listclick

Documents

Privacy Policy

Effective from 20 October 2026 (updated). The Polish version prevails.

1. Who processes your data

The controller of your data is Mateusz Szcześniak, Sabinów 14a, 97-226 Sabinów, Poland, NIP 5242916082, REGON 388504553. Data protection contact: support@listclick.app.

This policy covers the Listclick app (iPhone and Android), the Listclick extension for Safari on iPhone, the extension for the Chrome and Safari browsers on a computer, and the listclick.app website with its contact form.

2. What data and why

  • Account: e-mail address, first name, sign-in method (Apple, Google or e-mail) and app language. Purpose: creating and running your account, sign-in, account e-mails (address confirmation, password reset). Legal basis: contract, i.e. using the app (Art. 6(1)(b) GDPR).
  • Items: photos you take in the app and listing data (title, description, brand, size, composition, price, status, listing link). Purpose: preparing listings and your list of items. Legal basis: contract (b).
  • Plan and referrals: plan (Free, Plus, Unlimited or a plan without limits granted free of charge), limit and number of items added, referral code and who used it, subscription status. When you share your referral link (listclick.app/r/…), the person who opens it, and the app when your code is entered, see your first name (first name only, no surname or email). Payments are handled by Apple (App Store) and Google (Google Play); we never receive your card details. Legal basis: contract (b).
  • Notifications: if you turn them on, we store your phone's notification token and its system (iOS or Android) and the history of notifications sent, including whether and when you opened a notification (in our admin panel we see only the total number of opens). Purpose: reminders about ready items, bonus and new-month information, replies to your messages and news about changes in the app. Legal basis: contract (b), and for news about changes in Listclick our legitimate interest (f). Offers and promotions are sent only with your consent (below).
  • Messages to us: the conversation, an optional screenshot, app and system version, whether and how we delivered our reply (notification or e-mail) and whether you read it. Purpose: answering and helping you. Legal basis: contract (b) and legitimate interest (f).
  • Contact form on the website: email address, optional name, topic and message, and our replies. Purpose: answering your message. Legal basis: legitimate interest (f). The form is protected against spam by Cloudflare Turnstile, which checks browser signals and the IP address; it does not use them for advertising. We send the reply to the email you gave. When you answer it, your message goes into the same conversation (without attachments).
  • Activity in the app: dates of sign-up, sign-in and last use of the app, item status changes, plan and marketing consent changes, notifications turned on or off on a phone, the daily number of artificial intelligence operations (a limit that protects against abuse). Purpose: helping when something doesn't work, security, counting limits and bonuses, and aggregate statistics that help us improve Listclick. Legal basis: legitimate interest (f). We do not use this data for advertising, we do not sell it and we do not track you across other apps or websites.

Newsletter and offers. If you tick the consent at sign-up or in Profile, we send you our newsletter, news, tips and promotional offers by e-mail and as in-app notifications. The legal basis is your consent (Art. 6(1)(a) GDPR). Consent is voluntary and not required to use the app. You can withdraw it at any time (Profile → Consents → Newsletter and offers, or by e-mail to support@listclick.app); withdrawal does not affect the lawfulness of earlier messages. We record whether and when consent was given or withdrawn.

Ad measurement (Meta and TikTok). The app asks once whether we may measure which Facebook, Instagram and TikTok ads bring people to Listclick. Only if you agree (and, on iPhone, also allow tracking in Apple's prompt) does the app start the Meta and TikTok tools, which send them: the app's install and launch, account creation, adding the first item and buying a plan (name and price), together with your device's advertising ID, phone model, system version and IP address. We do not send them your e-mail, name, photos or listing content. Purpose: measuring how well our ads work. Legal basis: your consent (Art. 6(1)(a) GDPR). Without consent nothing is sent and the app works the same. You can withdraw consent at any time in Profile → Consents → Ad measurement (or on iPhone: Settings → Privacy & Security → Tracking). Meta Platforms Ireland Ltd. and TikTok Technology Ltd. (Ireland) also process this data as separate controllers under their own privacy policies.

Providing data is voluntary, but an account cannot be created without an e-mail address or Apple or Google sign-in. We make no decisions about you based solely on automated processing: the AI model only suggests listing content, which you review and edit yourself.

Usage statistics (PostHog). The app asks once whether we may count how you use it. Only if you agree, the app and the browser extensions signed in to your account send PostHog (servers in the EU) information about use: screens opened, the steps of adding an item (e.g. the number of photos, which fields you correct, whether the Vinted form filled in), purchases and referrals, together with your account ID, platform, app version, language, plan and IP address. The Listclick server adds account events: sign-up, listing ready and published, plan changes and referral bonuses. We never send photos, titles, descriptions, your e-mail or name. Purpose: improving the app and checking what works. Legal basis: your consent (Art. 6(1)(a) GDPR). Without consent nothing is sent (events from before your answer wait and are deleted if you say no) and the app works the same. You can withdraw consent at any time in Profile → Consents → Usage statistics.

The listclick.app website. We count page views with PostHog (servers in the EU). Without your consent PostHog stores nothing on your device and records only the page view (page address, where you came from, approximate location and browser from the IP address). If you click "Accept" in the cookie notice, PostHog stores an identifier in your browser (a cookie and local storage named starting with "ph_") to recognise later visits and counts clicks, e.g. on the store buttons. Legal basis: legitimate interest for plain page views (Art. 6(1)(f)) and your consent for cookies and clicks (Art. 6(1)(a)). You can change your choice under "Cookie settings" at the bottom of the page.

3. Photos and analysis

Photos are stored in private storage accessible only to your account. To prepare a listing we send them to our AI model provider (OpenAI), which processes them on our behalf to generate a description. The app may save copies of photos in a "Listclick" album on your phone and deletes them once the item is marked as listed.

A Listclick administrator may see photos and screenshots when helping you with a problem or answering a message. Only people with a listclick.app account signing in with Google have access to the admin panel.

4. Browser extensions

The Safari extension on iPhone shows the items prepared in the app on the marketplace's sales form and inserts them when you tell it to. It works only on the marketplace's pages, needs no sign-in and does not collect browsing history.

The browser extension on a computer (Chrome and Safari) works on the marketplace's pages only when you tell it to: it fills in the form, reads your listings (to update statuses: listed, sold, removed) and saves them to your Listclick account. It does not collect browsing history.

5. Messages and notifications

We answer "Contact us" messages in the app: you'll find the conversation in Profile → Contact us. We let you know about a reply with a notification. If notifications are off, we send a short e-mail without the reply's text, saying it is waiting in the app.

Sometimes we may write to you first or send a notification only to you, e.g. when something in your account needs attention. Such messages concern your account and contain no advertising.

6. Who we entrust data to

Data is processed on our behalf, under data processing agreements, by:

  • Supabase - database, files (photos, screenshots), sign-in and server functions (servers in the EU, Ireland),
  • OpenAI - photo analysis and listing descriptions,
  • Expo (650 Industries) - sending notifications to the app,
  • Apple (Apple Push Notification service) and Google (Firebase Cloud Messaging) - delivering notifications to iPhone and Android,
  • Resend - sending e-mails (account confirmation, password reset, reply notices, newsletter with consent),
  • Cloudflare - hosting the listclick.app website and the admin panel, spam protection of the contact form (Turnstile).
  • PostHog (PostHog Inc., EU cloud) - usage statistics of the app and the extensions with your consent, and statistics of the listclick.app website.
  • Google (Google Workspace) - the support@listclick.app mailbox, including replies to our emails.

Apple and Google also process data as separate controllers when you sign in with their account and when you buy a subscription in the App Store or Google Play, under their own privacy policies.

We do not sell data. Meta and TikTok get information from the app only with your consent to ad measurement (section 2). We may disclose data to public authorities only where the law requires it.

7. Transfers outside the EEA

Some providers (including OpenAI, Expo, Resend, Cloudflare, Apple and Google, and with consent to ad measurement also Meta and TikTok) may process data in the United States or other countries outside the European Economic Area. This is based on the European Commission's adequacy decision (EU-US Data Privacy Framework) or Standard Contractual Clauses approved by the Commission. You can request a copy of the safeguards at support@listclick.app.

8. How long

  • Account data, items, photos, messages and activity history are kept until you delete your account. Deleting the account (Profile → Delete account, or as described at listclick.app/en/delete-account) permanently erases the account, items, photos, descriptions, conversations with screenshots, notification and activity history.
  • Contact form messages (without an account) are kept for 3 years from the last message in the conversation, unless you ask us to delete them earlier.
  • The notification token is deleted when you sign out, remove the app, or when it stops working.
  • Records of marketing consent and its withdrawal are kept until the account is deleted, so we can show that messages were sent lawfully.
  • Your answer to the usage statistics question is kept on your account until it is deleted. Data in PostHog is kept for up to 12 months; after account deletion or withdrawal of consent we delete it earlier on request.
  • Your answer to the ad measurement question is stored only on your phone. Data sent to Meta and TikTok is kept under their own rules.
  • Data disappears from backups as they are overwritten, within 30 days at the latest.

9. Your rights

You have the right to access your data and get a copy, to rectification, erasure, restriction of processing and portability. You also have the right to object to processing based on legitimate interest (e.g. activity history and statistics) and to withdraw marketing consent at any time. Write to us: support@listclick.app - we will reply within one month.

You can also lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl), or the authority in your country.

10. Changes to this policy

We will tell you about important changes in the app or by e-mail. The current version is always at listclick.app/en/privacy.