Privacy policy
Last updated
This policy explains what CheckList AI does with your information, where it is kept, what it is used for, who it is shared with, and how you can view, correct, export or delete it. We handle only what the checklist features actually need.
Who we are
This policy applies to the service CheckList AI provides: turning one sentence into a checklist and letting you edit, tick off, save, share and reuse it. In that relationship we decide what data is processed and why — we are the data controller. You can reach us at any time using the email at the bottom of this page.
What we collect
Only what the features need: (1) an identity — a device identifier kept in your browser while you are signed out, and your account (email, display name and a hashed password) once you sign in; (2) the content you create — list titles, notes, entries and tick progress; (3) share settings — expiry and visitor permissions; and (4) purchase records — the order ID and status returned by the payment provider. We do not collect unrelated personal data, and we do not build advertising profiles.
Where your data lives
While you are signed out, your checklists, saved lists and progress stay in this browser. Signing up or signing in binds this browser's identity to your account without moving anything. Once you are signed in, the data belongs to your account and is stored in the server-side database, so every device sees the same lists.
How we use it
To run the product: generation, ownership and sync, sharing and collaboration, credit granting and payment settlement. We do not serve ads, we do not sell your content to third parties, and we do not train models on the checklists you create. We do not profile you or make automated decisions about you: the credits, permissions and order states tied to your account follow fixed, reviewable rules rather than a model's judgement.
Who we share it with
Apart from the share links you create yourself, we pass data to a few service providers only as far as necessary, and only on our instructions, for the purposes below: (1) a payment provider — to take payments and reconcile them, limited to the order amount, currency and status, never your checklist content; (2) a generation provider — to process the sentence you type when generating (see the next section); and (3) hosting and infrastructure providers — to run the servers, database and network. We do not sell or rent your personal data, and we do not share it for third-party advertising.
Generated content and third-party models
When you generate a list, the sentence you typed is sent to the generation service configured for this deployment so that it can produce the list; the result is returned and saved into your checklist. Please do not type sensitive personal information such as ID numbers, card numbers or medical details — it does not help the result and it exposes more than necessary.
How we protect it
We use technical measures proportionate to the risk: passwords are stored as a salted, irreversible digest, so we cannot read your original password; sign-in sessions store a digest of the token rather than the token itself, so a stolen session record cannot take over an account; access is bounded by identity, so account data is visible only to that account and the browser identities bound to it; and data is transmitted over an encrypted connection. No system is perfectly secure, so please use a strong, unique password and contact us at once if anything looks wrong.
Cookies and local storage
A small number of cookies and a browser-characteristics digest keep the product working, none for advertising: (1) a session cookie (your sign-in state), cleared when you sign out and expiring after a set period; (2) a device cookie, used to recognise your lists while signed out; and (3) a visitor identifier, used to issue anonymous credits fairly and prevent repeat claims after sign-in, sign-out or cookie clearing. For this purpose, your browser hashes characteristics such as browser type, language, time zone, screen dimensions and device capabilities locally; we receive and store only the digest, not the raw characteristics. You can clear cookies at any time; unlinked local content can no longer be associated with you, but the digest may still identify this browser for anonymous-credit limits. Data already in an account is unaffected. Results may differ if you change browser or device, or if these characteristics change.
Share links
Share links are created by you. You choose a 1-hour, 24-hour, 7-day or permanent expiry, and whether visitors may only view or may also edit. A link stops working as soon as it expires, is cancelled, or the list is deleted — but anyone holding the link can see that list, so share deliberately.
Retention, export and deletion
Retention: your lists, notes and tick records are kept until you delete them; sign-in sessions expire automatically after a set period; share links expire on the schedule you chose; and order records for a purchase are kept for as long as needed for reconciliation and legal obligations, then deleted or anonymised. Deletion: you can delete any checklist at any time, and it is removed from your history and from any share in the same step; signing out only clears your sign-in state and leaves local data untouched. Export: for a full export, or to close your account, email us at the address below.
Your rights
To the extent the law where you live allows, you can exercise the following rights over your personal data: (1) access and obtain a copy; (2) correct inaccurate information; (3) erasure; (4) export (data portability); (5) withdraw consent or object to particular processing; and (6) complain to your local data protection authority about our processing. To exercise any of them, email us at the address below and we will respond within a reasonable time; we may first verify your identity to keep your data safe.
Children
CheckList AI is not designed for children and we do not knowingly collect their personal data. If you believe we have, contact us and we will remove it.
Changes to this policy
If this policy changes we update the date at the top of this page. For changes that affect your rights, we will make the notice more prominent in the product.
Contact us
Questions about this policy, or want to exercise any of the rights described above? Email us.