Privacy policy

1. About this policy

This policy covers the ListRerun iOS app and the website at listrerun.com. Yu Liu operates ListRerun and is responsible for the personal information handled for the purposes described here. In this policy, “we” and “us” refer to Yu Liu as the operator of ListRerun.

For privacy questions, account-deletion help, or requests about your information, email listrerun@gmail.com. The privacy-request section below explains how to contact us and what information may be needed to handle a request.

2. Local checklists and workspaces

Ordinary checklists, saved runs, personal templates, favorites, ordering, completion states, and appearance preferences are stored locally on your device. Ordinary checklist and template functionality works offline and does not require an account.

On My iPhone (Guest) and each signed-in account have separate local workspaces. Moving local lists or templates into an account requires your approval and changes their local ownership; it does not upload them. Signing out hides that account’s workspace without deleting its local content.

Cloud Sync is not implemented. Signing in does not automatically upload, back up, or synchronize ordinary checklists. A checklist saved from an AI draft is also an ordinary local checklist. Paid Pro subscriptions have not launched.

Uninstalling the app, losing your device, or deleting local content can result in data loss. Operating-system backups have their own settings and behavior. ListRerun does not provide cloud backup or promise backup restoration or remote erasure of other devices.

3. Optional sign-in

Google Sign-In is currently supported through Supabase Auth. Apple Sign-In is not currently enabled. If you choose to sign in, Google and Supabase process authentication information such as account identifiers, email address, basic profile information where provided (including a name or profile image), authentication tokens, and connection information. This is used to establish and manage your ListRerun account and access to optional AI generation.

Session credentials are stored using the device’s secure credential storage. Signing out of ListRerun is different from deleting your ListRerun account or Google account. Google browser authorization may remain after sign-out or account deletion. Google and Supabase also handle information under their applicable terms and policies.

4. Optional AI generation and recovery

AI checklist generation is optional and requires sign-in and an internet connection. Before a generation or recovery request can transmit your prompt, you must authorize AI data sharing. Permission is remembered locally for your account and the disclosure version. You can use ordinary local checklists without AI.

Your prompt, language setting, and a request identifier are transmitted over HTTPS to ListRerun’s Supabase backend. The backend forwards the prompt and language setting, together with generation instructions, to the OpenAI API to generate checklist suggestions. OpenAI is ListRerun’s AI service provider. Ordinary local checklists and your Supabase account identifier are not included in the generation payload sent to OpenAI.

Supabase stores generated titles and items, account and request identifiers, a fingerprint derived from the prompt and language, processing and error timestamps, and usage and access information. This supports request recovery and prevents the same completed request from counting against generation usage again. The generation database does not store the original prompt as a field, but this is not a promise that providers or infrastructure never retain prompts. A fingerprint is not a guarantee of anonymity.

Original prompts, saved requests, and editable AI drafts are also stored locally under your signed-in account. Draft edits are not synchronized. Deleting a draft removes its editable local content but leaves request-recovery information; it does not remove the server recovery result or refund generation usage. Local request records and server recovery results do not automatically expire while your account exists.

OpenAI and supporting service providers may process or retain inputs and outputs under their applicable terms and settings. ListRerun does not promise zero retention, that AI inputs will never be used for model training, or immediate deletion from third-party systems. You can read OpenAI’s API data controls for information about its service practices.

Review generated suggestions before using them. Avoid including sensitive personal information or anything you do not want these services to process in a prompt.

5. Optional speech recognition

Where supported, voice input uses native speech recognition and separate microphone and speech-recognition permissions. AI sharing permission does not grant these device permissions. Recognition may use Apple’s speech services; processing is not guaranteed to take place exclusively on your device.

The app does not persist audio recordings. Recognized text is placed in the editable prompt. It is sent for AI generation only when you choose generation and authorize AI sharing.

6. Account deletion and your local-data choices

In Settings → Delete Account, choose Keep on This iPhone or Delete from This iPhone Too before confirming account deletion. See the account deletion page for the steps.

Keep on This iPhone: after account-data deletion is confirmed, that account’s ordinary local checklists, runs, personal templates, and relevant favorites move into On My iPhone (Guest). This includes checklists saved from AI drafts, but keeps only content already stored on that iPhone.

Delete from This iPhone Too: the selected account’s ordinary local content is removed instead. Existing Guest content and other accounts’ content are unaffected.

Both choices remove the deleted account’s local AI requests and drafts, sharing permission, and session. Server-side account deletion removes the Supabase authentication account and its associated AI recovery results, usage, and access records. Keeping ordinary checklists does not keep editable AI drafts or server recovery results.

Restricted deletion jobs and receipts remain to reconcile interrupted requests and check completion. These contain account and operation identifiers, proof-derived hashes, timestamps, and completion evidence, rather than email, checklist content, or AI prompts and results. Private device recovery records remain while cleanup and status recovery are incomplete. Restricted provider-authorization recovery records, where applicable, may be retained separately while authorization-removal work is pending.

Account deletion does not delete your Google account or automatically revoke Google browser authorization. It does not immediately erase service logs, backups, third-party records, or data on other devices. Removing local content is different from deleting your server account data.

7. Website, diagnostics, and support

This website has no authentication, analytics, advertising, tracking scripts, or application database. The illustrative checklist runs in memory and resets on reload. Cloudflare Pages hosts the website and may process connection and technical request information to deliver and protect the site.

The app does not add application analytics, advertising, or a third-party crash-reporting SDK. Authentication, AI, email, hosting, and beta-distribution services may process operational or diagnostic information under their own practices. Feedback sent through TestFlight may also be processed by Apple.

If you email listrerun@gmail.com, your email address and the information you include are used to respond to your question or request. Please do not include passwords, sign-in tokens, private recovery details, or sensitive checklist content in support messages.

8. Retention, service providers, and security

Local data remains subject to the app’s deletion controls, the account-deletion choices above, and your device settings. AI request and recovery records have the persistence described in section 4. Restricted deletion records support completion and recovery checks after an account is removed. Support correspondence may be retained to handle and follow up on your request.

Service providers may keep logs, backups, or other records under their applicable terms, settings, and obligations. This policy does not set a fixed retention period or guarantee immediate erasure from all systems. Providers may process information outside your country; ListRerun does not promise a particular data-residency location.

Relevant provider information includes the Google Privacy Policy, Supabase Privacy Policy, and OpenAI’s API data controls linked above.

ListRerun uses secure device credential storage for sessions and HTTPS for AI requests. Device security and service-provider controls also help protect information. No method of storage or transmission is guaranteed completely secure.

9. Privacy requests and assistance

You may email Yu Liu at listrerun@gmail.com to request access to, correction of, or deletion of applicable personal information, or to ask about how your information is handled. The rights available to you may depend on the law that applies to your situation.

Describe the type of request and, if relevant, the email address associated with your ListRerun account. We may ask for reasonable identity verification before disclosing or changing personal information. Do not send passwords or authentication tokens.

Ordinary local checklists are not uploaded or synchronized, so we cannot retrieve them from a cloud copy. Use the app’s local controls for that content, or email us for guidance. Requests are handled through email; the website does not provide an automated data-export or account-deletion tool. We will explain any applicable limits when responding to your request.

10. Changes to this policy

Updates will be posted on this page with a revised effective date. If the app’s AI sharing disclosure changes, the app can ask for permission again before sending content under the updated disclosure. You can contact listrerun@gmail.com with questions about this policy.