Privacy Policy

The Shops is operated by Rhys Wyles, an independent developer based in Sydney, Australia. This policy explains what data the app collects, why, and how we handle it.

What we collect

• Email address, supplied by Sign in with Apple. Used only to identify your account.
• Apple user ID, supplied by Sign in with Apple. Used to authenticate you on each launch.
• Push notification token, used to notify household members when items change.
• Household membership: which households you belong to and your role.
• Your shopping list content: items you add, categories you set, custom shops you create.
• Barcodes you scan, used to fetch nutrition information and link products to your items.
• Anonymous diagnostic data: crash reports and product-usage events (e.g. "scan succeeded", "household created") — never the content of items, shops, or messages.

What we don't collect

• Your location
• Your contacts
• Payment or financial information (The Shops has no payments)
• Health data
• Advertising identifiers
• Data from any third-party social profile

Who processes your data

Your shopping list and account data are stored in Australia. Crash diagnostics and product analytics are stored on EU infrastructure — chosen because the EU's privacy framework (GDPR) is structurally closer to the Australian Privacy Principles than the US baseline.

• Supabase (Sydney ap-southeast-2 region) — primary database and authentication. Data stays in Australia.
• Expo Application Services — relays push notifications to Apple.
• Sentry (EU region, ingest.de.sentry.io) — crash diagnostics, with personally identifying content stripped.
• PostHog (EU region, eu.posthog.com) — anonymous product analytics. We never send the names of items, shops, or any user-typed content.

Your rights

• Delete your account in-app from Settings, or by emailing support@theshops.rhyswyles.com. Account data is deleted within 30 days of a deletion request.
• Export your data by emailing the support address above.
• Correct your data in-app or by emailing the support address.

Retention

Account data is kept while your account is active and for up to 30 days after deletion. Retailer price data is sourced from public retailer information and is not personal data.

Children

The Shops is not directed at children under 13. We do not knowingly collect data from children under 13.

Changes to this policy

We'll update this page if our practices change. The "Last updated" date at the top of the page reflects the most recent change.

Contact

Questions about this policy? Email support@theshops.rhyswyles.com.