PickyList Privacy Policy
Last updated: 13 September 2026
Data controller
| Name | Oğuz Kamburoğlu |
|---|---|
| iletisim@picklistapp.com | |
| Address | Tatlısu Mh. Çetin Cd. No:70, Şerifali / Ümraniye / İstanbul, Türkiye |
In short
PickyList is a shopping list app. It processes the least data it needs to work. In particular:
- A receipt photo is sent to be turned into text, and is not stored. The image is passed to Microsoft Azure through the app's own server function, only when you scan a receipt and only at that moment, and the text read from it comes back. Neither the app nor its server stores the image, and it is not written to any log. Your other photos (item photos) never leave your device.
- There are no ads, no advertising identifier, no third-party ad network.
- There is no analytics or crash-reporting SDK. The app does not track how you behave.
- Your data is not sold and is not passed to third parties for marketing.
- No location is collected. The app never asks for location permission.
- Nothing you record ever becomes public. The prices the app keeps are visible to you and, if you have one, to your household group. There used to be a public price ledger; it has been removed.
Data processed
Account information
When you sign in with Apple or with an email address, your email address, your display name and — if there is one — a link to your profile picture are stored. If you choose to hide your email when signing in with Apple, only the relay address Apple generates reaches us; we never see your real address. These are used solely to let you be invited to a list and to keep you signed in.
You can also use the app as a guest. A guest account exists only on that device, and asks for neither an email address nor a name.
Your lists and household contents
Your shopping lists, the items on them, your pantry contents, purchase history, spending records, your recipes, your weekly plan and your store aisle layouts are stored against your account. When you share a list, the people you invite see that list and everything on it.
Household groups
If you create a household group or join one with a code, your lists, pantry, purchase and spending records, recipes and weekly plan become visible to and editable by every member of that group. Joining is that act of sharing; no further consent is asked.
When you leave the group, your data comes with you: your records drop out of the group's view and return to being yours alone. Deliberately so — a family is not business inventory.
Shopping trips
When you start and finish a shop, the order in which you ticked items off is recorded. This record is yours alone, is never shared, and exists only to learn your walking order in that store so the list can be sorted by aisle. No location data is collected; the app never asks for location permission.
Receipts
When you scan a receipt, the image is passed to Microsoft Azure Document Intelligence through the app's own server function so that it can be turned into text. This happens only when you scan a receipt. The image is not stored by the app's server and is not written to any log; its processing at Azure is subject to Microsoft's own terms. Where the store's name cannot be read from the receipt, it is read again on your device, and nothing is sent anywhere for that.
Only the following is extracted from the text that is read: store name, date, product names and prices.
Your price records
Prices read from your receipts, and prices you scan off a shelf with the barcode reader, are stored against your account. They are not public: only you and, if you have one, the members of your household group can see them. "Cheapest for this list" is answered from these records — from what you paid, not from what strangers reported.
Earlier versions of the app kept a public, pseudonymous price ledger. It has been removed. Two things follow for you: no price data of yours leaves the app at all, and deleting your account now deletes your price records too, which the old design could not do.
Your loyalty cards
A shop card you save is stored against your account as its number and barcode type, and members of your household group can see it — one card in a family is the normal case. Nobody else can. The number is never sent to a retailer or to any third party; the app only draws it on screen. Deleting your account deletes your cards.
What stays on the device
Preferences such as language, theme and selected store are stored encrypted on your device and are never sent to a server.
Permissions
| Permission | What for | Required |
|---|---|---|
| Camera | Photographing receipts, barcodes and written lists | No — you can pick from the gallery instead |
| Photos | Choosing a receipt photo you already have | No |
| Microphone | Adding items and lists by voice | No |
| Speech recognition | Turning what you say into text (a separate permission on iOS) | No |
| Notifications | Pantry and catalogue-day reminders | No |
The microphone opens only when you press "add by voice", and only for that moment. The app keeps no audio recording and stores none. What turns your speech into text is the operating system's own recognition service — Apple's on iOS, Google's on Android; those services may perform recognition on the device or on their own servers, and the operating system decides which. So the audio never reaches the app's servers, but it may reach your phone maker's recognition service. How those services handle it is subject to Apple's and Google's own privacy policies.
Who it is shared with
- Google Firebase (Google Ireland Limited) — authentication and database. Data is stored on Google's servers and may be transferred outside Türkiye.
- Microsoft Azure Document Intelligence (Microsoft Ireland Operations Limited) — only when you scan a receipt, only that receipt's photo, to be turned into text. The image is not stored; the transfer is made outside Türkiye.
- People you invite to a list — they see only the list you shared.
- Members of your household group — if you have joined one, the shared data listed above.
No transfer is made to any third party beyond these.
Retention and deletion
You can delete your data at any time: Settings → Delete account.
This permanently deletes your profile, your purchase history, your pantry records, your store layouts, your shopping trips, and the lists that are yours alone together with their contents.
Shared lists are not deleted. You are removed from the membership, and if you were the owner, ownership passes to a remaining member. The reason is that closing your account should not destroy other people's data.
Your price records are deleted with it. The anonymous ledger entries of earlier versions could not be deleted; that exception went with the ledger.
Your rights
Under the GDPR and Türkiye's KVKK you have the right to access your personal data, to ask for it to be corrected or deleted, to object to its processing, and to receive your data in a portable form.
You can carry out deletion yourself from inside the app. For any other request: iletisim@picklistapp.com
Children
PickyList is not directed at children under 13 and does not knowingly collect data from them.
Changes
If this policy changes, the current version is published at this address and the date above is updated.