Privacy Policy

1. Data Controller

StapleRun is operated by the service provider responsible for determining how and why personal data is processed. For privacy-related inquiries, contact: support@staplerun.com

2. Data We Collect

• Shopping Data — items added, removed, or completed in your lists.
• Staples Data — patterns derived from repeated purchases used to rebuild lists.
• Preferences — optional settings such as categories and interface behavior.
• Account Identifiers — email address or anonymous identifier for authentication and syncing.
• Device / Local Storage Data — locally stored list data when using guest mode.

We do not collect financial data, contacts, or advertising identifiers.

3. Legal Basis for Processing (GDPR)

• Contract — to provide core functionality of the Service
• Legitimate Interest — to improve performance and user experience
• Consent — for optional features such as cloud sync and household sharing

4. How We Use Data

• To generate and rebuild recurring shopping lists
• To store and sync your Staples across devices
• To enable optional household collaboration
• To improve usability and system performance

5. Data Storage

Local Mode: Data remains on your device and is not transmitted to servers.

Cloud Sync: When enabled, data is securely stored and synchronized using encrypted connections.

6. Data Processors

We may use third-party infrastructure providers (such as hosting and database services) to operate the Service. These providers process data only on our behalf and are not permitted to use it for their own purposes.

7. Household Sharing

Household sharing allows authenticated users to collaborate on shared shopping lists. Access is strictly controlled through invitations.

Users are responsible for all activity within their household group.

8. Security

We implement reasonable technical and organizational measures to protect your data. However, no system can be guaranteed to be 100% secure.

9. Data Retention

We retain data only as long as necessary to provide the Service or as required by law. You may request deletion at any time.

10. Your Rights (GDPR)

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Request export of your data
• Withdraw consent where applicable

11. Children’s Privacy

The Service is not intended for children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect data from children.

12. International Data Transfers

Your data may be processed in countries outside your own jurisdiction. We take reasonable steps to ensure appropriate safeguards are in place.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected on this page.

Contact

For privacy-related inquiries:

support@staplerun.com