Privacy Policy
Last updated: 9 June 2026
Pare Gala (“the app”, “we”, “us”) is a collaborative, real-time shared shopping list. This policy explains what data we handle and why. We built the app to need as little personal data as possible: there are no accounts, no email sign-up, and no advertising.
What we collect
Information you provide:
- List details — the name and PIN (passcode) you set for a shopping list.
- Shopping items — item names and optional notes you add.
- Display name — the name or nickname you optionally enter to show who added or bought an item. You choose this; it does not need to be your real name.
Created automatically:
- Notification data— if you enable push notifications, we store your browser’s push subscription (a delivery endpoint and the encryption keys your browser generates), your display name, and your language preference, so we can send “someone added milk”-style alerts.
- Basic usage analytics — via Vercel Analytics, we collect anonymous, aggregated usage data (such as page views, device/browser type, referrer, and country). This uses no cookies, does not identify you, and is not used for advertising or cross-site tracking.
- Timestamps — when lists and items are created or checked off.
We do not collect your email, phone number, precise location, contacts, payment information, or any government identifiers.
How we use it
- To provide the shared shopping list and sync it in real time across everyone using the same list.
- To send the push notifications you opt into.
- To keep the service reliable and understand aggregate usage.
We do not sell your data, show ads, or use your data for profiling.
Who processes it
We use a small number of trusted providers strictly to run the app:
- Convex (Convex, Inc.) — stores the list, item, and subscription data.
- Vercel — hosts the app and provides the anonymous analytics described above.
- Your browser’s push service (e.g. Google, Apple, or Mozilla, depending on your device) — delivers notifications you opt into, under their own privacy policies.
A note on PINs and shared lists
A list is protected only by the name and PIN you choose. Anyone you share those with can view and edit the list, including any display names and notes on it. Please don’t put sensitive personal information in item names or notes, and choose a PIN you’re comfortable sharing with your household.
Data retention
- List and item data remain until deleted from the list.
- Push subscriptions are removed when you disable notifications, or automatically when your browser’s push service reports the subscription is no longer valid.
- Anonymous analytics are retained in aggregate by Vercel under their policy.
Your rights (GDPR / EEA)
Because we operate from the EU, the GDPR applies. You have the right to access, correct, or delete your data, to restrict or object to processing, and to data portability. Since the app holds no account or contact details, the easiest way to exercise most of these is directly in the app — edit or delete lists and items, and disable notifications. For anything else, contact us below. You may also lodge a complaint with your local data protection authority (in Greece, the Hellenic Data Protection Authority).
Legal basis
We process the data above to perform the service you request (Art. 6(1)(b) GDPR) and, for anonymous analytics, on the basis of our legitimate interest in keeping the app reliable (Art. 6(1)(f)).
Children
The app is not directed to children under 13 (or the equivalent minimum age in your country) and we do not knowingly collect their data.
Security
Data is transmitted over HTTPS and stored by our processors on secured infrastructure. Notification payloads are encrypted to your browser using the keys it provides. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your information.
International transfers
Our processors may store or process data on servers outside your country, including the United States. Where required, these transfers rely on appropriate safeguards such as the EU Standard Contractual Clauses.
Changes
We may update this policy; we’ll revise the “Last updated” date above and, for material changes, note them in the app.
Contact
Questions or requests about your data: privacy@darasflow.com