Legal
Privacy Policy
Effective October 4, 2026
This policy explains how Listpal handles information when you use our website, applications, and related services.
Information we collect
Account information: your name, your email address and a Listpal account ID. You give us these when you sign up with an email address and password. If you use Sign in with Apple or Google Sign-In, Apple or Google sends us your name, your email address (with Apple, this can be a private relay address you choose) and an identifier for your account with them. Your content: the photos you upload, the edited versions, thumbnails and edit history we create from them, the editing instructions, notes and settings you choose, and the names of your orders. Purchases: if you subscribe in our iPhone or iPad app, Apple sends us the product, transaction and subscription identifiers and the subscription's status; if you subscribe on listpal.ai, Stripe sends us customer, subscription and payment-status information. We never receive your full card number or your Apple payment details. Teams and invitations: if you share a plan with a team, we store the email addresses you add, send each address that does not yet have a Listpal account one invitation to sign up (and another only if you ask us to resend it), and show you how many photos each team member has used; team members see only who holds the plan, never each other's addresses, and their photos and orders stay private to them. If we invite you to Listpal ourselves, we keep the address we invited, and any plan we offered with it, and send that address the invitation. Messages to us: if you use our contact form or email us, your name, email address, phone number, website and message. Usage and technical information, collected automatically: device and browser type, IP address, and how you use the service, such as when you sign in or upload and how many photos you enhance.
How we use information
We use information to create and secure your account; to process, store and return the edits you ask for, including through the AI providers described under "Photos and AI processing"; to administer trials, subscriptions and team plans; to provide support, which can include viewing or re-processing a photo to resolve a problem you report; to prevent fraud and abuse; to monitor reliability and improve Listpal; to send service emails such as sign-in links, team invitations and billing notices; to send occasional emails about Listpal's features and offers, chosen using your plan and recent activity, each with an unsubscribe link; and to comply with legal obligations. We do not sell your information, use it for third-party advertising, or use it to track you across other companies' apps and websites.
Photos and AI processing
To make the edits you ask for, our servers send copies of your photos and your editing instructions to two third-party AI providers. OpenAI receives a resized copy of each photo you enhance, stage, empty, clean up or edit (up to about 8 megapixels), the instructions for that edit, any note you type for it and, when you mark an area, a mask of that area. Google, through its Gemini API, receives a small copy of each photo (at most 1,024 pixels on its long edge, plus crops around windows) to tell whether it is an interior or an exterior and where its windows are, and receives the text of an instruction when you use Enhance prompt. We do not send your name, email address or account ID with these requests, and the copies we send carry no location or other photo metadata. The providers process this data to return the result to us. In the Listpal app for iPhone and iPad we ask for your permission before the first photo is sent for AI processing; you can withdraw it at any time in Account → AI photo processing, after which no further photos are sent and the AI tools are unavailable until you allow them again. If we add an AI provider, we will update this policy, and ask in the app again, before it receives your photos. Do not upload content you lack permission to use, or content containing sensitive personal information that is unnecessary for the service.
Service providers
We share personal information only with the service providers that run Listpal for us, and only what each needs: Supabase (sign-in, database and photo storage); Google Cloud (hosting); OpenAI and Google's Gemini API (AI processing, as described above); Resend (email delivery); Microsoft 365 (our email inbox); Slack (internal alerts about contact-form messages); Stripe (payments on listpal.ai); Apple (App Store purchases and Sign in with Apple); and Google (Google Sign-In). Each provider may use the information only to provide its service to Listpal, and is bound by its agreement with us to protect it with the same or equal protection as this policy describes. We may also disclose information when the law requires it, or to a successor in a merger or acquisition, which must continue to protect it as this policy describes.
Photo retention
Photos you upload, and every enhanced version, thumbnail, and edit history we generate from them, are stored for 30 days from the time of upload and are then permanently deleted from our systems by an automated process. Orders left empty by that deletion are removed as well. Deleted photos cannot be recovered, so download anything you want to keep before then. You can delete a photo sooner at any time, and deleting your account removes all of your photos immediately.
Retention and security
Apart from photos, which are kept only for the period described above, we retain information for as long as needed to provide the service, maintain required business and billing records, resolve disputes, and enforce agreements. We use reasonable administrative and technical safeguards, but no online service can guarantee absolute security.
Your choices
Delete your account: in the app, open Account and tap Delete account; on the web, open Settings and choose Delete account. We then email a link to the address on your account, so that only you can confirm it. When you open that link within an hour and confirm, we immediately and permanently delete your photos and every version of them, your library, presets, team memberships and profile, and then your login, and email you to say it is done; if you use Sign in with Apple and asked from the app, this also revokes Listpal's access to your Apple Account. Deleting your account also cancels any subscription you bought on listpal.ai, straight away and without a refund for the rest of the billing period. Apple does not let us cancel App Store subscriptions: cancel those yourself in your device's Settings (your name → Subscriptions), or Apple keeps billing them. Withdraw consent: you can withdraw permission for AI processing in the app at Account → AI photo processing, and stop marketing emails with the unsubscribe link in any of them. Other requests: email us to access, correct or delete your information. We keep only what we are required to keep for legal, tax, accounting or fraud-prevention purposes, such as payment records and messages you sent us, and only for as long as required.
Children and international use
Listpal is intended for business users and is not directed to children under 13. If you use the service outside the United States, your information may be processed in the United States and other countries where our providers operate.
Changes to this policy
We may update this policy as the service changes. We will post the revised policy here and update the effective date. Material changes may also be communicated through the service or by email.