Checklist: Reusable Lists · Last updated 22 September 2026
Checklist: Reusable Lists (“the app”) is designed to be private by default. The short version: there are no accounts, your checklists stay on your device, anything you choose to share is end-to-end encrypted so we can’t read it, and there is no advertising or personal tracking. We collect only anonymous, aggregated usage statistics to improve the app.
Every checklist, item, and completion you create lives only in local storage on your device. The contents of your lists are never uploaded to any server unless you choose to share a list — and shared lists are end-to-end encrypted, so we can’t read them (see Sending a copy of a checklist and Collaborating live below).
The app does not require or offer an account. We never ask for your name, email, phone number, or any personal identifier.
To understand which features are used and make the app better, Checklist: Reusable Lists sends a small amount of anonymous, aggregated usage data to TelemetryDeck, a privacy-focused analytics service. This data contains no personal information and none of your checklist content — only counts of in-app events (for example, that a checklist was created or completed) and basic device information (model, iOS version, screen size, app version).
We do not collect your name, email, contacts, location, or advertising identifier. A random per-install identifier is used to estimate the number of active users; it is not tied to your identity and is further hashed by TelemetryDeck. There are no ads, no cookies, and no cross-app or cross-site tracking.
This website (getchecklist.app) uses Vercel Web Analytics, a privacy-friendly, cookieless feature of our hosting provider, and TelemetryDeck, the same privacy-focused analytics service the app uses, to measure aggregate page traffic and which pages lead people to the app. So that returning visits can be counted, the website keeps a random identifier in your browser’s local storage (not a cookie). It contains nothing about you, is hashed again by TelemetryDeck, is never shared, is not used on any other site, and disappears when you clear this site’s data. Neither service tracks you across sites or collects any personal information. The website also uses Google Analytics, which sets cookies to measure visits and traffic sources; Google's privacy policy describes how that data is handled. None of this applies to the app itself, which remains offline and account-free.
When you share a checklist, the app encrypts its contents on your device and uploads only the encrypted result to our server, then gives you a short link to send however you like (Messages, Mail, AirDrop, etc.). The key that decrypts it travels inside the link itself and is never sent to our server, so we cannot read your shared checklists. The encrypted copy is stored only temporarily and is automatically deleted after 30 days. Anyone you send the link to imports their own copy — there is no live connection between devices.
If you’re offline, sharing falls back to sending the checklist as a
.checklist file, which travels device-to-device through your own
apps with no server involved. Older links that carry the checklist data inside
the link’s fragment still open; that data is never transmitted to our website.
Collaborate live lets people you invite check off a list together. The shared list syncs through your own iCloud account using Apple’s CloudKit sharing, and participants sync through theirs — the app does not operate a server for this, and we never receive the list. Apple’s privacy policy governs iCloud. Participants see the display name and color you choose in the app, which stay on your device and in the shared list; no Apple ID or email is shown or stored by us. You can stop sharing at any time from the list, and leaving a list removes it from your iCloud.
iCloud Sync (part of Checklist Pro) keeps your library the same on your iPhone, iPad, and Mac. When you turn it on, your checklists, lists in progress, and daily to-dos are stored in your own iCloud account (Apple’s CloudKit private database) and delivered from there to your other devices signed into the same account. The app does not operate a server for this, and we never receive, and cannot read, your lists; Apple’s privacy policy governs iCloud. No Apple ID, email, or name is collected or stored by us. Turning iCloud Sync off keeps everything on your device; “Remove My Data from iCloud” deletes the copy stored in your iCloud. The feature is off until you turn it on.
On devices that support Apple Intelligence, the app can use Apple’s on-device language model to understand text you type, dictate, or paste into Quick Add and the “Add an item” fields. This runs entirely on your device: the text is never sent to us, to Apple’s servers, or to any other server, and nothing about it is stored beyond the checklist items you choose to add. On devices without Apple Intelligence the app uses simple built-in rules instead.
If you schedule a reminder for a checklist item, the app opens your device’s own “New Event” screen, pre-filled with the item’s text, so you can add it to your calendar. The event is written by iOS into your own calendar — it is not sent to or stored on any server we operate. This feature requires calendar access (iOS’s native event screen needs it to choose which calendar to save into); the app uses that access only to add the event you schedule and to open it again if you tap its reminder — it never uploads or shares your calendar. The feature is entirely optional and nothing happens unless you choose to schedule a reminder.
If you send feedback through the app, we receive your message and — only if you choose to provide it — your email address, so we can reply. Providing your email is optional. Feedback is delivered by our email provider, Resend, and is used solely to respond to you and improve the app. We don’t use it for marketing or share it.
If you leave your email address on our Android waitlist (getchecklist.app/android), we store that address — and nothing else — so we can send you a single message when the Android app is available on Google Play. It is not used for marketing, never shared, and not linked to anything you do in the app. The address is held in our hosting provider’s data store (Upstash, via Vercel) and the notification is sent by Resend. We keep it only until that message has been sent, and remove it earlier on request — email info@getchecklist.app.
Checklist Pro is sold through Apple’s in-app purchase system. Apple handles payment and your purchase history; the app only learns whether Pro is active. We never see your payment details.
The app collects no personal data from anyone, including children, and contains no ads or external content.
Your checklists live on your device, so you’re always in control: deleting a checklist removes it, and deleting the app removes all of its data. Anything you shared as a copy is end-to-end encrypted and auto-deletes from our server within 30 days. Lists you collaborate on live in your iCloud and are removed when you stop sharing or leave them.
If this policy changes, we will update the date above and post the new version at this address.
Questions about privacy? Email info@getchecklist.app.