Privacy Policy

Last updated: July 19, 2026

Drift Lists (“Drift,” “we,” “us”) is a shared checklist app operated at thedrift.app. This policy explains what information we collect, how we use it, and the choices you have.

Who this applies to

This policy covers the Drift Lists mobile apps (iOS and Android) and the website at thedrift.app. Drift does not require a traditional username and password. When you install the app, we create a guest identity on your device so your lists can sync in the cloud.

Information we collect

Depending on how you use Drift, we may process:

• Account and profile data — a guest identity ID, display name, avatar choice, optional recovery email, timezone, and notification preferences.
• List content you create — list names, items, notes, categories, dates and reminders, icons, and photos or product link previews you attach.
• Collaboration data — membership on shared lists, invite/share codes, and activity related to those lists (for example, who added or completed an item).
• Device and push identifiers — your guest identity, and if notifications are enabled, a push token so we can deliver list and reminder alerts.
• Backup and restore data — optional one-time backup codes (and the email address you choose if you ask us to email a code).

We do not sell your personal information. We do not use third-party advertising or analytics SDKs in the Drift Lists apps.

How we use information

• Provide core app features: creating, syncing, and sharing lists.
• Authenticate API requests with your guest identity.
• Send optional push notifications about list activity and reminders.
• Help you restore access with a backup code or recovery email you provide.
• Operate, secure, and troubleshoot the service (including limiting abusive restore attempts).

How we share information

We use infrastructure providers that process data on our behalf to run the service — for example cloud hosting, databases, object storage for images, email delivery, and push notification platforms. Those providers only process data to provide services to us.

When you share a list, collaborators you invite can see the list content and related profile details needed for collaboration (such as display name and avatar). We may disclose information if required by law or to protect the security of the service.

Data retention

We retain your profile and list data while your account is active. Backup codes expire after a limited period and are one-time use. If you delete your account, we remove your profile, lists you own (and their items), favorites, unused backup codes we can associate with you, and your push registration. Lists you joined remain available to other members after you are removed.

Your choices

• Edit your display name, avatar, recovery email, and notification settings in the app.
• Turn push notifications off in Settings.
• Delete your account and related data from Settings → Delete account, or follow the steps at thedrift.app/delete-account.

Children

Drift Lists is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will take appropriate steps to delete it.

International processing

Drift is operated using cloud infrastructure that may process data in the United States or other countries where our providers operate. By using the app, you understand that your information may be processed in those locations.

Changes

We may update this policy from time to time. The “Last updated” date at the top will change when we do. Continued use of Drift after an update means you accept the revised policy.

Contact

Questions about privacy or this policy: privacy@thedrift.app