The short version
- We collect what nado needs to work: your account, your lists, and the people you share them with.
- No ads, no analytics, no tracking, and we never sell your data.
- Our servers and databases run in Europe, on French infrastructure.
- You can delete your account at any time, from the app.
Who we are
nado is published by Valentin KIRYK (SIRET 880 296 124 00014), 49 avenue Georges Clemenceau, Nice, France — the data controller for the personal data processed through the nado app and this website.
For any question about your data, write to support@nado-list.com.
What we collect
Your account
You sign in with Apple, Google, Meta or your email address. When you first sign in, we receive from our sign-in service your email address and your name (first and last name, when available), and an identifier that links your account to that sign-in. We also record when your account was created, when you last used the app, and your language.
Your lists
Everything you put in nado: list names and colours, items (name, quantity, unit, note, category, price, expiry date), who added, checked, claimed or changed what and when, your role in each list, the colour you picked, and your settings (notifications, pinned lists, list order, what you have already read).
Invitations
When you invite someone by email, we store their email address to send the invitation and to make sure only that person can use it. Join codes for your lists are stored too.
Notifications
To send you push notifications, the app subscribes your device to a personal notification channel with Google’s and Apple’s notification services. We don’t store your device’s notification token ourselves.
Technical data
To keep the service running and secure, our servers keep short-lived technical logs of each request: the page or action requested, the result, the time it took, your user identifier, and the app version and platform (for example “iOS 1.2.3”). Our hosting provider may also process your IP address to deliver traffic.
What we don’t do
- No advertising, and no advertising identifiers.
- No analytics or tracking tools, in the app or on this website, and no tracking cookies.
- We never sell or rent your data, and never share it for marketing.
- We never see your payment details: subscriptions are handled entirely by the App Store or Google Play.
Why we use your data
- To provide nado — your account, your lists, sharing, live updates and notifications. This is necessary to perform our contract with you (the terms of use).
- To send you emails — a welcome email when you sign up, and the invitations you ask us to send. Necessary for the service.
- To keep nado secure and working — technical logs, preventing abuse (for example, limiting failed join code attempts). This is our legitimate interest.
- Push notifications — only if you allow them on your phone; you can turn them off there, or per list in nado, at any time.
Who helps us
We rely on a few trusted providers. They only process your data on our instructions, to deliver their service.
| Provider | What for | Where |
|---|---|---|
| Clever Cloud | Hosting the nado servers and database | France |
| Scaleway | Hosting this website | France |
| ZITADEL | Sign-in and account security | Switzerland |
| Apple, Google, Meta | Signing in with their account — only if you choose to | Their own services |
| Resend | Sending our emails (welcome, invitations) | United States |
| Google (Firebase Cloud Messaging) and Apple (Push Notification service) | Delivering push notifications | United States |
| Apple App Store, Google Play | Subscriptions and payments | Their own services |
| Google Fonts | The fonts of this website: your browser loads them from Google | United States |
A push notification carries only what it shows: a first name, a list name, and sometimes an item name — never the content of your lists.
When data leaves the European Economic Area, it is protected by the safeguards required by the GDPR (an adequacy decision, or the European Commission’s standard contractual clauses).
How long we keep it
- Your account and your lists — as long as your account exists.
- Deleted items — removed for good 30 days after deletion (the time other members’ phones need to catch up offline).
- Deleted lists — kept on our servers until they are permanently removed, at the latest when the owner’s account is deleted.
- Email invitations — valid for 7 days, then kept with the list’s history until the list is deleted.
- Technical logs — a few weeks at most.
Your rights
Under the GDPR, you can at any time:
- access your data and get a copy of it;
- correct it if it’s wrong;
- delete it — see deleting your account;
- take it with you (portability), in a common format;
- object to or restrict some uses of it.
Write to support@nado-list.com; we answer within one month. If you think we’re not respecting your rights, you can complain to the French data protection authority, the CNIL.
Deleting your account
You can delete your account from the app, at any time. Your account and your personal data are then deleted:
- each list you own is handed over to the member who has been editing it the longest — or deleted if nobody else edits it;
- you leave every other list, and items assigned to you are unassigned;
- what you added to shared lists stays for the other members, without your name.
Security
All connections to nado are encrypted (HTTPS). Sign-in is handled by a dedicated identity service, so nado never sees or stores your password. Access to your lists is checked on every request: only their members can see them.
Children
nado isn’t intended for children under 15. If you believe a child has given us personal data, contact us and we’ll delete it.
Changes to this policy
We’ll update this page when nado changes, and change the “last updated” date at the top. For important changes, we’ll let you know in the app or by email.
Contact
Valentin KIRYK — SIRET 880 296 124 00014
49 avenue Georges Clemenceau, Nice, France
support@nado-list.com