Pawlist is operated by [LEGAL ENTITY NAME — fill in before publishing], [REGISTERED BUSINESS ADDRESS — fill in before publishing] ("we", "us"). For any question about this policy or your data, contact us at [PRIVACY CONTACT EMAIL — fill in before publishing].
Your email address and name (for your account), the tasks/projects/notes/tags you create, your app settings (theme, accent color, notification preferences), your subscription/plan status, and — if you enable push notifications — a device push token.
If you connect Google Calendar in Settings, we store an OAuth access/refresh token so Pawlist can write your task due dates to your calendar and read your event details. Pawlist Plus subscribers can additionally opt in to auto-import: new Google Calendar events are read and created as Pawlist tasks. We only request the calendar permission needed for these features. Disconnecting in Settings deletes the stored token.
If you subscribe to Pawlist Plus, payment is handled by our payment processors: Stripe (web checkout and billing management) and, on iOS/Android, RevenueCat together with Apple's App Store or Google Play billing. We never see or store your full card number — Stripe, Apple, and Google process payment details directly. We store only your subscription status, plan, renewal date, and a customer/subscription reference id, needed to manage your subscription and verify access to paid features.
Solely to operate Pawlist for you: storing and syncing your tasks across devices, sending the reminders you configure, processing your subscription, and (if enabled) reflecting your activity in the optional companion feature. We process this data because it's necessary to provide the service you've signed up for, and, for optional features like push notifications, based on your consent. We do not sell your data or use it for advertising.
Your data is stored in a PostgreSQL database on infrastructure we operate. Nightly backups are taken, including an off-site copy; see our data-retention practices below for details.
If you access Pawlist from outside the region where our servers are located, or one of our service providers below processes data outside that region, your data may be transferred internationally. Where this happens, we rely on the safeguards required by applicable law (such as standard contractual clauses). [Full subprocessor-by-subprocessor transfer detail to be confirmed once all providers and regions are finalized.]
Depending on where you live, you may have the right to access, correct, delete, or export your data, restrict or object to certain processing, and lodge a complaint with your local data protection authority. In Pawlist, you can download a copy of your data at any time from Settings → Download my data, and permanently delete your account and all associated data from Settings → Delete account — this is irreversible. For any other request, contact us using the details in section 1.
We retain your data for as long as your account is active. When you delete your account, your data is removed from our primary database; backups that already contain it age out on our normal backup-retention schedule.
We use the following service providers, each only for the purpose described, to operate Pawlist: our hosting infrastructure; Resend for transactional email; push notification delivery (Apple Push Notification service, Firebase Cloud Messaging, and Web Push); Stripe for web payment processing and subscription billing; RevenueCat for mobile subscription management and receipt validation with Apple's App Store and Google Play; and, if you connect it, Google Calendar for calendar sync. We do not share your task content with advertisers or data brokers.
Pawlist is not directed at children under 13 (or the relevant minimum age in your jurisdiction), and we do not knowingly collect data from them.
We may update this policy from time to time. Material changes will be announced in-app or by email before they take effect.
Last updated: 2026-07-30.