Sabata is a shopping-list app for families. This policy explains what information the app handles, why, where it is kept and how you can delete it. It applies to the Sabata app for Android and iOS and to this website.
What we collect
- Account: your name, email address and, if you sign in with Google, the link to your Google profile picture. Sign-in is handled by Firebase Authentication (Google).
- Shared lists: the lists you share and their items — names, quantities, notes, prices and photos you attach — along with who added and who bought each item, and the members' names.
- Invites: email addresses you type to invite someone, and the invite links you create.
- Notifications: a push token for your device and your app language, so members can be told about changes to a list.
- Subscription: if you subscribe, your subscription status. Payment is handled by Google Play (or the App Store) and RevenueCat; we never see your card details.
What stays on your phone
- Lists you don't share, your meal plan, list templates, remembered prices, your settings and your profile photo are stored only on your device. They are not sent to us.
- Voice input uses your phone's built-in speech recognition. The app receives only the recognised text; it does not record or keep audio.
How we use it
- To run the app: keep shared lists in sync between members, show who added or bought items, deliver invites and notifications, and remember your subscription.
- We do not show ads, we do not sell or rent your data, and we do not use it for tracking or profiling. The app contains no advertising or analytics code.
Who can see it
- A shared list, its items and its members' names are visible to the members of that list. Your email address is not shown to other users.
- Service providers that process data for us: Google Firebase (sign-in, database, file storage, cloud functions), Expo (delivering push notifications), RevenueCat and Google Play or Apple (subscriptions). They process it only to provide their service.
- We may disclose information if the law requires it.
Where it is kept and how it is protected
Data is stored on Google Cloud servers through Firebase, encrypted in transit and at rest. Security rules make sure only the members of a list can read it.
How long we keep it
We keep your account data until you delete your account. Items you delete are removed straight away. Invite links stop working after 7 days, or earlier if you switch them off.
Deleting your account
You can delete your account at any time in the app (Profile, then Delete account) or by following the steps on the account deletion page. This deletes your sign-in account, your user record and the lists you own (for all their members), and takes you off the lists you joined.
Children
Sabata is made for families but is not directed at children under 13, and we do not knowingly collect their data. A parent can delete a child's account as described above.
Your rights
You can see and correct your name in the app, send any list as text, and delete your account. For any other request about your data, contact us and we will reply within 30 days.
Changes
If this policy changes we will update the date above, and tell you in the app about significant changes.
Contact
Questions or requests: CONTACT-EMAIL-NOT-SET