Privacy

Last updated: 28 August 2026

Your lists

Your shopping lists, their items, the quantities and your aisle order live in a database on your device. If the device is signed in to iCloud, they are also mirrored into the private area of your own iCloud — that is what makes your lists show up on your iPad as well.

That area belongs to your Apple Account, not to me. I cannot read it, search it or export it; as a developer I have no access to private CloudKit data at all. Apple's privacy policy governs the storage there.

If you are not signed in to iCloud, or have turned iCloud off for Korbi, everything stays on the device exactly as before.

Shared lists

When you share a list, the people you invite see that one list — its items, quantities and ticks. Every other list is untouched.

Sharing works through a link that Apple issues. Whoever holds that link gets in — including somebody you did not send it to, if it was passed on. Korbi keeps no roster of who is on a list and does not track who opens one. "Stop sharing" makes the link stop working, and everyone else loses access.

One thing worth spelling out, because it is not obvious: the link keeps its address. If you later share the same list again, an old link starts working again — including for somebody whose access you had revoked in between. If that is not what you want, share a new list instead.

What never travels: your purchase history and your aisle order. Neither is attached to a list, so neither can end up in a share.

What Korbi remembers

So it can offer what you need again, the app remembers what you have added, how often and at what intervals. That stays private: it is mirrored into your own iCloud area like your lists, but it is never shared.

No ads, no trackers

Korbi contains no advertising, no analytics SDKs, no third-party crash reporting and no libraries from other vendors. No advertising identifiers are read.

What leaves the device — and only when you make it

“Send feedback”

Opens your email app with my address and the app version in the subject. The message is not sent for you — you write and send it yourself, and you see exactly what it contains first. I then receive what you wrote along with your sender address, and use it only to reply.

The coffee link

Goes to buymeacoffee.com, a third-party service with its own privacy policy. No connection is made there until you tap it.

This website

Is hosted on GitHub Pages. When you visit, GitHub processes technically necessary connection data such as your IP address in server logs. The site itself sets no cookies, loads no fonts or scripts from other servers, and counts no visits.

Deleting

Deleting the app removes everything it created on the device. If you were signed in to iCloud, the mirrored copy stays in your own iCloud area — it goes when you delete Korbi's data under Apple Account → iCloud in Settings. That, too, happens at Apple and not with me.

If you shared a list, your access ends when you delete. It stays with the other participants until they leave or you end the share.

Children

Korbi collects no data and is suitable for all ages.

Your rights

Under the GDPR you have the right of access, rectification, erasure, restriction, data portability and objection. In practice there is nothing to exercise them against: I process no data about you unless you email me yourself. The mirror in iCloud does not change that — it sits in your Apple Account, not with me, and I can neither read it nor hand it over. In that case, write to the address below. You are also free to complain to a data protection authority.

Controller

Changes

If something in the app changes what this page says, this page changes with it. The date at the top says when that last happened.