Privacy Policy
Hansoo Labs (“we”) explains here how list3+ handles your information. By default, the lists and items you create stay on your device and are not sent to our servers. Information reaches a server only when you choose to sign in, run a backup, turn on sync between devices or make a purchase, plus the minimal data described in section 6. The web app (app.list3.plus) shows your lists through sync, so using it stores your lists on our servers (section 4).
1. Information that stays on your device
The following never leaves your device and is removed when you delete the app. However, if you turn on sync between devices or use the web app, your lists, items and tags are also stored on our servers (section 4).
- List and item titles, amounts, notes, checked state and order; tags, budgets, currency settings
- Archived and trashed lists
- Reminders — notifications are scheduled locally; no push server is involved
- Theme, font size, sort order and other app settings
- Your app passcode — stored encrypted, in a form that cannot be turned back into the original, and never transmitted. Biometric authentication is handled by your operating system; the app receives only the success or failure result.
2. Account (optional)
Backup and sync between devices require signing in with a Google or Apple account, and the web app can only be used after signing in. Everything else in the mobile app works without signing in. When you sign in, the following is stored in Firebase Authentication.
| Data | Account identifier (UID), email address, sign-in provider (Google or Apple) |
|---|---|
| Purpose | Identifying the owner of backups and synced data; checking purchase entitlements |
| Retention | Until the account is deleted |
We never receive or store your account password. If you use Sign in with Apple and choose to hide your email, we receive only the anonymous relay address Apple issues.
3. Cloud backup (optional)
Running a backup uploads a compressed copy of the entire app database — including your lists and items — to Firebase Storage. The backup's title and timestamp are recorded separately in Firebase Realtime Database.
- Storage is partitioned per account; other users cannot access your backups.
- A backup file also contains your app passcode in that same encrypted form.
- Subscribers who enable automatic backup have the same backup created periodically in the background. When the retention limit is reached, the oldest backup is deleted.
- You can delete individual backups at any time from the app's backup screen.
- If you have never run a backup and never turned on sync, none of your list contents exist on a server.
4. Sync between devices and the web app (optional)
When you turn on sync, your lists and items are stored in Cloud Firestore under your account and kept the same across every device and browser signed in to that account. The web app (app.list3.plus) always works through sync.
| Data | List and item titles, amounts, notes, checked state and order; tags, budgets, currency, lists pinned to the dashboard, whether a list is archived or in the trash; an identifier for the device that made each change (a random value generated by the app) |
|---|---|
| Purpose | Letting you use the same lists on multiple devices and on the web |
| Retention | Until the account is deleted. When you delete a list or item, only a marker saying it was deleted remains, with none of its contents, and that marker is removed automatically after 180 days |
- Storage is partitioned per account; other users cannot access your synced data.
- The contents of locked lists are synced too. App lock hides lists on your device; it does not encrypt the data on our servers. Locked lists cannot be opened in the web app.
- Your app passcode, reminders and app settings are not synced.
- The web app does not keep your lists in browser storage. They disappear when you close the tab and are fetched from the server again when you reopen it.
- Turning sync off stops that device from uploading further changes, but data already on the server remains. To remove synced data from the server, delete your account (section 9).
5. Purchases and subscriptions
Payment is handled by the App Store or Google Play. We never receive card numbers or other payment details. We record only the verified result of the receipt the store issues, stored per account in Firestore.
| Data | Product identifier, purchase and expiry times, ad-free and subscription entitlement flags |
|---|---|
| Purpose | Confirming ad removal and subscriber-only features (automatic backup, printing) |
| Retention | Until the account is deleted |
6. Information collected automatically
| Crash diagnostics | If the app crashes, Firebase Crashlytics collects the error, device model, OS version and app version. List contents are not included. Crash reports are not collected on the web. |
|---|---|
| Usage analytics | Google Analytics counts screen views and key actions (creating a list, adding an item, exporting, backing up, setting a reminder) in aggregate. Titles and amounts from your lists are never sent. |
| Advertising | Users who have not removed ads are shown Google AdMob ads, which use your device's advertising identifier. On iOS this follows your App Tracking Transparency choice. On the web, Google AdSense ads are shown and Google may use cookies. Once ads are removed, no ad requests are made at all, in the app or on the web. |
7. Processors and international transfers
We rely on the following providers, and data may be stored and processed in data centres they operate outside your country.
| Google LLC | Firebase (authentication, storage, database, hosting, crash reporting, analytics, App Check), reCAPTCHA (blocking abusive requests to the web app), AdMob, AdSense, Google Play billing |
|---|---|
| Apple Inc. | Sign in with Apple, App Store billing |
We do not sell your personal information or share it for any other purpose.
8. Retention and deletion
- Data on your device is deleted when you delete the app.
- Backups are deleted when you delete them, or when automatic backup rotates them out.
- Your account and related data (authentication record, backups, synced data, entitlements) are deleted immediately when you delete your account in the app, or when we process an emailed request.
9. Your rights and how to exercise them
- Access and portability — export your lists as TXT or PDF from the app.
- Delete backups — remove individual backups from the app's backup screen.
- Sign out — available in settings; your on-device lists are kept.
- Delete your account — in the app, go to Settings > Account & Backup > Delete account. Your account, cloud backups, synced data and entitlement records are deleted together, and this cannot be undone. If you cannot use the app, request deletion as described on the account deletion page.
- Advertising identifier — you can turn off personalised ads in your device settings.
10. Children
list3+ is not directed to children under 14 and we do not knowingly collect their personal information. If we learn that we have, we delete it without delay.
11. Security
- All communication with our servers uses encrypted connections (HTTPS).
- Backups, synced data and entitlements are separated by per-account access rules.
- App passcodes are never stored in plain text.
12. Changes to this policy
We will post any change and its effective date on this page. Changes that disadvantage users will be announced at least 30 days in advance.
13. Contact
For privacy questions or account deletion requests, please contact us.
- Hansoo Labs
- Email hansoo.labs@gmail.com
14. Language
This English text is provided for convenience. If it conflicts with the Korean version, the Korean version prevails.