Privacy Policy

Last updated: 26 August 2026

This policy covers The Props List web app at app.thepropslist.uk and the Android app. PROPIVE has a separate privacy policy.

1. Who is responsible

The Props List is the data controller for personal data processed through the web and Android apps. Contact: support@thepropslist.uk.

2. What we collect

  • Account details: name, email, password (stored by Firebase Authentication), optional phone and photo
  • Production data you enter: shows, props, packing lists, boards, shopping lists, stores, photos, and related files
  • Billing: Stripe customer and subscription IDs, plan, invoices. Card numbers are handled by Stripe, not stored on our servers
  • Usage that keeps the app working: login times, device/app version where needed for support and crash diagnosis

3. Why we use it

We use this data to provide the Service, bill subscriptions and add-ons, send essential account email (verification, password reset, billing, data export), and improve reliability. Legal bases under UK GDPR include contract (providing the Service you asked for) and legitimate interests (security and product operation).

4. How long we keep it

  • Active accounts: we keep your data while the account is open.
  • Paused accounts: data is kept for 90 days from the pause date, then deleted unless you resume.
  • Cancelled accounts: after the paid period ends we keep data for 90 days so you can download it, then delete it.
  • Immediate deletion: if you choose Delete my data now, we remove your production data and account as soon as the request completes.
  • Billing records may be kept longer where UK tax law requires it.

5. Your rights

You can access, correct, and download your data from the app. You can pause, cancel, or delete your account. You can object to or restrict certain processing, and you can complain to the UK Information Commissioner’s Office (ico.org.uk).

6. Who we share with

We use processors that help us run the Service: Google Firebase (hosting, database, authentication, storage), Stripe (payments), Google Play (Android distribution), and MailerSend (transactional email). We do not sell your personal data.

7. International transfers

Some processors may store data outside the UK. Where that happens we rely on appropriate safeguards required by UK data protection law.

8. Cookies

The marketing site uses a small local preference so we do not keep showing the cookie notice. The web app uses essential cookies and similar storage for sign-in. We also use Google Analytics on the web app to understand which pages are used. You can block analytics cookies in your browser.

9. Changes

We may update this policy. The date at the top shows the current version. Material changes will be shown in the app for you to review.