App privacy

For the go poschte app. Last updated 17 October 2026. The website has its own policy on the Privacy page; who is responsible is on the Impressum.

go poschte is a shopping list app for households in Switzerland, made by Rogeha Studio. This page explains what the app does with personal data.

Who is responsible

What the app stores, and where

On your phone only

The shopping list is kept on the phone, so it works without a connection. These never leave it: photos you take of products, the German names the app has learned, barcodes you have scanned, which product you picked for which question, the chain you shop at, your light or dark choice, and how many assistant requests you have used today. They go when you uninstall the app.

In the household's shared list

If you sign in and join a household, this is held in Google Cloud Firestore, part of the app's Firebase project:

• the items on the list: name, amount, note, estimated price, category, barcode, whether it is in the basket, and when it was added or last changed;
• who added or changed an item, as the display name from your Google account;
• the household: its name, its members and the invite code;
• an activity feed of what was added, basketed, deleted or undone, which deletes itself after 30 days.

Your account

Signing in uses Google. Firebase Authentication holds your account identifier, the email address of the Google account you signed in with, and its display name. The app itself stores only the identifier and the display name.

If you never sign in, the app keeps everything on the phone, apart from the requests described next.

What leaves the phone, and to whom

• Google (Firebase) — the shared list, the household and the account data above. Google acts for us as our processor. Firebase servers are operated by Google and data may be processed outside Switzerland.
• Google (Gemini, through Firebase AI Logic) — when you ask the assistant, the text of your question, along with which chain you shop at and, for "Ideas for my basket", the item names on your list.
• Google (speech recognition) — if you speak instead of typing, the recording is handled by the speech service built into your phone, under Google's own privacy policy. The app receives only the text.
• Open Food Facts (openfoodfacts.org, a public product database) — a barcode you scan, or a product name, to look up a picture. Your IP address reaches them as with any web request.
• swisstopo (api3.geo.admin.ch, the Swiss federal geodata service) — the town, street or postcode you type when searching for a store. Your position is never sent.
• Google (Android's geocoder) — if you let the app use your location, your coordinates, to turn them into the place name the app shows you. And if swisstopo finds nothing for a town, street or postcode you type, that text is tried there instead.
• Google Maps — only if you tap a store's address: the store's coordinates are handed to the Maps app.

The app has no advertising, no analytics and no crash reporting. Nothing is sold or passed on for marketing.

Location, camera and microphone

• Location is used to sort stores by distance. The comparison happens on the phone, against the list of branches built into the app, and your position is never stored. Turning it into a place name to show you is the one exception: Android's geocoder does that, which sends the coordinates to Google. You can refuse the permission; searching by town or postcode then does the same job.
• The camera is used to scan barcodes and to photograph products. Photos stay in the app's private storage on the phone.
• The microphone is used when you choose to speak; see the speech note above.

Each permission is asked for when it is first needed, and the app works without any of them.

How long data is kept

• Data on the phone: until you delete the item, the photo, or the app.
• Shared list and household: as long as the household exists. Deleted items go at once.
• Activity feed: 30 days.
• Account: until you ask us to delete it.

Deleting your data

In the app: open the ⋮ menu and choose Delete my data. It asks once, then deletes everything the app holds about you: your membership of the household, the record of your name, your account with the email address it was created from, and everything on the phone — the list, your product photos, the names the app has learned and every setting. The app closes afterwards. It cannot be undone.

The household's shared list stays with the household for its other members, including items you added; it belongs to the household rather than to one person. If you were its only member, write to us and we will remove what is left of it.

Other ways:

• Leave the household in the app (⋮ → Family Sync) to end your membership but keep your account.
• Uninstall the app to remove everything held on the phone.
• Write to support@rogehastudio.com and we will delete your account and everything stored under it within 30 days, and confirm when it is done.

Your rights

You can ask what personal data about you is processed, and have it corrected or deleted. Write to support@rogehastudio.com. You can also turn to the Federal Data Protection and Information Commissioner (FDPIC).

Children

The app is not directed at children, and we do not knowingly collect data from them.

Changes

If this policy changes, the date at the top changes with it. The current version is always at this address.

← Back to go poschte