Your data at Listub
Where your lists, notes and documents live, and who can see them. In plain words.
Does Listub work offline?
Yes. Everything you create is saved on your device first, so the app opens instantly and keeps working without an internet connection. With an account, your changes are synced to our servers as soon as you are back online.
Can I use Listub without an account?
Yes. As a guest, your rooms, lists, notes, tasks and calendar events are stored only on your device. They are never uploaded to our servers, and we cannot see them.
The only thing the app sends us in guest mode is a random guest number, created on your device and not linked to a name, email address or account. For that number we store just four things:
The guest number
When you started using the app
When you last used it
Whether you later created an account
No usage statistics, device details, error reports or push tokens, and no push notifications for guests. The record is deleted once you haven't used the app for 180 days; every time you use it, the 180 days start again. Lumi AI, file uploads, sharing and syncing between devices need a free account. If you create one later, your guest content moves into your account so you keep it.
Where is my data stored with an account?
Everything is encrypted in transit (HTTPS/TLS). Passwords are stored only as salted hashes, never in plain text.
Who can see my content?
You, and the people you invite to a shared room. Nothing is public unless you choose to share it, for example with a public profile or a share link, and you can turn that off at any time.
We never sell your data, and the app shows no ads from other companies and contains no third-party advertising or analytics trackers. The app may show you promotions for Listub and for other apps made by our company, Galveo GmbH, without any ad network and without sharing your data.
What about the Lumi AI assistant?
Lumi is optional. Only when you use it is the text you send (plus the entries it needs for context) processed to create a reply. The processing runs on Cloudflare's AI infrastructure, and your requests are not used to train AI models. If you don't use Lumi, nothing is processed for AI.
Which companies are involved?
Only the providers we need to run Listub, and each one receives only what it needs:
Our hosting provider in Germany: the servers for our API and database
Cloudflare: website and web app hosting, network security, file storage in the EU, email delivery and Lumi AI
Google and Apple: app store purchases, push notifications, and sign-in if you use it
OpenStreetMap: address search in calendar events, only when you search for an address
Some processing, such as traffic passing through Cloudflare's network or Apple and Google sign-in, can happen outside the EU. For this we rely on the safeguards required by the GDPR, such as Standard Contractual Clauses.
How do I protect my account?
Two-factor authentication by email, free on every plan
Passkeys for sign-in without a password
App Lock with your device's Face ID, fingerprint or a PIN
An overview of your sign-ins and devices, so you can spot unfamiliar access
How do I delete my data?
As a guest, delete the app and your data is gone, because it only exists on your device.
With an account, you can delete it in the app at any time. You have 30 days to change your mind; after that, your account, rooms, entries and files are permanently erased. If you need immediate deletion, contact us and we will do it right away. You can also export your data from the app at any time.
Listub is made by Galveo GmbH in Cologne, Germany, and is subject to the GDPR.