raisl apps
Duo Lists / Privacy

Privacy Policy of the “Duo Lists” app

Last updated: 7 November 2026 (added: question of the day, watchlist alert; changed on 4 November: sharing from TikTok and Instagram without a request, film recognition when sharing, link preview also for recipes and YouTube links; added on 31 October: movie search cache, Apple revocation, leaving a couple, metrics, app updates) · Deutsche Fassung (in case of doubt, the German version prevails)

1. Controller

Philipp Raisl (Raisl Apps)
Düsseldorfstraße 17/3/6
1220 Vienna, Austria
Email: office@raisl-apps.at

2. What this is about

With “Duo Lists”, two people keep shared lists (e.g. movies, destinations, date ideas). So that both devices see the same lists, the content is stored on our server and synced between the two of you. This requires an account. There are no ads, no tracking and no analytics tools.

3. Sign in with Apple or Google

You sign in with “Sign in with Apple” or “Sign in with Google”. We receive an identifier of your account and, depending on the provider and your settings, your email address (with Apple possibly an anonymous relay address), your name and, with Google, the address of your profile picture. On Android devices you sign in with Google; the app uses your device’s Google sign-in (Google Play services) for this. We do not store a password. The legal basis is Art. 6(1)(b) GDPR (providing the app). The privacy policies of Apple and Google also apply to the sign-in.

When you use “Sign in with Apple”, our server additionally exchanges the sign-in code provided by Apple for a so-called refresh token from Apple. We use it solely to revoke the link to your Apple ID with Apple when you delete your account, as Apple requires for apps with account deletion. The token is stored on our server (Supabase, Frankfurt) in an area that only the server itself can access – not the app and not your partner. It is deleted when you delete your account, after the revocation. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a complete account deletion in line with Apple’s requirements).

4. Profile and partner connection

We store your display name (your first name, which you can change at any time), the language chosen in the app (so notifications reach you in your language) and who you are connected with. To connect, the app creates an invite code that is valid for 7 days and deleted after connecting. To protect against guessing other people’s codes, we briefly store failed attempts with a timestamp (Art. 6(1)(f) GDPR, legitimate interest in security). Your partner sees your display name.

5. Lists, entries and photos

We store the content you create yourselves: list names, entries with title, note, link, planned dates (e.g. travel dates), pasted booking details, photos, and when and by whom an entry was completed. This content is only visible to you and your connected partner. Access is technically restricted to your couple on the server. Photos are downscaled before upload and stored in non-public storage. The legal basis is Art. 6(1)(b) GDPR.

Please don’t enter anything in notes or booking details that you don’t want to share with your partner.

6. Private list (“Just for us”) – end-to-end encrypted

In the private list you can also record entries concerning your intimate life. Such information belongs to the special categories of personal data (Art. 9 GDPR). We only process it with your explicit consent (Art. 9(2)(a) GDPR), which you give in the app before first use. We store the time of consent.

6a. Match mode

In Match mode you rate entries with “I want this” or “Not really”. We store your rating. Your partner does not see your individual ratings, only the entries you both rated “I want this”, and how many entries you have already rated. The legal basis is Art. 6(1)(b) GDPR.

6b. Notifications

If you allow notifications, we store a device identifier for push notifications (Expo push token). When your partner adds entries to a shared list, you receive a notification with their display name, the list name and the entry title. These notifications are delivered via the push service of Expo (650 Industries, Inc., USA) and the Apple Push Notification service (iPhone) or Google Firebase Cloud Messaging (Android). On Android devices, Firebase Cloud Messaging (Google Ireland Limited or Google LLC, USA) creates the device identifier; Expo passes the notification to Firebase, which delivers it to your device. Firebase receives the device identifier and the content of the notification. More information: firebase.google.com/support/privacy. The private list does not trigger notifications. You can turn notifications off in the app under “Settings” or in your device settings; when you sign out, the device identifier is deleted. The legal basis is Art. 6(1)(a) GDPR (consent via the notification permission).

Reminders (before trips and plans, for your anniversary, when you haven’t had a date in a while) are scheduled by the app directly on your device; no additional data is transmitted for this. We store your anniversary so both partners can see it.

6c. Greetings and widget

With “Leave a greeting” you can send your partner a short message (up to 140 characters) and/or a photo. We store the message, photo, sender and time; the greeting is only visible to the two of you. Your partner receives a notification (see 6b). So that the widget on their Home Screen or Lock Screen shows the latest greeting, the app downloads it – also in the background – and stores it in a protected storage area on their device that only the app and its widget can access. The legal basis is Art. 6(1)(b) GDPR.

6d. Map of your places

For the map, the app looks up coordinates for entries in “Destinations” and “Restaurants”. For this, the title or the address you entered is sent to Apple’s map service; we store the coordinates found with the entry. The map itself is loaded from Apple Maps. On Android devices, the lookup uses the operating system’s location service (Google), and the map is loaded via the Google Maps SDK for Android (Google Ireland Limited or Google LLC, USA); Google receives, among other things, your device’s IP address and the map area shown. Google’s privacy policy applies. The app does not use your own location for this. The legal basis is Art. 6(1)(b) GDPR.

6e. Movies and series

In the watchlist you can search for movies and series. The app sends the title you enter to our server, which queries the Streaming Availability API by Movie of the Night (provider: Cevat Barış Yılmaz, movieofthenight.com). We only send Movie of the Night the search term, the country (from your device’s region settings) and the language – no information about you or your account. We store the data for the chosen title (e.g. title, year, plot, rating, streaming services with links, image addresses) with the entry so both partners can see it. To prevent excessive use, we count search requests per person and day and delete this count after about a week. Your device loads posters and streaming service logos directly from the provider’s servers; like whenever an image is loaded from the internet, the provider receives your device’s IP address. If you tap a streaming service, its app or website opens; its privacy policy applies there. The legal basis is Art. 6(1)(b) GDPR.

So that we do not have to query the movie database again for every identical search, our server caches search terms and their results (per country and language) for about 3 days and the data of individual titles for about 7 days. This cache contains no reference to you or your account – only the search term or the identifier of the title. We also count the total number of requests per month so as not to exceed the database’s quota; this count is also without personal reference.

Watchlist alert: Once a week our server checks up to three open films or series from the watchlist of active couples with Movie of the Night (only the title ID, country and language – no personal data) and refreshes the stored film data. If a title is newly available on a streaming service or has a new season, you get a notification via Expo’s push service (see 6b). Which service it is on is shown with Pro. Legal basis: Art. 6(1)(b) GDPR.

6f. Link preview for gift ideas and recipes

If you paste a link into the “Gift ideas” or “Recipes” list, our server (Supabase, Frankfurt) fetches the linked web page once and reads its title, image address, price and the name of the shop or website. For YouTube links, our server instead asks YouTube’s (Google’s) public oEmbed interface for the video’s title and preview image. The website only receives our server’s address, no information about you or your account. We store these details together with the link with the entry so both partners can see them; you can remove or reload them at any time. To prevent excessive use, we count requests per person and day and delete this count after about a week. Your device loads the preview image directly from the server of the shop or website (for YouTube, from Google); like whenever an image is loaded from the internet, it receives your device’s IP address. There is no link preview in the private list. The legal basis is Art. 6(1)(b) GDPR.

6g. Sharing from other apps

From version 1.1, Duo Lists appears in your device’s share menu. If you share a link or text from another app (e.g. a browser, video or streaming app), Duo Lists opens with this content; only what you then explicitly add to a list is stored (title and link with the entry). To suggest a title, the app reads the shared text and – as with the link preview (section 6f) – fetches the web page via our server. The app does not fetch TikTok or Instagram links; you enter the name of the entry yourself. If the Watchlist is selected, the app searches for the suggested film name (e.g. from the title of a trailer) via our server at Movie of the Night, as described in section 6e, so you can add the matching film with its poster right away. The legal basis is Art. 6(1)(b) GDPR.

6h. Reminders

With “Remind” you can have your partner or yourself reminded of something at a chosen time. We store the text (up to 200 characters), who the reminder is for, who created it, the time, and when it was sent and ticked off; only the two of you can see it. At the chosen time our server (Supabase, Frankfurt) sends a notification with your display name and the text via Expo's push service (see 6b). Ticked-off reminders remain stored until you delete them or your account. Legal basis: Art. 6(1)(b) GDPR.

6i. Profile and birthday

In the profile you can voluntarily add information about each other, e.g. birthday, clothing sizes, favourite things, dislikes, wishes and notes. Both partners can see and edit both profiles. Please do not enter any health data there. The app uses your partner's birthday for reminders that are scheduled directly on your device. Legal basis: Art. 6(1)(b) GDPR.

6j. Secret lists and Home

You can mark a list as “secret” (e.g. gift ideas for your partner). It and its entries are then visible only to you, and your partner receives no notifications about it. In the “Home” list we store, for each chore, how often it recurs, when it is next due, whose turn it is and how often each of you has done it. Reminders for it are scheduled directly on your device. Legal basis: Art. 6(1)(b) GDPR.

6k. Leaving a couple

Under “Settings → Leave couple” you can end the connection with your partner without deleting your account. You then get a new, empty couple with a new invitation code. Your shared lists and entries (without photos) are copied for you so that you keep them; your former partner also keeps everything shared. Your secret lists, your greetings, your entries in the private list and your reminders are deleted in the process. A purchased subscription stays with the person who bought it (via “Restore purchases”); the 14-day Pro gift continues unchanged. Legal basis: Art. 6(1)(b) GDPR.

6l. Question of the day

Once you are connected, the app asks one question per day (the questions are built into the app; no external service or AI is used). Your answer (up to 500 characters) is stored with the date and the question number in our database at Supabase (Frankfurt) and can only be read by you and your partner; your partner sees it only after answering too. You can edit or delete your answer; if you leave the couple, the answers stay with the couple, and if you delete your account, yours are deleted. The 7 pm reminder is a local notification on your phone and can be turned off in Settings. Legal basis: Art. 6(1)(b) GDPR.

7. Face ID / Touch ID and device passcode

The private list is unlocked with Face ID, Touch ID or your device passcode (on Android with fingerprint, face unlock or your screen lock). The check takes place exclusively on your device by the operating system. We receive no biometric data.

8. Camera and photos

The app only accesses the camera and photo library when you add a photo to an entry yourself and allow access. You can revoke this permission at any time in your device settings.

9. Hosting (Supabase)

Accounts, lists, entries, photos and the encrypted entries of the private list are stored with Supabase (Supabase, Inc., USA) as a processor. The servers are located in Frankfurt am Main (EU). As Supabase is a US company, access from the USA cannot be ruled out; it takes place on the basis of the EU Standard Contractual Clauses or the EU-US Data Privacy Framework. More information: supabase.com/privacy.

9a. Metrics without personal reference

To see whether the app is being used and whether the server limits are sufficient, we occasionally read aggregated figures directly from the database – for example how many accounts were created in the last 30 days, how many couples are connected or how many lists exist in total. These are plain totals; no data of individual persons is evaluated, and there is no analytics or tracking tool in the app. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in operating the app).

9b. App updates (Expo)

On start-up the app checks with Expo’s update service (650 Industries, Inc., USA, u.expo.dev) whether a newer version of the app content is available and downloads it if so. Expo receives your device’s IP address, the platform (iOS/Android) and the app version; no reference to your account is transmitted. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and up-to-date apps). For transfers to the USA see section 12.

10. In-app purchases (RevenueCat)

The Pro subscription is handled via the App Store or Google Play. To manage the subscription status we use RevenueCat (RevenueCat, Inc., USA). A random identifier of your couple and purchase information (product, purchase date, expiry date) are processed. A subscription applies to both partners. On Android, purchases are processed via Google Play’s billing system (Google Play Billing, Google Ireland Limited); Google processes the payment details under its own terms. We do not receive payment details. The legal basis is Art. 6(1)(b) GDPR. More information: revenuecat.com/privacy.

11. Links and websites

If you open a link saved with an entry, the page is loaded in your device’s browser. The privacy policy of the respective website applies.

12. Transfers to third countries

Supabase, RevenueCat and Expo (650 Industries, Inc.; push service and app updates) are based in the USA; with Google (sign-in, Firebase Cloud Messaging, Google Maps on Android, preview of YouTube links), data may be transferred to Google LLC in the USA. Transfers take place on the basis of the EU-US Data Privacy Framework or the EU Standard Contractual Clauses. Movie of the Night (movies and series) may be based outside the EU; we only send it the search term, country and language without reference to you, and your IP address when images are loaded. For the link preview, where the shop is based depends on the link; it only receives your IP address when the preview image is loaded.

13. Storage period and deletion

We store your data as long as you use your account. In the app you can permanently delete your account at any time under “Settings → Delete account”. This deletes your account, your profile and profile card, your device identifiers for notifications, your greetings including photos, your secret lists, your entries in the private list and your reminders; the link to your Apple ID is revoked with Apple (provided the app received an Apple token at sign-in). Your account is also used by our app “Wobbi” – deleting it also deletes your Wobbi data on the server. An active subscription does not end as a result; cancel it in the App Store or Google Play (“Manage subscription” in Settings). Shared lists remain available to your partner as long as they use the app; if no partner remains, all lists, entries and photos of your couple are deleted. You can delete individual entries and lists yourself at any time – photos are deleted with them. We delete failed code attempts after one day at the latest. If the app is no longer installed, you can request deletion by email – see Delete account.

14. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to withdraw consent at any time with effect for the future. Please contact the address above. You can also lodge a complaint with a data protection supervisory authority, in Austria the Datenschutzbehörde (dsb.gv.at).

15. Age

The app is intended for adults aged 18 and over.

16. Changes

We update this privacy policy when the app or the legal situation changes. The version published here applies.