Privacy Policy

This policy explains what My Later List (“we”, “us”) collects when you use it, why, and what choices you have. It covers the mobile, desktop and web versions of the app and this website.

My Later List is run by Anjali Vimal, an individual based in Ranchi, Jharkhand, India, who is responsible for your personal data under this policy (the “data controller”). You can reach us at support@mylaterlist.com.

1. What decides whether we hold your list

You sign in to use My Later List, with Google, Apple or an email address. Signing in gives us an account to attach things to — it does not upload your list. What puts your list on our servers is Pro, which backs it up and syncs it across your devices, and that requires a server that can read it.

The free plan is not a trial. It is unlimited, and it is the answer if you would prefer that we hold as little as possible. The trade is that there is no backup and no sync: if you lose the device, the items on it go with it.

2. What we collect

Information you give us

• Account details: your email address and how you signed in, and — if you sign in with Google or Apple — the name and profile image those services return to us. You can change or remove your display name and picture in the app. People you share with, or who share with you, can see your name, picture and email address.
• Your content: the notes, checklists, images, documents, links and voice recordings you put into your list, with the labels, filters, dates and reminders you attach to them. Where it lives depends on your plan (section 1).
• People you invite: the email addresses you type to share with someone, and the connections that result once they accept.
• Your votes on the feature board, and anything you email us.

Information collected automatically

• Crash reports. When the app crashes or hits an error, it sends a report: device model, operating system and app version, the time, and where in the app it failed. Never the content of your list. Reports are on by default because they are how we find and fix problems, and you can turn them off in the app under Settings → Data & privacy.
• Usage statistics, only if you turn them on. There is a switch for them, off by default, on the last step of setting up the app and in Settings → Data & privacy. If you turn it on, the app records which features are used — screens opened, items created, whether a search happened, the subscription steps — and how quickly screens load, together with an app-instance identifier and your account ID. It never records what you write, save or search for. While the switch is off, nothing is sent. You can turn it off again at any time.
• Device details for notifications: a push token for each device you sign in on, with its platform and time zone, so we can tell you when someone shares something and keep your devices in step.
• Usage counts: how much AI you have used this month and how many emails you have sent in, so we can apply the limits on our pricing page. Counts only, never content.
• Subscription records, if you subscribe: which plan, when it started and renews, and its status, so we know your account has Pro. Payment itself is handled by Apple or Google; we never see your card details.

Link previews

When you save a link, the app shows the page's title and image. In the mobile and desktop apps, your device fetches the page itself, so that website sees an ordinary request from your device; for YouTube links, the title and thumbnail come from YouTube. In the web app, browsers do not allow that, so our servers fetch the page for you and send back only its title, description and image. We do not keep the link or a record of the request, beyond counting how many previews an account asks for, to prevent abuse.

What we deliberately do not collect

• We do not use advertising identifiers, and we do not serve ads.
• We do not sell or rent personal information to anyone, for any price.
• We do not build advertising or marketing profiles from the content of your list.
• We do not track you across other apps or websites.
• We do not access your location or your contacts.

3. Artificial intelligence, and what it sees

This is the part people most often want to know about, so it gets its own section rather than a line in a list.

When you capture something and the app organizes it for you — giving it a title, picking out a date, suggesting labels — or when you ask the assistant to do something, the content involved is sent to Google's Gemini models through Google's Firebase AI Logic service, processed, and the result is returned to your app. That includes the text you typed, and any image, document or voice recording it contains. Voice memos are transcribed the same way: the audio is sent, and text comes back. On Pro, the instructions you give the AI in Settings are sent with each request too.

Nothing is sent until you agree. The first time you use an AI feature, the app asks. If you choose Not now, everything still saves, just without AI, and you can turn AI on or off at any time under Settings → Data & privacy → Use AI.

This happens on both plans: the free plan has a monthly allowance, Pro a much larger one. On the free plan, sending a capture to be organized does not store it with us — your list still lives only on your device.

Google processes this data as our service provider. Under the Firebase AI Logic terms, this content is not used to train Google's models. It may be retained briefly for abuse monitoring and service operation.

4. Adding things by email

You can email things into your list by sending them to our capture address from an address you have approved in the app. To approve an address, you send a short code from it to us, which proves you can send from it; we store the addresses you approve.

Mail you send in is received through Cloudflare, checked to confirm it really came from an approved address, and stored on our servers as an item in your account, on either plan — the message, its attachments, and the original email. Your app then organizes it with AI as described in section 3. Mail from an address that is not approved is discarded.

5. Sharing, and what other people can see

You can share a single item, or a whole label — never your whole list. Sharing things out needs Pro; anyone, on either plan, can receive shared items, join a shared label and add to it. The people you share with can see the shared items and the name, picture and email address on your account. They cannot see anything else in your list.

Shared items live in the account of the person who shared them, on our servers, so that everyone involved can see the same thing. That includes anything you add to a label someone else shared with you.

Sharing requires both sides to agree: the other person gets an invitation, and nothing is shared until they accept it. You can remove someone from a shared label at any time, which ends their access to its items. Bear in mind that anything they could already see, they may already have copied — we can revoke access, but we cannot un-see it for them.

Unlabelling is not deletion. Removing a shared label from an item removes it from everyone else's view of that label, but if you want the content gone you must delete the item.

6. Connecting an AI assistant

On Pro you can connect an AI assistant you already use — Claude, ChatGPT, Gemini and others — so it can use your list, through a standard called the Model Context Protocol. You start it from the assistant, then sign in to us and choose which labels it may see, where it may change things, and whether it may open photos and files.

When the assistant asks for something, our connection service reads the items you allowed — as you, under the same access rules as the app — and passes them to the assistant. From there, what you share with the assistant is handled by the company that runs it (Anthropic, OpenAI, Google or whoever it is), under its privacy policy and your agreement with it, not ours. It is a service you chose, not one we use to run My Later List.

Where you allow it, the assistant can add items, add notes, tick things off and reschedule or relabel; the app shows those changes as made by it. It can never delete or bin anything, open voice notes, share, or change your account or settings, and those limits are enforced by our servers.

For each connection we keep: the assistant's name as it introduced itself, the labels and permissions you chose, when you connected it, and a sign-in session limited to exactly those permissions, stored encrypted. We count how much it reads each day, to apply fair-use limits. We do not keep what it read or what you asked it.

You can disconnect an assistant at any time in the app, under Settings → Connect an AI assistant, and it stops working at once. A connection also ends if you change your password, sign out everywhere or delete your account, and pauses while you are not on Pro.

7. The services we use

We use a small number of third parties to run the service. Each one only receives what it needs to do its job.

Voice dictation, where offered, is handled by your device's own speech recognition, which is provided by Apple or Google as part of your operating system and governed by their privacy policies.

Data is stored on Google Cloud infrastructure and may be processed in countries other than your own, including the United States. Where required, these transfers rely on the safeguards Google offers as our processor, including Standard Contractual Clauses.

8. What we can actually see

We would rather be direct about this than reassuring about it.

Content you sync to us is not end-to-end encrypted. It is encrypted in transit and encrypted at rest on our servers, but we hold the keys, which means people with production access could read it, and we would be obliged to produce it in response to a valid legal order. This is equally true of Notion, Todoist, Evernote and Google Keep — and it is not something we can fix while also offering AI organizing, link previews, shared labels and email capture, all of which require our servers to read your content in the clear.

In practice we do not read your list. Access to production data is limited to what is needed to operate the service and to investigate faults, administrative access is logged, and we do not copy production data into testing environments. But “we choose not to” is a weaker promise than “we cannot”, and you should know which one you are being given.

If that is not an acceptable trade for you, stay on the free plan.Your own list is then never stored with us, and that version of the promise is architectural rather than a matter of our good behaviour. What still reaches us is only what you choose to send: captures you have organized with AI (processed, not stored), mail you send in, and what you share or is shared with you. It is available to you permanently, not as a trial.

9. How long we keep things

• Items you delete go to a bin and are permanently removed after30 days. Until then they still count towards your storage.
• Your account and its content are kept until you delete the account. See deleting your account.
• Crash reports are kept for 90 days, and usage statistics for at most 14 months, then discarded.
• Your own items on the free plan are kept by your device, not by us. Uninstalling the app removes them, and they cannot be recovered.
• Assistant connections are kept until you disconnect them or delete your account, and end on their own after 90 days without use.
• Items you email in, and items shared with you, are kept on our servers until you (or, for a share, its owner) delete them, or the account is deleted.
• If a subscription ends, your items stay on every device that was syncing. The copies on our servers are removed after 30 days, except anything other people can still see. Photos and files exist only on our servers, so that 30 days is your window to export them.

10. Your rights

Depending on where you live, you have some or all of the following rights:

• Access — ask what personal data we hold about you.
• Correction — have inaccurate details corrected. Most of this you can do yourself in the app.
• Deletion — have your account and content erased. See account deletion.
• Portability — receive a copy of your content in a machine-readable form. You can do this yourself in the app, under Settings → Data & privacy → Export all items.
• Objection and restriction — object to certain processing, or ask us to limit it.
• Withdraw consent — where we rely on consent, you can withdraw it at any time. AI, usage statistics and crash reports each have a switch in the app, under Settings → Data & privacy, which takes effect straight away.
• Nominate someone — you can name a person to exercise these rights for you if you die or become unable to. Email us their name and how to reach them, and we will act on their request when the time comes.

To exercise any of these, email support@mylaterlist.com. We will respond within the period the law where you live requires, and in any case without undue delay. You may also complain to your local data protection authority.

If you are in the UK or EU, our lawful bases are: performance of our contract with you (to run the service you asked for), our legitimate interests (keeping the service secure and working, which includes crash reports), consent (sending your content to AI, usage statistics, and anything else we ask you about first), and legal obligation.

If you are in India, under the Digital Personal Data Protection Act you may contact our Grievance Officer, whose details are in section 16, and escalate to the Data Protection Board if we do not resolve your complaint.

If you are in California, we do not sell or share personal information as those terms are defined by the CCPA, and we will not discriminate against you for exercising your rights.

11. Security

We value your trust in providing us your personal information, and we use commercially acceptable means of protecting it — transport encryption, encryption at rest, server-side access rules that stop one account reading another's data, and device attestation to keep unauthorised clients away from our servers. But remember that no method of transmission over the internet, or method of electronic storage, is 100% secure, and we cannot guarantee absolute security.

You are responsible for keeping your own device and your account credentials secure. We recommend against running the app on a jailbroken or rooted device, where the protections your operating system normally provides may not hold.

12. Cookies

This website sets no cookies and uses no advertising or cross-site tracking. If we measure traffic, we use a service that counts visits without cookies and without identifying individual people.

The app itself stores data on your device in order to work — your list, your sign-in session, and your preferences. That is local storage, not tracking. Clearing it signs you out, and on the free plan it deletes your list, because your device is the only place it exists.

13. Children's privacy

This service is for people aged 18 and over, and signing in asks you to confirm you are. We do not knowingly collect personal information from anyone under 18. If we discover that someone under 18 has provided us with personal information, we delete it from our servers immediately. If you are a parent or guardian and you believe your child has provided us with personal information, please contact us so we can take the necessary action.

14. Links to other sites

The service may contain links to other sites — including any link you save into your own list. If you follow a third-party link you will be directed to that site. These external sites are not operated by us, and we strongly advise you to review their privacy policies. We have no control over, and assume no responsibility for, the content, privacy policies or practices of any third-party site or service.

15. Changes to this policy

We may update this policy from time to time. We will post the new policy on this page and update the date at the top. Where changes are significant, we will tell you in the app before they take effect. You are advised to review this page periodically.

16. Contact us

My Later List is run by Anjali Vimal, Ranchi, Jharkhand, India. If you have questions, suggestions or complaints about this policy, or you want to exercise any of the rights in section 10, contact us at support@mylaterlist.com.

Grievance Officer (India, DPDP Act): reachable at the same address. We will acknowledge your grievance and respond within the period the Act requires.