Shopping Lists (with widget), Android package com.ernestoyaquello.lista.de.la.compra, is published by Julio Ernesto Rodríguez Cabañas, trading on Google Play as Ernestoyaquello (“we”, “us” or “the developer”).
Privacy contact: listasdecompra@gmail.com
This policy explains how the app stores and processes information and how Google and advertising partners used by the app may process information.
The app works without an account or developer-operated server. Shopping information is primarily stored locally on the device.
Locally stored information can include:
Shopping-list, item and suggestion names.
Prices, units, checked status, item ordering, colours and similar list details.
Settings such as currency, theme, price-field visibility and widget preferences.
A cached indication of whether the Pro version has been purchased.
This information is used to provide list editing, suggestions, totals, widgets, preferences and offline recognition of a cached Pro entitlement.
The app does not intentionally send shopping-list names, item or suggestion text, or shopping-item prices to Firebase, Google Analytics or advertising services. Because list fields accept free text, users should avoid entering sensitive personal information.
Users can share a list through Android’s sharing interface. Sharing is initiated by the user and sends the chosen content to the app or person selected by the user. The recipient’s privacy practices then apply.
When Android backup is enabled on the device, Android may copy selected app data into the user’s private Google backup storage or transfer it while setting up another device.
The scoped backup may include shopping lists, items, suggestions, prices, units, checked states, ordering, colours, portable app settings and the cached Pro entitlement. Other app files are excluded by the app’s backup rules.
This is a periodic backup and restore facility, not continuous synchronisation. A backup is not guaranteed to happen immediately or at all. Android may restore a backup when the app is installed again or during device setup.
Google operates this service. We cannot browse, download or otherwise access a user’s cloud backup. Users can manage backup through their Android or Google Account settings. Clearing the app’s local storage or uninstalling it does not necessarily delete an existing cloud backup immediately, and restoring an older backup may restore older app data.
Google protects backups using the user’s Google Account and encryption. Eligible Android devices with a screen lock may also use end-to-end backup encryption. More information is available in the Android backup documentation.
Users whose valid Pro purchase is recognised do not receive ads. A cached Pro entitlement is honoured while offline, although a later successful Google Play verification may revoke it following a refund or account change.
Buying Pro removes advertising but does not disable Firebase Analytics, Crashlytics, Performance Monitoring or checks for applicable privacy messages.
For other users, the app uses Google AdMob and the Google User Messaging Platform (“UMP”). UMP determines whether a regional privacy message or privacy-options entry point is required and records choices made through that message. The app requests an ad only when UMP reports that an ad request is permitted.
Google Mobile Ads may automatically collect and share:
IP address, which can be used to estimate approximate location.
App launches, taps, ad interactions and video views where applicable.
App and advertising SDK diagnostics.
Advertising, app, device and account identifiers, including the Android advertising ID, App Set ID, publisher first-party identifiers and, where applicable, identifiers associated with accounts signed into the device.
Consent and privacy signals associated with an ad request.
This information is used for advertising, measurement, analytics, frequency control, security and fraud prevention. The app does not request GPS or precise-location permission for advertising.
Depending on the user’s region, choices and applicable law, Google may provide personalised, non-personalised or limited ads. Rejecting personalised advertising does not remove advertising. Non-personalised and limited ads may still use contextual information, approximate location, restricted technical signals and fraud-prevention information.
Google may make ad requests available to advertising partners participating in its programmatic marketplace, including authorised buyers, bidders, ad networks and ad-technology vendors. Not every partner receives every request. Where required, the UMP message identifies the currently applicable partners and links to their disclosures. The broader current list is described in Google’s ad-technology partner information.
Some privacy laws may describe personalised-ad data transfers as a “sale”, “sharing” or targeted advertising. Where required, the UMP privacy message provides the applicable choice.
We do not provide shopping-list content to advertisers. More information about Google’s processing is available in How Google uses information from sites or apps that use its services.
The app uses Google Analytics for Firebase to understand general app usage and improve the app.
Analytics may process:
An app-instance identifier and advertising identifier where available.
Approximate location derived from a masked IP address.
App lifecycle events, sessions and screen views.
General device, operating-system and app-version information.
In-app purchase events, including the Pro product identifier, product name, currency and price.
The app records only fixed, general screen names. It does not deliberately include shopping-list names, item names, suggestion text, shopping-item prices, email addresses or an app-defined user ID in Analytics events.
The Analytics property is linked to AdMob and Google Play. Google Play purchase information may therefore appear in Analytics, and Analytics information may be made available to AdMob for advertising measurement and related features.
The Google Analytics “Google products & services” data-sharing setting is enabled. Consequently, Google may use Analytics data covered by that setting as an independent controller to improve Google products and services, including advertising systems and invalid-traffic detection.
Where the Google UMP message and Consent Mode apply, privacy choices are communicated for ad storage, ad personalisation, ad-user-data and analytics-storage purposes. Refusing consent does not necessarily stop every transmission: limited consent-mode measurement signals may still be sent where permitted.
The Analytics property is configured to retain covered user-level and event-level data for two months. This setting does not necessarily remove aggregated standard reports, which may remain for longer.
The app uses Firebase Crashlytics to identify and fix crashes.
Crashlytics may process crash stack traces, relevant app and device state, device metadata, installation and session identifiers and Analytics breadcrumbs around a crash. The app does not deliberately attach shopping-list content, custom personal-information fields or an app-specific user ID to crash reports.
Depending on the Firebase–Google Play product integration settings, app and crash information may also be made available through Google Play Console.
Firebase currently states that Crashlytics retains crash traces and associated identifiers for 90 days before beginning their removal from live and backup systems.
The app uses Firebase Performance Monitoring to diagnose speed, reliability and resource-use problems.
Performance Monitoring may process app start and rendering timings, network-request performance, CPU and memory information, device and app metadata, installation and session identifiers, and IP address for country-level reporting. The app does not create custom performance traces containing shopping data.
Firebase currently states that Performance Monitoring keeps IP-associated events for 30 days and installation-associated or de-identified performance data for 60 days before beginning their removal.
Crashlytics and Performance Monitoring operate automatically and are not disabled by purchasing Pro. UMP’s advertising choices are not a universal opt-out from these services.
More information is available in Firebase privacy and security information.
pro_version is a one-time, non-consumable, non-expirable Google Play purchase that removes ads while the purchase remains valid.
Google Play handles payment and financial details. We do not receive card or bank-account information. The app receives product information, purchase status and a purchase token from Google Play so that it can grant, acknowledge and restore the entitlement. The app does not send the purchase token to a developer-operated backend and stores only the resulting entitlement status for ongoing local use.
Google Analytics may automatically record the Pro product identifier, product name and price. Google retains transaction information according to its payment, legal, security and fraud-prevention requirements.
Technical, usage, advertising, consent, diagnostic and purchase-related information may be processed by:
Google, through AdMob, UMP, Google Analytics, Firebase services, Google Play Billing and Android backup.
Advertising partners participating in the AdMob marketplace, where permitted by privacy choices and applicable law.
An app or person selected by the user when the user explicitly shares a shopping list.
Public authorities where disclosure is legally required.
Google generally provides Firebase services on our behalf. For advertising and for Analytics data covered by enabled Google data-sharing settings, Google and advertising partners may also act as independent controllers under their own terms.
We can access reports made available through Analytics, Firebase, AdMob and Google Play Console. We cannot access the app’s local shopping database or Android cloud backup.
Shopping content and settings remain locally until the user edits or deletes them, clears the app’s storage or uninstalls the app. Deleting an item or list does not necessarily remove a matching entry retained in suggestion history. Clearing the app’s storage removes the local database and preferences.
An Android backup may continue to contain an older copy until Google replaces or removes that backup. Users must manage cloud backups separately through Android or Google Account controls.
Google and advertising partners retain advertising, consent, Analytics and purchase information under their applicable settings, legal requirements and privacy policies. The specific Firebase retention periods are described above.
The app does not have an account system or a developer-operated database. It currently does not provide a mechanism capable of locating and deleting all pseudonymous records held by Google and advertising partners for a particular user. Because these records are normally associated with device or installation identifiers rather than an email address, we may not be able to identify them from an email address alone.
Depending on device and region, users can:
Reopen the app’s Privacy options screen to change applicable advertising choices.
Manage Google advertising personalisation through My Ad Center.
Reset or delete the Android advertising ID through device settings.
Purchase Pro to stop future ad requests after the entitlement is recognised.
Manage Android backup through device or Google Account settings.
Delete lists and items or clear all local app storage through Android settings.
The current version does not provide one global switch that disables Analytics, Crashlytics and Performance Monitoring.
The app uses Android app-private storage for local data. Google states that information transmitted by Google Mobile Ads and Firebase is encrypted in transit using TLS or HTTPS. Android cloud backups are protected by the user’s Google Account and applicable Android backup encryption.
No storage or transmission system is completely secure, and absolute security cannot be guaranteed.
Google, its service providers and advertising partners operate internationally. Advertising, Analytics, diagnostic, billing and backup information may be processed outside the user’s country where these organisations maintain facilities. Their applicable terms and privacy policies describe the safeguards used for international transfers.
Google’s Privacy Policy is available at https://policies.google.com/privacy.
The app is intended for users aged 18 and over and is not directed to children.
The app does not ask users for their age, name or email address and does not use shopping-list content to infer age. If a parent or guardian believes that information relating to a child has been processed inconsistently with this policy, they may contact us.
Where applicable law requires a legal basis, processing may rely on:
Providing requested app functionality or the Pro purchase.
Consent for personalised advertising, local device storage or related processing where required.
Legitimate interests in maintaining and improving the app, general measurement, security and fraud prevention where permitted.
Compliance with legal obligations.
Google and advertising partners may rely on separate legal grounds for processing performed for their own purposes.
Depending on location, users may have rights concerning access, correction, deletion, restriction, objection, portability or withdrawal of consent. Privacy enquiries can be sent to listasdecompra@gmail.com. Because the app has no account and normally cannot associate SDK identifiers with an email address, we may need additional information and may not be able to locate a particular record.
Users may also complain to their local data-protection authority.
We may update this policy when the app, its third-party services or applicable requirements change. If so, we will provide any additional notice required by law.