Privacy Policy

Last updated: 21 October 2026

Overview

Amplist is a grocery list that shows which nutrients your shopping covers and which it misses. This policy explains what we store, why, and how to remove it.

We do not sell your data, and we do not show ads. We ask you to log nothing: Amplist works from the list you were going to write anyway.

What We Collect

Your account

You can sign in with Google, with email and a password, or (on iPhone) with Apple. Whichever you use, we keep:

Your name and email address — what you give us, or what Google or Apple shares with us. If you use Apple's "Hide My Email", it is Apple's relay address.
Your profile photo — only if you sign in with Google, and only the link Google provides.
An account ID — a random identifier Firebase assigns to your account.
Your password, if you chose email sign-in — handled by Firebase Authentication, which stores it in scrambled (hashed) form. Neither we nor anyone at Amplist can read it, and we can only send you a reset link.

What you tell the app

Your shopping list — the items you add, whether they're ticked off, and their order.
Your watchlist — the nutrients you asked Amplist to keep an eye on.
Preferences — your diet (vegetarian, egg, non-veg), the language you want food names shown in, and your household size.
Favourites — foods you've marked as ones you always buy.
Foods we don't recognise — if you add an item to your list, or search for a food, that our food list doesn't contain, we may record the name you typed so we can add it. We record only that name and a count of how many different people looked for it. It is not stored with your account, name or email, and it can't be used to look up who you are.

What the app records as you use it

Purchase history — when you add, tick off, untick or remove each food, kept as timestamps grouped by food. This is what lets Amplist work out that you buy milk weekly and bananas every few days. It is the only way the "due again" and "running low" features can exist.
Device notification token — an identifier Google issues for your device, so a reminder can reach it. Stored only once you allow notifications.
Your device's time offset — not your location: a number of minutes from UTC, so a reminder arrives at a sensible hour locally rather than in the middle of your night.

What helps us fix and improve the app

Usage events — Firebase Analytics records which screens you open and which features you use (for example, that an item was added or ticked off, or a nutrient tapped), tied to your account ID and a device installation ID. It does not record the names of the foods you type. We use it to see where people get stuck and which features matter.
Crash reports — Firebase Crashlytics records what went wrong when the app crashes: the error, your device model, Android or iOS version and the app version, with your account ID.
Amplist does not access your device's advertising ID, and we do not use this data for advertising.

Microphone

Amplist asks for this only when you use the feature that needs it, and never in the background.

Microphone — used when you choose to speak an item onto your list. On supported Android devices the speech is interpreted by Gemini Nano running on your phone, so the audio does not leave the device. Where on-device processing is unavailable, speech recognition is handled by your device's own Android services under Google's privacy policy. We do not store recordings.

This version of Amplist does not use your camera.

What we do not collect

We do not ask you to log meals, weight, exercise or calories.
We do not collect your location.
We do not read your contacts, photos, messages or other apps.
We do not use your camera or read your files.
We do not connect to Apple Health, Google Fit or similar platforms.
We do not store payment details — Amplist is free and has no purchases.

How We Use It

To show your list on every device you sign in on.
To work out which watched nutrients your basket covers, and which it doesn't.
To suggest foods that would close those gaps.
To learn how often you buy each thing, so it can be offered again at about the right time.
To send the notifications you've switched on, and no others.
To diagnose crashes and errors so the app can be fixed.
To improve our food list: we review the names of foods people look for that we don't have yet, and add the common ones.
To understand which parts of the app are used, so we can improve them.

We do not use your data to build advertising profiles, and we do not share it with advertisers.

Where It Lives

Amplist runs on Google Firebase. Your data is stored in Google Cloud under Google's security practices, and we use these services:

Firebase Authentication — to sign you in, with Google, email or Apple.
Cloud Firestore — to store your list, preferences and purchase history.
Firebase Cloud Messaging — to deliver notifications.
Cloud Functions — to work out when something is due and to delete your account when you ask.
Firebase Remote Config — to manage settings such as whether an app update is required.
Firebase Analytics and Firebase Crashlytics — usage events and crash reports, as described above.

A copy of your list is also kept on your own device so the app works without a connection.

If you sign in with Google or Apple, that company also knows you signed in to Amplist, under its own privacy policy.

Nobody, other than the infrastructure that runs the app. We do not sell, rent or trade your information. We share it only:

with Google, as the provider of the Firebase services above;
where the law requires it, such as a valid legal request;
with you, whenever you ask for a copy.

How Long We Keep It

Your data stays while your account exists. Purchase history accumulates over time because that is what makes the predictions better — a food bought weekly builds roughly fifty timestamps a year.

When you delete your account, your sign-in, profile, list, purchase history, favourites, preferences and notification tokens are removed from our systems permanently and at once. There is no recovery period and no archive. If you signed in with Apple, deleting from the app also revokes Amplist's access to your Apple ID.

Names of unrecognised foods are kept until we have reviewed them. Because they aren't linked to your account, they aren't removed when you delete your account.

Usage events and crash reports are held by Google Firebase under its own retention limits and expire automatically. They carry an account ID, not your name or email, and deleting your account does not erase reports already collected.

Your Choices

See your data — everything Amplist knows is visible in the app: your list, your watchlist, your favourites and your settings.
Turn off notifications — in Profile › Notifications, or in your phone's settings. Nothing is sent when they're off.
Turn off automatic additions — Amplist only adds items to your list by itself if you switch that on, and it is off by default.
Delete your account — from Profile › Delete account in the app, or at amplist.web.app/delete-account without installing anything (Google or email accounts; an account created with Apple is deleted from the app).
Ask us anything — email amplistsupport@proton.me and we'll answer.

Children

Amplist is not directed at children under 13, and we do not knowingly collect their information. If you believe a child has created an account, write to us and we will remove it.

Security

Traffic between the app and our servers is encrypted in transit. Access rules mean your list is readable and writable only while signed in as you. No system is perfectly secure, and we don't claim otherwise — but we store as little as the features need, which is the most reliable protection there is.

Changes

If this policy changes, the date at the top changes with it, and a material change will be flagged in the app. Continuing to use Amplist after a change means you accept the updated policy.

Contact

Questions about this policy, or about your data: amplistsupport@proton.me.