Updated: 14 October 2026
This policy covers NoxDoList for Android (package com.noxdolist.app). The Android release is being prepared for Google Play. The Apple version uses different system services. Apple and Android do not sync with each other.
1. Controller and contact
Controller: Dimitri Valjuzenic, Brauhausstr. 17 B, 26506 Norden, Germany. Privacy: privacy@glassydev.de. General contact: contact@glassydev.de. Support: support@glassydev.de.
2. Local data and system backups
Tasks, shopping lists, recipes, weekly plans and preferences are stored in a private local Room database and app storage. Core features do not require a separate NoxDoList account. Android system backups are allowed. Depending on your device and backup settings, Android or your device provider may back up local data or transfer it to another device. We do not operate a backup server.
3. Optional family lists through Google Drive
Only when you connect a family list do we use your chosen Google account and the drive.file scope for files created by the app or explicitly selected by you. List contents, technical item and device identifiers, change information and sharing permissions are processed through Google Drive over HTTPS. Account identifiers, email address and file links are stored locally for the connection. Invited members can access the shared list according to their permissions. Sync may also run in the background. Unrelated tasks and recipes are not uploaded with the family list. There is no developer-operated sync server.
4. Text recognition and barcode scanner
Google ML Kit recognizes text in a recipe image you select. Recognition runs on the device; the image and recognized text are not sent to Google for this processing. According to Google, the SDK transmits technical device and app information, installation identifiers, performance metrics and feature events for diagnostics and usage analytics. Google Code Scanner processes camera images on the device and returns the scan result. The app serves no ads and requests no advertising ID permission; technical SDK diagnostic data is nevertheless processed.
5. Product searches and recipe imports
When you request a product lookup, the scanned barcode is sent to Open Food Facts, together with connection information such as your IP address and the app identifier in the User-Agent. The full shopping list and recipe image are not sent. Importing a recipe or loading its images contacts your selected website, which receives the IP address, requested URL and technical connection data. External providers are responsible for their content and processing.
6. Google Play and Pro purchases
Google Play processes information needed for payment and delivery of the optional one-time Pro purchase. The app receives purchase status and signed purchase records with technical purchase identifiers and stores them locally to enable Pro access and restoration. NoxDoList does not request card or banking details and does not operate a purchase verification server.
7. Permissions
Internet access supports the online features you use. Local reminders can appear as notifications with your system permission. Reminders are rescheduled after device restart. Images are individually opened through the system picker without general photo-library access. Barcode scanning uses Google Code Scanner. The current Android version requests no location, contacts, calendar or microphone permission.
8. Purposes and legal bases
Local features, requested online lookups, optional shared lists and purchase verification provide the functions you use (Article 6(1)(b) GDPR). Technical security, reliability and SDK diagnostics serve legitimate interests in safe, reliable operation (Article 6(1)(f) GDPR). Where consent is required, Article 6(1)(a) GDPR applies. System permission explains technical access and does not replace any further consent required.
9. Retention, deletion and revocation
Local data remains until deleted in the app or Android app settings. Drive files and sharing remain until the owner deletes the file or revokes sharing. Disconnecting in NoxDoList ends the connection on that device and does not delete the Drive file. You can also revoke account access in your Google account. Copies already received by other members and system backups may require separate deletion. Google retains purchase records and SDK diagnostic data according to its applicable policies; we do not set a separate retention period.
10. Recipients and international processing
Recipients, when you use the corresponding features, include Google (account, Drive, ML Kit, Google Play), Open Food Facts, your selected recipe providers and possibly your system backup provider. Processing may occur outside the European Economic Area. Consult the linked provider policies for recipients, storage locations and transfer safeguards.
11. Your rights
Subject to the GDPR, you have rights of access, rectification, erasure, restriction and data portability. You may object to processing based on legitimate interests and withdraw consent for the future. You can complain to a competent supervisory authority. Contact privacy@glassydev.de. Data in your Google account may also require its management and deletion tools.
12. Website and further information
Visits to this website are additionally covered by the website privacy notice on hosting, connection data, appearance preferences and the page view counter. Provider details are in the legal notice.