Signup Collection Notice

Who is collecting your information

Vinicius Martins Delgado trading as Listto, ABN 68 820 965 824, Sunshine West VIC 3020. Contact admin@listto.com.au.

What we collect

Before collecting email, provider identity or other signup details, Listto asks for your date of birth only to determine whether you are 16 or older. The submitted date is not retained. Listto stores only the eligibility result, rule version, method and evaluation time.

For email signup, Listto collects your email, public Full name, unique public username and password-derived security data. The Full name and username remain in page memory while Listto verifies the email address and are sent only when verification succeeds and the account is completed.

If you choose Google or Facebook, Listto receives a stable provider-specific identifier, email evidence and the name the provider makes available through its protected authentication response. After authorisation, you review the provider-supplied read-only Full name and choose a unique username before an active account is created. Listto does not collect country or gender during signup.

When you choose Create account, Listto records your deliberate agreement to the Terms of Use and Community Guidelines and acknowledgement of the Privacy Policy and this notice.

Why we collect it and consequences

Listto uses the age result to enforce its 16-plus account rule. It uses the remaining required information to verify, create, administer, secure and recover the account, display the public Full name and @username, prevent provider mix-ups and fraud, and provide requested features. If eligibility, required information, email or provider proof, an available username or the legal action is not completed, no active user or normal session is created.

Shopping list suggestions after signup

Creating an account does not by itself create shopping-list recommendation activity. The personalization preference begins on, but Listto will not collect activity, serve personalised suggestions or bootstrap retained items unless the feature is enabled, these exact Privacy Policy and Signup Collection Notice revisions are approved, and you have completed the required legal review.

When active and you use a shopping list with write access, Listto may record item adds and merges, purchase and return changes, removals and renames, recipe imports, and suggestions shown, selected or used for an add. It also uses an immutable list-context identifier, normalized title tokens, current-list items, item identity, source and timing details to provide personal and same-list suggestions.

Cross-user popularity is privacy-thresholded and gives each person at most one vote per item. Catalog items require at least three distinct people and custom items require at least ten. Raw recommendation events are retained for no more than 730 days, described as 24 months. You may turn personalization off to stop collection and purge your recommendation events and signals, reset the history while remaining enabled, or delete your account to purge data attributed to you.

Optional weekly email choice

Signup does not ask for or create marketing consent. New accounts begin with weekly marketing email turned off. Any later promotional-email choice is separate from account creation and may be withdrawn through communication settings or an unsubscribe link.

Service notifications

Shopping-list invitation emails are separate factual collaboration notifications and are enabled for active human accounts by default. They can be disabled in account settings without affecting in-app invitations. Marketing choices do not control verification, login, recovery, security or legal messages.

Who receives it and overseas handling

Authorised Listto personnel and contracted hosting, security and email providers process only the information needed for their function. Google, Meta or Apple receives the authentication request you choose. Resend processes recipient addresses, transactional message content and delivery events in the United States, with Listto sending routed through Tokyo, Japan. Other provider systems may process information in provider-disclosed overseas locations.

Public information and your rights

Full name and @username are public account labels. Full names may repeat, while usernames are globally unique and remain reserved after deletion or correction. You may edit your Full name through Profile. The Privacy Policy explains access, correction, communication-preference, complaint and account-deletion rights.

Community price learning and your choice

Listto can use eligible shopping prices to improve estimates for people shopping in the same market. The community-price contribution preference begins on, but collection requires the feature to be enabled, approved versions of these notices, your completed review, a verified active account at least seven days old and the required activity history. You may turn contributions off or reset your contribution history in settings. Signup or a saved recipe alone does not create a community price vote.

When eligible, Listto records shopping activity markers and prices you enter, correct or confirm, with an internal account identifier, selected market, normalized item identity, brand or package where supplied, quantity, unit, price, timing and reliability information. It uses this information to compare like products, limit repeated voting and calculate community estimates. It does not publish your name, account identifier, individual price history, list contents or private recipe through a community quote.

Community estimates require at least five distinct contributors for catalog items or ten for custom items, including at least three or five manual contributors respectively. Current consensus uses eligible observations from the previous 90 days. Market, brand, package and unit compatibility remain separate. Estimates are not a retailer offer or a guarantee of availability, and community updates do not replace a current manual correction.

Transient capture work expires after 30 days and account-attributed observations expire after 365 days; bounded cleanup may follow expiry. Turning contributions off, resetting them or deleting the account removes its shared observations and effective votes and schedules affected aggregates to be rebuilt. Already saved shopping prices and private remembered prices can remain under their ordinary lifecycle. Deletion from backups follows the backup lifecycle described in this policy.

The contribution flow is processed by Listto's service and database; it does not send contribution history to an AI provider or buy transcription. Separately enabled AI price estimates use the product and market context described by the existing feature disclosures. Declining community contributions does not prevent ordinary shopping-list use or private price corrections. Access, correction and complaints can be requested through admin@listto.com.au.

Optional live voice input

When you choose live voice input and confirm the microphone notice, Listto sends microphone audio and a bounded set of item-name hints to xAI for live transcription. Hints can include names already in the shopping list you are editing and general shopping vocabulary. The speech service operates in the United States. Listto does not intentionally send your account identifier, email, authentication credentials or the whole shopping list to xAI.

For live voice, Listto uses xAI's team-level Zero Data Retention (ZDR) setting. xAI states that audio and transcription content are processed without being retained after processing and are not used for model training without explicit permission. Provider request content is therefore unavailable for later retrieval or recovery. Listto still saves validated item changes as described below. Do not dictate sensitive information or record other people without permission.

Listto handles raw audio, item hints and transcripts transiently during the recording; it does not save them to its database, browser storage, analytics or ordinary logs. Validated item additions, changes and removals are saved through the normal shopping-list or pantry APIs and follow their existing sharing and deletion rules. People with access to that list can see saved changes. Temporary processing in device and server memory remains necessary to provide the feature.

Recording requires your action and browser microphone permission. You can stop at any time or type instead. A recording ends after ten seconds without new recognised word progress or five minutes overall; the server bounds setup and draining as well. Two recordings may run per account across devices, with sixty starts per rolling hour and twenty combined minutes per UTC day. Setup, connection and final-result draining count toward that allowance; an interrupted session may conservatively consume its reserved time until reconciled. Other capacity and shared spending limits can temporarily prevent use. Background noise or recognition errors can affect transcription; inspect saved items and correct or undo changes.

For access, correction, deletion or privacy complaints, contact admin@listto.com.au. The account, backup, international-transfer and complaints provisions elsewhere in this policy continue to apply. Live voice does not activate the separate camera feature.