase Crashlytics
Crash diagnostics
Analytics
Google Firebase Analytics
Product analytics
Barcode scanning / related Google Play APIs
Google (ML Kit / Play services)
Barcode scanning UI and processing
In-app purchases
Google Play
Payment processing and subscription management
These providers process information under their own terms and privacy policies. We encourage you to review:
Google Privacy Policy
Firebase / Google data disclosures (see also “Google Analytics for Firebase” documentation)
Supabase Privacy
5. Data retention and deletion
On your device: You can remove the App; local data may be erased, subject to Android behavior and any backups you keep outside the App.
In the cloud: Data synced to Supabase remains until you delete it (where the App provides deletion) or delete your account, and/or we delete it according to our operational policies.
To delete your cloud-stored MultiList data and the associated cloud account, sign in inside the app as that user, open the navigation menu, choose Delete cloud account, and confirm using the confirmation word shown. Local data on your device is not removed unless you erase it separately in system or app settings.
Analytics / crash data: Retained according to Google’s retention settings and configuration for our Firebase project.
6. Security
We use industry-standard measures appropriate to the nature of the service (including TLS for network communication where applicable, and access keys scoped to what the client requires). No method of transmission or storage is 100% secure.
7. Your choices and rights
Depending on your location, you may have rights to access, correct, delete, or export personal data, or to object to certain processing. To exercise these rights, contact us at yply.corp@gmail.com. We may need to verify your request.
You can also adjust privacy settings on your device and Google account, and review Google’s ad/privacy controls where applicable.
8. Children’s privacy
The App is intended for general audiences. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, contact yply.corp@gmail.com and we will take appropriate steps.
9. International transfers
If you access the App from outside the country where our service providers process data, your information may be transferred across borders.
10. Changes to this Policy
We may update this Policy from time to time. We will post the updated version with a new “Last updated” date. If changes are material, we will provide additional notice as required by law or by app stores.
11. Contact us
MultiList App
Email: yply.corp@gmail.com