Qshit

Privacy policy

Last updated: 11 November 2026

Qshit (“the app”) is a private list app operated by Gilson Junior (“we”). This policy describes the data the Qshit Android app, iOS app and web app (qshit.web.app) collect when you sign in and use Qshit. Contact: gilsonjuniorpro@gmail.com.

Who can use the app

Qshit is not directed at children. Sign-in with a Google Account, or with Sign in with Apple on Apple devices, is required for every feature. There is no guest mode.

Data we collect

We collect the following data to provide the app:

• Account information: name, email address, and profile photo URL from Google Sign-In or Sign in with Apple, through Firebase Authentication. Your name is shown to members of lists you join.
• Your content: lists, items, list covers, file attachments, chat messages, activity, and reminders that you create or receive in a shared list.
• Photos and files you attach: before a photo can be opened, our server removes its embedded metadata, such as GPS location, camera details and the time it was taken. PDF files are stored as sent.
• Invites: when you invite someone by email, we pass that address to our email provider to send the invite, and we store only a hash of it.
• Device information: a push token, platform, and language so we can send notifications about lists you belong to.
• Optional presence: whether you are online, typing or editing in a shared list. You can hide presence in the app.
• App integrity checks: each request to our servers carries a token from Firebase App Check, which uses Google Play Integrity on Android, Apple App Attest and DeviceCheck on iOS, and reCAPTCHA Enterprise on the web. These services check that the request comes from a genuine copy of the app. reCAPTCHA reads browser and device signals for that check.
• Crash reports (Android and iOS, optional): when the app hits an unexpected error, it sends the error type, where in the code it happened, the app version, the device model and operating system, and a random installation ID to Firebase Crashlytics. It never sends the error text, your lists, messages, files or account details. You can turn crash reports off in Profile. The web app sends none.
• Security records: when ownership of a list changes or an account exports its data, we keep a record of which account did it and when.

We do not collect precise location, contacts from your address book, health data, financial data, advertising IDs, or analytics events. The app does not show ads and does not include in-app purchases.

How we use data

We use this data only to run Qshit: sign you in, sync your lists, deliver invites and notifications, show optional presence, protect our servers from abuse, fix errors, and let you export or delete your account. We do not sell your data. We do not use it for advertising.

Service providers

Data is stored and processed by Google Firebase (Authentication, Firestore, Realtime Database, Cloud Storage, Cloud Functions, Cloud Messaging, Hosting, App Check and Crashlytics), by Google Play Integrity, Apple App Attest and DeviceCheck, and Google reCAPTCHA Enterprise. Invite emails are sent by Resend, which receives the invitee’s email address and the invite link. These providers process data on our behalf to operate the app. We do not share your data with other third parties for their own purposes.

Sharing with other people

Lists, items, files, chat, activity, reminders, your name, and optional presence are visible only to members of a list. A private item is visible only to the members chosen for it. Owners and admins can remove a member. There is no public feed.

Retention and deletion

• We keep your account and content while your account exists.
• Activity entries are deleted after 90 days.
• Notices are deleted 90 days after you read them, and unread ones after one year. You can delete a notice yourself at any time.
• A list in the trash is deleted, with its files, after 30 days.
• Export files are deleted one hour after they are created.
• Security records are deleted after one year.

You can delete your account in Profile. Lists only you belonged to are deleted with their files. A shared list you owned passes to another member. You leave every other list, and your private items are deleted. Messages and activity you wrote in shared lists stay for the other members without your name. Then your profile, settings, devices and sign-in account are deleted. Steps and other options are on the account deletion page.

Security

Data is encrypted in transit using HTTPS. Access to lists is limited by Firebase security rules to signed-in members of each list, and files are reachable only through short-lived links issued to those members.

Changes

If this policy changes, we will update this page and the date above.