← Back

ListOnce Privacy Policy

Last updated: June 1, 2026

This Privacy Policy describes how Alyssa's ListOnce ("ListOnce", "we", "us", or "our") collects, uses, and shares information when you use the ListOnce mobile application (the "App"). By using the App, you agree to the practices described in this Policy.

1. Information We Collect

Information you provide directly

  • Account information: When you sign up, we collect your email address, password (stored hashed — we cannot see it), and the display name you choose.
  • Profile information: Anything you add to your profile, including your tagline, location, bio, and avatar photo.
  • Listing information: Item details you enter (title, brand, condition, size, description, price, cost, source), photos you upload, and which platforms you have posted them on.
  • Storefront settings: Your public storefront URL slug, visibility preferences, and which platform listings you choose to display.
  • Custom brand entries: Brand names you add that aren't in our built-in list.

Information we collect automatically

  • Authentication tokens: Standard session tokens used to keep you signed in across app launches.
  • Usage logs: Our backend provider (Supabase) records basic operational logs (request timestamps, error logs) used to maintain service reliability.

Information we do not collect

  • We do not collect precise location data.
  • We do not access your contacts, calendar, or other apps' data.
  • We do not use third-party advertising or analytics SDKs.
  • We do not track you across other websites or apps.

2. How We Use Your Information

We use the information we collect to:

  • Operate the core features of the App (saving your listings, tracking inventory, generating cross-platform content).
  • Display your public storefront page if you choose to enable it.
  • Sync your data across your devices so you can access it after a fresh install.
  • Authenticate you and keep your account secure.
  • Respond to support requests.
  • Diagnose and fix bugs and improve the App.

We do not sell your personal information, and we do not share it with advertisers.

3. How We Share Your Information

We share information only in these limited circumstances:

Service providers we use to run the App

  • Supabase (supabase.com) — our database, authentication, and file storage provider. Your account credentials, profile, listings, and photos are stored on Supabase's infrastructure. They are bound by their own privacy practices and do not use your data for their own purposes.
  • Expo / Apple App Store / Google Play Store — for app distribution and crash reporting. These platforms may collect basic device and diagnostic information per their own privacy policies.

Information you choose to make public

If you enable your public storefront, the following information becomes visible to anyone with the URL: your display name, tagline, location, bio, avatar, specialty tags (if enabled), and the listings you have chosen to show. You can disable the storefront at any time from the Storefront screen.

Custom brand names you add are visible to other ListOnce users in their brand autocomplete dropdown. We do not share your account or any identifying information along with these brand entries.

Legal compliance

We may disclose information if required by law, subpoena, or other legal process, or if we believe disclosure is necessary to protect our rights or the safety of others.

Business transfers

If ListOnce is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.

4. Data Retention and Deletion

We keep your information for as long as your account is active. You can permanently delete your account at any time from the Profile screen in the App. When you delete your account:

  • Your profile is permanently removed.
  • All your listings, photos, storefront settings, and account data are permanently deleted within 30 days.
  • Custom brand entries you contributed remain in the shared brand list (anonymized — there is no link back to your account).
  • Backup copies may persist for up to 30 days for disaster recovery before being permanently purged.

5. Your Rights

Depending on where you live, you may have the right to:

  • Access the personal information we hold about you.
  • Correct inaccurate information by editing it in the App.
  • Delete your account and associated data (see Section 4).
  • Export a copy of your data.
  • Object to certain uses of your information.
  • Withdraw consent at any time.

To exercise any of these rights, email us at customersupport@listonceapp.com.

California residents

Under the CCPA, you have the right to know what personal information we collect, to delete it, and to not be discriminated against for exercising these rights. We do not sell personal information.

European Union / United Kingdom residents

Under the GDPR / UK GDPR, you have additional rights including the right to data portability and the right to lodge a complaint with a supervisory authority. The legal bases we rely on are: performance of a contract (operating your account), legitimate interest (improving the App, fraud prevention), and consent (for any optional features).

6. Children's Privacy

ListOnce is not directed to children under 13, and we do not knowingly collect information from children under 13. If you believe we have collected information from a child under 13, please email us and we will delete it.

7. Security

We use industry-standard practices to protect your information:

  • Passwords are hashed using bcrypt and never stored in plain text.
  • Data is transmitted over HTTPS (TLS) between the App and our servers.
  • Database access is restricted with row-level security policies that prevent users from accessing other users' data.
  • Photo storage uses scoped access policies so that only you can upload to or delete from your photo folder.

No security system is perfect. If we become aware of a data breach affecting your information, we will notify you within a reasonable time as required by applicable law.

8. Camera and Photo Library Access

The App requests access to your camera and photo library so you can attach photos to your listings. We only access these when you actively tap a button to add a photo. We do not scan your camera roll in the background.

9. International Data Transfers

Our backend infrastructure is hosted in the United States. If you are accessing the App from outside the US, your information will be transferred to and stored in the US. By using the App, you consent to this transfer.

10. Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will update the "Last updated" date at the top and, where appropriate, notify you in the App. Continued use of the App after changes constitutes acceptance of the updated Policy.

11. Contact Us

Questions, requests, or concerns? Email us at:

customersupport@listonceapp.com

ListOnce Boynton Beach, FL, USA