Privacy policy

Last updated: 15 July 2026

GoList is operated by Erin Ford (Australia) ("we", "us"). This policy explains what we collect when you use the GoList app and golisthq.com, why, and the choices you have. The short version: we collect what the product needs to work, we don't sell your data, and you can delete your account, and everything in it, at any time.

What we collect

• Account details: your email address and, if you sign in with Apple or Google, the basic profile they share (name, avatar). Profile fields you add (username, home city, visited countries) are optional.
• Content you save: the TikTok, Instagram, or Google Maps links you submit, the places, lists, trips, notes, tags, and photos you create, and hints you add to imports.
• Link metadata: when you submit a link we fetch its public caption, title, author name, and thumbnail from the platform. We store the link and this metadata, never the video itself.
• Location: only if you grant permission, and only to sort places by distance and centre the map. Your precise location is used on your device and is not stored on our servers. Everything works if you decline.
• Usage analytics: product events like "import completed" or "list shared" (PostHog, hosted in the EU). Events are tied to a random account id, never to your email, and never include the links, places, or text you save. No advertising trackers, no session recordings.
• Purchases: if you buy a subscription, Apple processes the payment. We receive purchase status (via RevenueCat), never your card details.

How AI is involved

When you submit a link, its public caption and thumbnail are processed by an AI model (Anthropic's Claude) to work out which places it mentions, and the result is matched against Google Places. AI suggestions can be wrong. You can always change or remove any matched place. Our providers process this data to run the feature, not to build profiles of you; we don't use your content to train AI models.

Sharing and public lists

Your saves are private by default. Lists become visible to others only when you share them. A public list (and its pins' names, photos, and highlights) is visible to anyone with the link, and trip lists are visible to the members you invite. Your personal notes stay out of public list pages.

Who else touches data

We run on trusted providers: Supabase (database and sign-in), Vercel (website), Anthropic (AI place extraction), Google (place matching and maps), PostHog (analytics, EU), and RevenueCat with Apple (subscriptions). Each receives only what its job requires. We never sell your data or share it for advertising.

Retention and deletion

We keep your content while your account exists. Delete your account from Account settings in the app and your profile, pins, lists, notes, photos, and import history are deleted. You can also remove individual pins, notes, and lists at any time.

Your rights

We handle personal information in line with the Australian Privacy Principles, and with the GDPR where it applies. You can ask us to access, correct, or delete your data, or complain about how we've handled it, by emailing support@golisthq.com. If you're unsatisfied with our response you can contact your local privacy regulator (in Australia, the OAIC).

Children

GoList is not directed at children under 13, and we don't knowingly collect their data.

Changes

If this policy changes materially we'll note it here and in the app. Questions? support@golisthq.com.