Legal
Privacy policy
Last updated 2 November 2026
The short version. AllTickd stores what you need to keep your family's lists: your name and email, your lists and what's on them, and the settings that make reminders work. We don't show ads, we don't sell or rent your data, and we don't use it to build advertising profiles. Email [email protected] and we'll delete your account and data.
Who we are
AllTickd (alltickd.com) is run by X Networks LLC, a Florida, USA company ("we", "us"). We are responsible for the personal information described here. Contact: [email protected].
What we store and why
| Data | Why we have it |
|---|---|
| Account: your name, email address and Google account ID (for grown-ups); a display name and colour for kid accounts. Your family (household) name and who belongs to it, including invites by email. | To sign you in, show who added or ticked what, and let family members share lists. |
| Lists and items: list names, items, amounts, categories, notes, due times, repeating tasks, who ticked them and when, and who each list is shared with. | This is the service: keeping your lists and syncing them live to your family. |
| Settings: time zone, quiet hours, theme and accent colour, reminder and email digest choices, who to tell when you start shopping. | To deliver reminders at the right local time and show the app the way you like it. |
| Push subscriptions: the address your browser or phone gives us for notifications, with its encryption keys. | To send reminders and family notifications to the devices you turned them on for. |
| Notifications: the reminder and activity messages we've sent you in the app. | So you can see them in the app's bell. |
| Saved stores (optional): a store name, and its map location only if you use "Suggest store from my location" and save the store. | To suggest the store you're at next time. Your location is only read when you tap that button, and is not tracked or stored otherwise. |
| Sign-in sessions and security records: a session cookie, the browser type (user agent) of each signed-in device, and sign-in events. | To keep you signed in, let you sign out other devices, and protect accounts from misuse. |
Sign in with Google
Grown-ups sign in with Google. We only request Google's basic sign-in information: your name, email address and Google account ID (the standard openid, email and profile scopes). We do not get your Google password, and we don't access your Gmail, Drive, contacts, calendar or anything else in your Google account. AllTickd's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Kids
Kid accounts are created and managed by a parent in the family. Kids sign in with a short one-time code from their parent: we don't ask kids for an email address, a password or any other contact details, and we don't show them ads. A parent can see and manage their kids' lists, change their name or theme, sign their devices out, and ask us to delete their account at any time.
Who helps us run AllTickd
We use a few service providers, only to run the service and only with the data they need:
- Cloudflare delivers and protects the website (secure connections, attack protection) and gives us privacy-friendly visit statistics (Cloudflare Web Analytics, which does not use cookies or track you across sites).
- Amazon Web Services (Amazon SES) sends our emails, such as the list digest emails you choose to receive.
- Google provides the sign-in.
- Your browser's push service (for example Google, Apple, Microsoft or Mozilla, depending on your device) carries notifications to your device. Notification contents are encrypted for your device.
The AllTickd servers and database are operated by X Networks in the United States. We don't sell, rent or trade your information, we don't share it for advertising, and we don't use it to train AI models. We will only disclose it if the law requires us to.
Who can see your lists
Lists are private to you until you share them. People you share a list with can see it (and edit it, if you allowed that). Parents in your family can see their kids' lists. If you use the AllTickd Chrome extension, what you add through it is handled exactly as if you had added it in the app.
AllTickd for Chrome (browser extension)
- The extension talks only to https://alltickd.com, using the sign-in you already have there in the same Chrome profile. It never sees, reads or stores your password, your Google account or your session cookie.
- When you add something, the text you typed or selected (plus any due time, repeat or note you set) is sent to AllTickd and saved on the list you picked. People that list is shared with can see it, exactly as if you had added it in the app.
- It reads text on a web page only when you ask it to: when you right-click selected text and choose "Add to AllTickd", press the Alt+Shift+S shortcut, or open the extension while text is selected. It reads the selected text and nothing else. It does not read page addresses or your browsing history.
- It stores on your computer (Chrome extension storage) only the last list you used, the names of your lists for the right-click menu, and your colour theme. No credentials.
- No analytics, tracking, advertising or third-party services, no remote code, and no data is sold or shared with anyone. Removing the extension deletes its local storage.
Cookies and local storage
We use one essential cookie to keep you signed in. Your device also stores a few preferences (such as your theme and whether you've dismissed a tip) and an offline copy of the app so it opens quickly. We don't use advertising or tracking cookies.
How long we keep data
We keep your data while your account is active. Items you remove may be kept for a short time so they can be restored. Sign-in sessions expire on their own, and old sign-in codes are cleared automatically. We keep private backups of the database so we can recover from mistakes; they are only ever used to restore the service.
Your choices and deleting your data
- You can edit or delete items and lists, change your settings, turn notifications and digests off, and sign out of any device in the app.
- To get a copy of your data, or to have your account (or your whole family's) deleted, email [email protected] from the email address on the account. We'll confirm the request and delete the data from the live service within 30 days. Copies in private backups are never restored back into the service and are removed as backups are retired.
- Depending on where you live (for example California, or the EU and UK), you may have extra rights to access, correct, delete or move your data, or to object to how we use it. Email us and we'll help, whatever your location.
Security
All connections use HTTPS. Session and sign-in codes are stored only as one-way hashes, and every request is checked against who you are and which lists you can see. No system is perfect, but we work to keep your data safe and will tell you promptly if something goes wrong that affects you.
Changes
If we change this policy we'll update the date at the top, and tell you in the app or by email before any significant change takes effect.
Contact
X Networks LLC, Florida, USA · [email protected]