Shoppalist

Privacy Policy for Shoppalist

Last updated: 12 September 2026

Shoppalist has no server, no account and no login. I cannot see your lists, and there is nowhere for me to see them from.

Where your lists live

Your lists are Apple Reminders lists. Shoppalist reads and writes them on your device through Apple’s EventKit, and keeps no copy of its own anywhere else.

If you have iCloud switched on for Reminders, Apple syncs those lists between your own devices, and to anyone you have shared a list with in Reminders. That is Apple’s sync, running under your Apple Account and covered by Apple’s privacy policy. Shoppalist neither adds to it nor sees it.

Edits between your iPhone and your Apple Watch travel directly between the two devices over Apple’s WatchConnectivity.

What Shoppalist learns about the things you buy — which aisle an item belongs to, how many you usually want, whether you keep it on the list through a clear — is stored on your device, and in your own private iCloud storage if iCloud is on, so your other devices know it too. It stays inside your Apple Account.

Scanning a barcode

This happens only when you tap the barcode button.

The camera image is processed on your device to read the barcode. It is never stored and never sent anywhere.

To turn that barcode into a product name, Shoppalist sends the barcode number — and nothing else — over an encrypted connection to these two product databases:

These are anonymous lookups. No name, no account, no device identifier and nothing from your lists is sent with them. As with any request to a website, those services can see that a request was made and the internet address it came from, and each has its own privacy policy.

If you never scan a barcode, Shoppalist contacts nothing but Apple’s own services, acting for your Apple Account.

Siri

Siri adds items to your Reminders lists, which is where Shoppalist keeps them. Siri is Apple’s, and what you say to it is handled under Apple’s privacy policy rather than mine.

What Shoppalist never does

No analytics. No advertising. No tracking, and nothing shared with data brokers. No third-party SDKs of any kind. Nothing you type into Shoppalist is sent to me, or to anyone other than the barcode databases listed above — and then only the number on the barcode.

Questions

neilw3d@gmail.com