Privacy · Updated July 18, 2026

Your list belongs to your household.

Buddy Bag is offline-first. Shopping lists are stored on your device and use the sync service only when you enable sharing or cross-device synchronization.

Data the app handles

• List names, shopping items, quantities, notes, optional retailer names, category order, and lightweight activity.
• An anonymous device identifier, display name, and access credential used to authorize sync.
• Invite tokens are transmitted when joining a list; the server stores only a cryptographic digest.
• Optional item photos remain on the device and are not uploaded by the sync service.
• Optional store detection uses the platform location permission. Buddy Bag never uploads remembered store coordinates, shopping visits, geofences, or temporary sold-out marks to its sync service. Apple or Google platform location/geocoding services may process the current location under the device's privacy settings.

Why it is used

Data is used only to provide the list, sharing, invite, and synchronization features you request. Buddy Bag does not sell personal data, show advertising, or use shopping content for profiling.

Retention and control

Local data stays on the device until you remove it or uninstall the app. Synchronized data remains while a shared list exists. Turning off link sharing revokes active invite links. Alpha testers can request deletion of synchronized test data through the developer contact shown in Google Play.

Security and transfers

Sync traffic uses HTTPS. Access credentials are stored in the platform's secure credential storage. The service is hosted in Germany and receives only compact list changes needed for synchronization.

Children

Buddy Bag is a general household utility and is not directed at children under 13.

Questions

Use the developer contact listed on Buddy Bag's Google Play testing page for privacy questions or deletion requests.