Privacy

What you enter: the items in your home, their values, rooms, serial numbers and notes; the photographs and documents you upload; the details of your insurance policy, including the insurer, the sum insured and its sub-limits; and any incident you record.

What an account needs: your email address, a display name if you give one, and a hashed password. We never see your password.

What the service produces: usage counts for AI captures so plan limits can be enforced, a log of who changed what in your household, and records of subscription payments.

Phones write GPS coordinates into photographs. Every image is re-encoded on your own device before it is uploaded, and the location tags do not survive that — the capture date does, because it is useful, and the coordinates do not, because a photo library of somebody’s possessions with locations attached is a burglary map. This happens before a byte leaves your device.

To do the one thing the product exists for: work out whether you are under-insured and where. Values, categories and policy limits are used to calculate that. Photographs and receipts are stored so you can prove ownership at claim time.

We do not build advertising profiles, we do not sell anything to anyone, and we do not use your inventory to train AI models.

People you invite to your household see what you have entered, at the level of access you gave them. You can change or remove that access at any time.

Four processors handle data on our behalf, and no others:

• Supabase — the database, file storage and authentication. Hosted in Sydney, Australia.
• Vercel — serves the website. Requests may be handled outside Australia.
• Anthropic — reads a photo, receipt or policy schedule when you ask it to identify something, and returns a suggestion. Photographs sent this way are not retained for training. Processing occurs in the United States.
• Stripe — takes payment if you subscribe. We never see or store your card number.

Sending a photo to Anthropic and serving the site from Vercel are disclosures of personal information overseas under APP 8. By using the AI features you consent to that disclosure; the rest of the product works without them.

We will disclose information if a law compels it, and we will tell you unless we are forbidden from doing so.

Your records stay until you delete them or close your household. Generated reports and claim packs expire thirty days after they are made, and both the file and its record are removed — a snapshot that has gone stale and still looks official is worse than one that is plainly gone.

Deleting your household destroys its items, photographs, documents and policy. Backups are retained for a short period afterwards and then overwritten.

There is a button. On the Reports page, “Download everything” produces a single file containing every record as JSON and every photograph and document at full size. It asks no reason, needs no request, and works on the free plan.

That is APP 12 satisfied by a button rather than a form. If you want something corrected you can edit it yourself; if you want it gone, delete it.

Every table is protected by row-level security in the database itself, so one household cannot read another’s data even if the application has a bug. Files are private and reachable only through short-lived signed links. Connections use TLS. Payment card details never reach our servers.

No system is perfect. If we ever have a data breach likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires.

Listalot is for adults insuring a household. It is not intended for anyone under 16 and we do not knowingly collect their information.

Write to us and we will answer within 30 days. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

If this policy changes in a way that affects you, we will tell you before it takes effect rather than quietly updating the date at the top.