Privacy Policy

List Tray is a reminders app from 2SA FZE. This policy explains what information the app handles and why. In short: without an account everything stays on your device; with an account we store what you put in the app so it can sync, we share it only with the people you invite to a list, and we never sell it or use it for advertising.

Without an account

You can use List Tray without signing up. Your lists and reminders are then kept only in a database on your device, and nothing you type is sent to us. Your device’s own backups (iCloud or Android backup, if you have them turned on) may include this data.

With an account

Creating an account (to sync between devices or to share lists) means we store:

• Your email address, and a password or your Google or Apple sign-in. Passwords are handled by Firebase Authentication and are never visible to us. If you continue with Google or Apple, they share your name and email address with us, never your password; with Apple you can hide your email, and we then get a private relay address that forwards to you. We use your email to sign you in and to send password-reset emails you ask for.
• The name you choose to show to people you share lists with.
• Your lists and reminders: titles, notes, dates, repeat settings, list names, emoji and colors, and who added or completed each item. When you sign in, lists you made on the device are uploaded to your account.
• Invite codes you create, with the list’s name and your chosen name, so the person you invite can see what they’re joining. Codes expire after 7 days, and the list’s owner can cancel them at any time.

How it’s used and shared

• Your information is used only to provide the app: signing you in, syncing your lists and showing reminders.
• When you share a list, everyone in that list can see and edit its reminders and sees members’ chosen names.
• Account data and lists are stored with Google Firebase (Firebase Authentication and Cloud Firestore), which acts as our service provider. Google Sign-In and Sign in with Apple handle those sign-ins.
• To block requests that don’t come from the genuine app, Firebase App Check checks your device with Apple App Attest or Google Play Integrity. This doesn’t identify you.
• Reminder notifications are scheduled on your device. Their contents aren’t sent to a notification service.
• We don’t use advertising or tracking SDKs, and we don’t sell personal information.

Your choices

• You can edit or delete any reminder or list at any time.
• Settings → Delete account (after confirming with your password, Google or Apple) deletes your account, your private lists and reminders, and invite codes you created, and removes you from shared lists. Items you added to lists that others still use stay in those lists. If you signed in with Apple, List Tray also asks Apple to remove its access. You can also delete your account on the web or by email; see Delete your account.
• Without an account, Settings → Clear local data deletes everything stored on the device.
• You can turn notifications off at any time in your device settings.

Retention and security

Data is kept until you delete it or delete your account. Expired invite codes are deleted automatically. Data is encrypted in transit and at rest, and security rules restrict access so that only members of a list can read it.

Children

List Tray isn’t directed to children under 13 and we don’t knowingly collect their information.

Contact

Questions or requests: admin@2sa.tech.