Privacy Policy

How we protect your privacy and data

Last updated: September 25, 2026

1. Introduction

Welcome to Listub ("we", "our", or "us"), a service provided by Galveo GmbH. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, and share your information when you use the Listub mobile apps (iOS and Android), the Listub web app (app.listub.com), the Listub desktop apps, and our website www.listub.com (together, the "Services"). This Privacy Policy complies with the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and other applicable data protection laws.

2. Controller and Contact

The controller responsible for processing your personal data is: Galveo GmbH Aachener Str. 37 50674 Cologne, Germany Email: [email protected] Data protection contact: [email protected]

3. Information You Provide

When you create an account and use the Services, you may provide us with:

  • First and last name (required for account creation)
  • Email address (required for account creation and communication)
  • Password (stored only as a salted hash, never in plain text)
  • Country and preferred language (for localization and compliance)
  • Profile picture, username, and profile details such as a bio (optional; stored in our file storage in the EU)
  • Content you create (lists, notes, tasks, room content, calendar events, and uploaded files). With an account, this is stored on our servers on every plan, including the free plan, and a copy is kept on your device so the app works offline. Paid plans additionally allow access from several devices and sharing rooms with other people. If you use Listub as a guest without an account, your content stays on your device only (see section 4).
  • Communications with us (support inquiries, feedback)
  • Subscription and payment preferences
  • Referral and affiliate codes

4. Using Listub Without an Account (Guest Mode)

You can use the Listub app as a guest, without creating an account. In guest mode, your content (rooms, lists, notes, tasks, calendar events, and settings) is stored only on your device. It is not uploaded to our servers, and we cannot see it. The app works fully offline. Features that need a server, such as the Lumi AI assistant, file uploads, sharing, trackers, and syncing between devices, require a free account. In guest mode, the only thing the app sends to our servers is a random guest number. We use it to count how many people use Listub as guests and to show you messages about Listub inside the app. For each guest number, we store only:

  • The guest number itself (created randomly on your device; it is not linked to a name, an email address, or an account)
  • The date you started using the app as a guest
  • The date you last used the app
  • Whether you later created an account (and, if so, which account)

We do not collect usage statistics, device information, error reports, or push notification tokens in guest mode, and we do not send push notifications to guests. Like any internet request, the guest number reaches our servers together with your IP address, but we do not store the IP address in your guest record. Your guest record is deleted automatically once you have not used the app for 180 days. Each time you use the app, this 180-day period starts again, so the record is only deleted after 180 days without any use. Because your guest content exists only on your device, it is deleted when you delete the app or its data, and it cannot be restored by us. If you later create an account or sign in, the content you created as a guest is uploaded to your account so you keep it, and your guest record is marked as converted. From then on, your content is handled as described for accounts in this policy.

5. Information Collected Automatically

When you use the Services with an account, and when you visit our website, we automatically collect certain technical information (for guest mode, see section 4):

  • IP address (for security, fraud prevention, and determining your country)
  • Device information (type, operating system, browser, app version), and - if you enable notifications - a push notification token
  • Sign-in and security data (login history, known devices, and the sign-in method used), so you can review account activity and we can detect suspicious access
  • Usage data (such as a periodic count of how many rooms you have, features used, session activity, and how much time you spend in each part of the app, for example Home, Rooms, Trackers, Community, Calendar or Menu, measured only while the app is open on your screen)
  • Log data (access times, error logs, performance metrics)
  • Location data (country-level only, derived from your IP address; we do not collect precise GPS location)
  • Cookies and similar local-storage technologies (see below)

6. Payment and Subscription Data

If you purchase a paid plan, we process:

  • Subscription plan details (Basic, Premium, Family) and their status
  • The payment processor used: Google Play on Android and the Apple App Store on iOS. We do not receive or store your full payment card details - payments are handled entirely by these processors.
  • Transaction history and subscription logs (including invoices where required)
  • Promo codes, discounts, and affiliate tracking data
  • Family plan member relationships

7. Legal Bases for Processing (GDPR)

We process your personal data on the following legal grounds:

Contractual necessity (Art. 6(1)(b) GDPR):

Account creation, providing the Services, syncing and storing your content, and subscription management.

Legitimate interests (Art. 6(1)(f) GDPR):

Service improvement, security, fraud and abuse prevention, and basic usage analytics.

Consent (Art. 6(1)(a) GDPR):

Newsletter subscriptions, marketing communications, and website analytics cookies. You can withdraw consent at any time.

Legal obligation (Art. 6(1)(c) GDPR):

Compliance with applicable laws, in particular tax and accounting requirements.

8. How We Use Your Information

We use your information for the following purposes:

Service provision:

Account management, authentication, storing and syncing your content, and core functionality.

Subscription management:

Processing payments, managing plan changes, and billing.

Communication:

Sending service updates, verification codes, support responses, and important notices.

Security:

Fraud prevention, account protection, bot protection, and system security.

Analytics:

Understanding usage patterns to improve the Services.

Legal compliance:

Meeting regulatory requirements and enforcing our policies.

Marketing:

Promotional communications, only with your consent, and always with an opt-out.

9. Lumi AI Assistant

The Services include an optional AI assistant ("Lumi") that can create and modify entries and answer questions based on your requests. When you use Lumi, the text you submit (and, where needed, related entries required for context) is processed on our service infrastructure to generate a response. That processing takes place with the infrastructure providers listed in "Who We Share Data With" below, under the same contractual and security framework as the rest of the Services. Your AI requests are not used by us to train AI models. AI usage is subject to fair-use limits depending on your plan. If you do not use the AI features, no content is processed for AI purposes.

10. Cookies and Website Analytics

The Listub app itself does not use third-party advertising or analytics trackers, and it does not show ads from other companies. The app may show you promotions for Listub and for other apps and products made by Galveo GmbH; these are shown without any ad network and without sharing your data with advertisers. The app only uses essential cookies and similar local-storage technologies that are required for core functionality: keeping you signed in, remembering your settings, protecting against bots and abuse, and basic performance and error monitoring. Fonts and static assets are bundled with the app or served from our own infrastructure. Our website www.listub.com additionally uses the following services, which may set cookies and process your IP address and usage data:

Google Analytics:

Helps us understand how visitors interact with our website (pages visited, time spent, traffic sources). Loaded only after you give consent via our cookie banner.

Google Tag Manager:

Manages and deploys the analytics tools above. Loaded only after consent.

Google Fonts:

Displays custom fonts on the website. Your browser may download font files from Google's servers.

Analytics cookies are set only after you consent via the cookie banner on www.listub.com. Your choice (acceptance or refusal) is stored for 12 months; after that we ask again. You can change or withdraw your consent at any time using the "Cookie Settings" link in the website footer. You can also control cookies through your browser or device settings; disabling essential cookies may limit functionality.

11. On-Device Storage and Offline Copy

To make the app fast and usable offline, Listub stores a copy of some of your own data directly on your device. This is strictly necessary for the Services to work and is never shared with third parties:

Your content cache (IndexedDB):

A copy of the rooms, tasks, notes, and other entries you have created or been invited to, so they open instantly and still work when you are offline. With an account, this on-device copy mirrors content that is stored on our servers on every plan, including the free plan. In guest mode, it is the only copy (see section 4).

What is synced and what stays on your device:

With an account, your rooms, entries, calendar events, uploaded files, and account details (such as name, profile picture, and language) are synced to our servers, so they are backed up and available on your devices. Changes you make offline are saved on your device first and synced when you are back online. Display preferences such as sort order and pinned rooms are stored on your device and included in your cloud backup, so they carry over to a new device. App Lock settings, your App Lock PIN (kept in your device's secure storage), and biometric data never leave your device.

App shell and media cache (service worker):

Static files such as the app itself, fonts, and images you have already seen are cached by your browser or the installed app so they do not need to be downloaded again. These caches contain no personal data beyond what you have already loaded.

Session tokens:

A small authentication token is stored so you do not have to log in on every visit. Depending on your choice of "Keep me signed in", this token lives in your browser's localStorage (until logout) or sessionStorage (until you close the browser). Turning "Keep me signed in" off is recommended on shared or public devices.

App preferences:

Small UI settings such as theme, language, and onboarding state. These are not linked to any personal data and exist only on the device.

When you log out, we always clear your session tokens and reset the in-memory state of the app. On a mobile device your locally stored content is kept on the device by default so it is ready when you sign back in; on the web you can additionally choose "delete local data" to erase the cached content and image caches. Your device-level preferences (theme, language) are preserved, and if a different account signs in on the same device, the previous account's content is wiped automatically. If you share your device with others, keep in mind that a signed-in session makes your locally cached content visible to anyone using that device or browser profile. We recommend logging out on shared devices.

12. Sharing, Community, and Public Content

Some parts of Listub are social. What you share, and with whom, is always your choice:

Shared rooms:

Content you put in a shared room is visible to the other members of that room. Activity in shared rooms is recorded in the room's activity log, visible to its members.

Family plans:

The plan owner can see member email addresses; members can see each other's names. Individual room content remains private unless explicitly shared. Subscription activity logs are visible to the plan owner.

Public profile and community:

If you enable a public profile, your username, display name, profile picture, profile details, and the content you choose to share (such as posts or shared tracker lists) are publicly visible to anyone, including people without a Listub account, and may be cached by our content delivery network. Community suggestions (such as people with similar interests) are computed on our servers from the content you have chosen to share and are shown as percentages only. You can edit your profile's visibility or disable sharing at any time in the app's privacy settings.

Share links:

If you create a public share link (for example for a wishlist or a tracker list), anyone who has the link can view the shared content without an account. You can revoke a share link at any time, after which the content stops being publicly available (caches may take a short time to expire).

13. Who We Share Data With

We do not sell your personal data. We share information only with the service providers that help us operate the Services (each receives only what it needs for its task), and in the limited circumstances below:

  • Our hosting provider in Germany (the servers that run our API and the database holding your account and content)
  • Cloudflare, Inc. (hosting of the website and web app, content delivery and network security, file and backup storage in the EU (EU jurisdiction), email delivery infrastructure, and processing of Lumi AI requests)
  • Google (Google Play billing on Android, Firebase Cloud Messaging for push notifications, and Google sign-in if you use it)
  • Apple (App Store billing on iOS, and Apple sign-in if you use it)
  • OpenStreetMap (Nominatim address search): when you search for an address in a calendar event, the text you type is sent directly from your device to this service, which also receives your IP address
  • Catalogue data providers for the tracker modules (The Movie Database (TMDB) for films and series, Google Books and Open Library for books). Your catalogue searches are proxied through our servers; only the search query itself is forwarded, never your identity or account data.

Business transfers: in connection with a merger, acquisition, or asset sale, your data may be transferred with appropriate notice and data protection measures. Legal requirements: we disclose data when required by law, court order, or to protect rights, safety, and security. Affiliate program: if you signed up through an affiliate, limited information (such as the first letters of your name and your subscription status) may be shared with that affiliate for commission tracking.

14. Data Security

We implement appropriate technical and organizational measures to protect your information:

  • Your account and content are stored in a database on our servers in Germany, and uploaded files and backups in Cloudflare's EU storage, where they are encrypted at rest. All data is encrypted in transit (HTTPS/TLS)
  • Passwords are stored only as salted hashes using industry-standard algorithms
  • Optional email-based two-factor authentication, free for every account, plus support for passkeys
  • App Lock can protect the app with your device's biometrics; biometric data is processed by your device only and never reaches our servers
  • Infrastructure protected by Cloudflare's security tooling, with automated monitoring and threat detection
  • Role-based access controls for internal systems and regular security reviews

Despite these measures, no method of transmission or storage is completely secure. We cannot guarantee absolute security of your data.

15. Data Retention and Deletion

We keep your data only as long as needed:

Active account:

Your account data and content are retained while your account is active, with a copy kept on your device.

Deleted rooms:

A room you move to trash is scheduled for permanent deletion about 30 days later; until then you can restore it.

Archived content:

When you downgrade to the free plan or leave a family plan, server-side rooms beyond your plan's limits are archived rather than deleted. Archived rooms (and their uploaded files) are permanently deleted about 180 days after archiving if not restored.

Account deletion:

When you delete your account it is deactivated immediately (you are logged out everywhere, nobody can see you, and any paid subscription is cancelled so you are not charged again) and enters a 30-day recovery window during which you can restore it by logging in. After the window, your account and all associated data - rooms you own, entries, uploaded files, notifications, devices, and other user-scoped data - are permanently and irreversibly erased, and your participation in shared rooms is removed. On your device, deletion also wipes the app caches.

Records we must keep:

Payment and subscription records (which include the name and email associated with a purchase) are retained for the period required by tax and accounting law as proof of the transaction, stored so they are no longer linked to an active account. All other personal data is deleted.

The 30-day window covers ordinary self-delete requests. If you need immediate erasure under GDPR Article 17, contact us at [email protected] or through the contact form at listub.com/contact and we will honor it without the recovery delay.

16. Your Rights Under GDPR

You have the following rights regarding your personal data:

Access:

Request information about the personal data we process about you.

Data portability:

Receive your data in a structured, machine-readable format (the app includes export and backup functions).

Rectification:

Correct inaccurate or incomplete personal data, directly in the app or by contacting us.

Erasure:

Request deletion of your personal data ("right to be forgotten"), subject to records we must keep by law.

Restriction:

Limit how we process your data.

Objection:

Object to processing based on legitimate interests.

Withdraw consent:

Revoke consent for consent-based processing at any time.

Opt-out:

Unsubscribe from marketing communications via the link in each email or in the app's notification settings.

To exercise these rights, contact us at [email protected] or use the account settings in the app. We respond within 30 days. You also have the right to lodge a complaint with a data protection supervisory authority if you believe we have violated data protection law.

17. International Data Transfers

Your account data and content are stored in the EU: the database on our servers in Germany, and uploaded files and backups in Cloudflare's EU storage (EU jurisdiction). Some processing can still take place outside the European Economic Area (EEA), for example in the United States: requests pass through Cloudflare's global network, Lumi AI requests are processed by Cloudflare, and Google and Apple process data for sign-in, app store purchases, and push notifications. We rely on appropriate safeguards for any such transfers, including our providers' certifications under the EU-US Data Privacy Framework where applicable, Standard Contractual Clauses (SCCs), and technical and organizational security measures.

18. Children's Privacy

The Services are not directed to children. You must be at least 16 years old (or the minimum age of digital consent in your country, if higher) to create an account. We do not knowingly collect personal data from children below that age; if we discover that we have, we will delete it promptly. If you are a parent or guardian and believe a child has provided us personal information, please contact us at [email protected].

19. Third-Party Links

The Services may contain links to external websites and services that are not operated by us (including links inside content that other users share with you). We have no control over, and assume no responsibility for, the content or privacy practices of any third-party site. We advise you to review the privacy policy of every site you visit.

20. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the Services. We will notify you of material changes via email or an in-app notice, and updated versions are posted on this page with a new "Last updated" date. We recommend reviewing this policy periodically. Your continued use of the Services after changes take effect constitutes acceptance of the updated policy.

21. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: Galveo GmbH Aachener Str. 37 50674 Cologne, Germany Email: [email protected] Data protection contact: [email protected] Contact form: listub.com/contact