Privacy Policy

Last updated: 1 August 2026

Lingo List is a grocery list app that helps you learn Dutch while you shop. This policy explains what data the Lingo List app - on Android from Google Play and on iPhone and iPad from the Apple App Store - and the lingolist.app website process, why, and what your rights are. We keep it in plain language on purpose.

Who is responsible

Lingo List is operated from the Netherlands (KVK 66343003). For anything related to your personal data, contact privacy@lingolist.app.

What the app collects, and why

• Account data. When you create an account we store your email address, display name, and (for social sign-in) your profile photo. Sign-in is handled by Firebase Authentication, using email & password, Google Sign-In, Facebook Login, or Sign in with Apple on iPhone and iPad. We never see or store your password; if you sign in with Google, Facebook or Apple, we receive only your basic profile (name, email, and with Google and Facebook a photo) - never your contacts or posts. If you use Apple's Hide My Email, we only ever see the relay address Apple gives us, not your real one.
• Your lists. Your grocery lists, the items on them, and the people a list is shared with are stored in our database (Google Firebase) so your lists sync across devices and with the people you share them with. People you share a list with can see your display name and the list's contents.
• Shopping patterns per list. The app keeps simple purchase statistics per grocery list (which products get bought and roughly how often) to power the product suggestions in the app. These stats belong to the list, not to an advertising profile, and are never shared with third parties for marketing.
• Learning progress. Experience points, badges, and completed quests are stored with your account to make learning feel rewarding.
• Usage analytics. We use Mixpanel (hosted on EU servers) and Google Firebase Analytics to understand how the app is used - which screens are visited and which features are used, tied to a user identifier, along with device information such as model and OS version. We use this only to improve the app; we do not sell data or use it for third-party advertising.
• Crash reports. Firebase Crashlytics collects crash logs and device information when the app misbehaves, so we can fix bugs.
• Notifications. If you enable notifications, Firebase Cloud Messaging stores a push token for your device. Word-of-the-day notifications are scheduled on your device itself.
• Install source. On Android, the app reads the Google Play install referrer on first launch (e.g. "installed via a shared list link") so we know which channels bring people to Lingo List. The iPhone and iPad app reads no equivalent.

What the website collects

Nothing. This website sets no cookies and uses no analytics or trackers. If you email us, we obviously receive your email address - we use it only to reply.

Who processes your data

We use Google Firebase (authentication, database, analytics, crash reporting, push notifications) and Mixpanel (product analytics, EU data residency) as processors. If you sign in with Google, Facebook or Apple, those providers process the sign-in under their own privacy policies. We do not sell personal data to anyone.

Legal basis

We process account and list data to provide the service you signed up for (contract), analytics and crash data to improve and secure the app (legitimate interest), and notifications only with your consent.

Retention and deletion

Your data is kept for as long as you have an account. You can delete your account at any time in the app (Settings → Delete account) or by following these steps - this removes your account data and the lists you own. Analytics and crash data are retained according to the providers' retention windows and then deleted.

Your rights

Under the GDPR you can ask for access to, correction of, deletion of, or a copy of your personal data, and you can object to or restrict processing. Email privacy@lingolist.app and we'll sort it out. You also have the right to complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Children

Lingo List is family-friendly and children are welcome to use it - learning supermarket words is a good thing at any age. We never ask for anyone's date of birth and we do not profile our users, so we neither know nor track whether a user is a child, and a child's data is handled exactly like everyone else's: no advertising profiles, no data sold, no third-party ad tracking.

Accounts are a different matter. Under the GDPR, a child under 16 needs a parent or guardian's consent to sign up for a service like this, so we ask that a parent creates the account and supervises its use. If you believe a child holds an account without that consent, email privacy@lingolist.app and we will delete it and its data. A parent can also delete the account at any time in the app (Settings → User → Delete account).

Changes

If this policy changes in a way that matters, we'll update this page and note the new date at the top.