In short
TidyShop is a shopping list app that keeps your data on your own device. There is no TidyShop account, no TidyShop server, and no analytics, advertising, or tracking of any kind. The developer neither receives nor stores your lists, your profile, or your usage.
Some optional features do send data off your device — always to a service you choose and control, such as your own Google Drive or your own self-hosted server. Those are described below.
Who is responsible
TidyShop is developed and published by jimz011, an independent developer. For any privacy question or request, contact jimz011apps@gmail.com.
What TidyShop stores on your device
The following is saved in the app's private storage on your phone. It is not transmitted anywhere unless you turn on one of the optional features described in the next section.
- Your profile — the display name you enter, and an email address if you choose to add one.
- Your shopping lists — list names, items, quantities, notes, categories, store selections, and their timestamps.
- Household and family setup — member names, roles, permissions, and invitation codes, if you use the family features.
- App lock credentials — if you set an app-lock PIN or password, only a salted PBKDF2-HMAC-SHA256 hash of it is stored. The PIN or password itself is never saved.
- A device key — a keypair generated in the Android Keystore, used to identify this device to your own server when you pair one. The private key never leaves the device.
- App settings — theme, font size, lock timeout, and similar preferences.
Uninstalling TidyShop deletes all of it.
Optional features that send data off your device
Every item below is off by default and only starts when you enable it.
Backup to your own Google Drive
If you enable Drive backup, TidyShop asks Google for the drive.appdata authorisation
scope and writes a backup file to the hidden application-data folder of your Google Drive
account. That scope grants access to nothing else in your Drive, the file is not visible in your normal
Drive file list, and the developer has no access to it or to your Google account. Google's handling of
your Drive data is governed by the
Google Privacy Policy. You can delete backups from
within TidyShop, and you can revoke the app's access at any time in your Google account settings.
Sync with your own TidyShop connector
TidyShop can sync lists, household members, invitations, and backups with a TidyShop connector server that you host. You supply the server address, and data is sent only to that address over HTTPS. The developer does not operate this server, does not know its address, and cannot read anything stored on it. You are responsible for that server and for the data on it.
Single sign-on with your own identity provider
Optionally, you can sign in through an OpenID Connect provider that you configure yourself — for example a self-hosted Authentik instance, or another provider you already use. Your credentials are entered on that provider's own page, not in TidyShop, and TidyShop stores only the resulting tokens on the device. That provider's privacy policy applies to the sign-in itself.
Gravatar profile pictures
If you choose Gravatar as your profile picture, TidyShop requests an image from Gravatar. The request contains a one-way SHA-256 hash of your email address (the address itself is not sent), your display name so Gravatar can draw initials if you have no Gravatar account, and, as with any web request, your IP address. Choosing any other avatar option means no request is made at all. Downloaded images are cached on your device.
Support links
The Support screen contains links to Buy Me a Coffee and PayPal. Nothing is sent when you simply view that screen; tapping a link opens the site in your browser, where that company's own privacy policy applies. Payments, if you make one, are handled entirely by them — TidyShop never sees payment details, and tips do not unlock features.
What the developer receives
Nothing automatically. There is no telemetry, no crash reporting service, no advertising identifier, and no third-party analytics SDK in the app. The only way the developer learns anything about you is if you send an email — in which case the developer sees your address and whatever you write, and uses it solely to answer you. Please remove passwords, tokens, and pairing keys from anything you send.
Permissions
- Internet — used only by the optional features above. With all of them off, TidyShop makes no network requests.
- Biometrics — used only to unlock the app if you turn on biometric lock. The check is performed by Android; TidyShop never sees or stores your fingerprint or face data.
TidyShop requests no camera, contacts, location, storage, or microphone permission. Family invites are shared as links and QR codes that you scan with your phone's own camera app.
Children
TidyShop is a general-audience utility and is not directed at children under 13. It does not knowingly collect any personal information from children.
Keeping and deleting your data
- Data on your device stays until you delete it in the app or uninstall TidyShop.
- Drive backups stay in your Drive until you delete them, from the app or from your Google account.
- Data on a connector server you host stays until you delete it there.
Because the developer holds no copy of your data, there is nothing for the developer to delete on your behalf. If you have a question about exercising your rights under the GDPR or a similar law, write to the address below and it will be answered.
Security
App-lock PINs and passwords are stored only as salted PBKDF2-HMAC-SHA256 hashes with 150,000 iterations. The device keypair is generated and held in the Android Keystore. All network requests made by the optional features use HTTPS. No method of storage or transmission is perfectly secure, but data that never leaves your device is not exposed by a breach of anyone else's systems.
Changes to this policy
If the app's data handling changes, this page is updated and the date at the top changes with it. Significant changes will also be noted in the app's release notes.
Contact
Email: jimz011apps@gmail.com