Privacy Policy v6

• Name, email address, and profile photo (provided by you on registration)
• Account credentials – authentication is handled via Microsoft Entra External ID; plaintext passwords are never stored or held by Marvelist directly.
• Authentication tokens and sign-in session data generated by Microsoft Entra External ID during the login flow.

• Device model, operating system, and app or browser version
• Unique device identifier used for session and authentication management
• Whether the development (TestFlight beta) version is installed
• Session tokens issued on sign-in, stored securely and used for authentication

• Device push token (APNs token), shared with OneSignal to deliver notifications
• Notification preferences and targeting tags (for example, beta vs. production user status)

• Lists, tasks, and items you create or share within the app
• Sharing relationships between users where list sharing is used

Where you consent to analytics cookies on the web app (see the Cookies and analytics section below), we collect, via Google Analytics:

• Pages or screens viewed and feature-usage events (for example, that a list was created), identified only by opaque internal identifiers — never the names or contents of your lists, tasks, or events
• Approximate location (country, region, or city) derived from your IP address; we do not retain your full IP address
• Device and browser type, and a cookie-based analytics identifier
• Your account identifier (an opaque UUID) used to recognise the same account across devices; we never send your name or email address to Google

Analytics cookies are off by default and are collected only if you accept them.

Product usage analytics (all platforms)

Separately from cookies, we collect a small set of usage analytics across the iOS app, watchOS app, and web app, and record equivalent events directly from our backend (for example, when a subscription starts or a plan limit is reached). This helps us understand which features are used and where people run into limits. Each event includes:

• A fixed event name describing what happened (for example, that a paywall was shown) — never the name or contents of anything you created
• The platform (iOS, watchOS, web, or our backend) and app version
• Your account identifier, used to avoid double-counting and to apply consistent sampling per account
• A short category label describing where in the app the event happened, and sometimes a second label with a specific detail (for example, "annual")
• A single number where relevant (for example, a plan limit)
• The time the event occurred

We do not collect, as part of this: the names or contents of your lists, tasks, notes, or events; search terms or any other free text you enter; your email address or display name; precise location; your IP address; advertising identifiers; or any special category data.

See the Product usage analytics section below for the lawful basis for this collection and how to object to it.

• Create and manage your account
• Provide personalisation within the app
• Enable list sharing with other users you choose to share with
• Authenticate your identity securely across devices
• Send push notifications for reminders and app updates (where you have consented)
• Support Apple Watch and Siri/Shortcuts integrations
• Understand how the web app is used and improve it (web app only, and only where you consent to analytics cookies)
• Maintain service security and detect abuse
• Understand how the app is used across iOS, watchOS, and the web app, and improve it (see Product usage analytics)

Lawful basis under UK GDPR

• Your consent — for push notifications, optional personalisation, and analytics cookies on the web app. You can withdraw consent at any time: for notifications via your device or app settings; for web analytics via the Cookie settings control on the web app; or by contacting help@marvelist.co.uk.
• Contract performance — to provide the core app functionality you have signed up for, including account management, list storage, and sharing.
• Legitimate interests — to maintain the security of the service, prevent abuse, improve reliability, and understand how the product is used across platforms so we can improve it (see Product usage analytics), where these interests are not overridden by your rights.

Sharing with third parties

Cloudflare, Inc. (Analytics Engine)

Product usage analytics described in the Product usage analytics section is processed and stored using Cloudflare Workers Analytics Engine, a distinct product from the general hosting infrastructure listed above. This data may be processed globally, including in the United States, under appropriate safeguards such as the UK extension to the EU-US Data Privacy Framework and/or Standard Contractual Clauses. Data is retained for up to three months. See Cloudflare Privacy Policy.

• Apple collects crash logs, usage data, and feedback submitted through TestFlight, in accordance with the Apple Privacy Policy.
• Beta builds may include additional diagnostic logging to help us identify and resolve issues. This logging is limited to technical diagnostic data (such as errors and feature usage counts) and does not include the content of your lists or personal data.
• We may use crash and diagnostic data from TestFlight to identify and fix issues before production release.

• Right of access: Ask us for copies of your personal information.
• Right to rectification: Ask us to correct inaccurate or incomplete information.
• Right to erasure: Ask us to erase your personal information in certain circumstances.
• Right to restriction: Ask us to restrict processing of your personal information.
• Right to object: Object to our processing of your personal information.
• Right to portability: Ask us to transfer your data to another organisation or directly to you.