Privacy Policy

This policy is provided in English. The English version is the governing version.

Last updated: February 2026

1. Introduction

Commerce Consulting Services, SIA ("we", "our", or "us") operates the Smart Packing List application (the "App"). This Privacy Policy explains how we collect, use, and protect your information when you use our App.

2. Information We Collect

2.1 Information You Provide

  • Account Information: If you create an account, we collect your email address and authentication credentials.
  • User Content: Packing lists, items, categories, and list information you create within the App.

2.2 Information Collected Automatically

  • Device Information: Device type, operating system, and app version.
  • Usage Data: How you interact with the App (features used, session duration).
  • Authentication Data: Session tokens and login timestamps.

2.3 Information from Third Parties

  • If you sign in using Google or Apple, we receive basic profile information (email address, name) as permitted by your privacy settings with those services.

3. How We Use Your Information

We use your information to:

  • Provide, maintain, and improve the App
  • Sync your data across devices (if you enable cloud sync)
  • Process subscription payments
  • Respond to your inquiries and support requests
  • Send important notices about the App
  • Detect and prevent fraud or abuse

4. Subscriptions and Payments

4.1 Subscription Plans

We offer Premium subscriptions:

  • Yearly subscription with a 14-day free trial
  • Lifetime subscription (one-time payment)

4.2 Payment Processing

Payments are processed through:

  • Apple App Store (iOS app)
  • Google Play Billing (Android app)
  • Stripe (web version)

We do not store your credit card information. Payment data is handled directly by these third-party payment processors in accordance with their privacy policies and PCI-DSS standards.

4.3 Auto-Renewal & Cancellation

Yearly subscriptions automatically renew unless cancelled at least 24 hours before the end of the current period. You can manage or cancel your subscription anytime through:

  • App Store account settings (iOS)
  • Google Play Store account settings (Android)
  • Stripe customer portal (web — accessible via Settings → Manage Subscription)

Payment is charged to your App Store, Google Play, or Stripe account upon confirmation of purchase. No refunds are provided for unused portions of subscription periods, except as required by law.

5. Third-Party Services

We use the following third-party services to operate the App:

5.1 Infrastructure & Data Storage

  • Supabase (Supabase Inc.) — Authentication, cloud database hosting, and backend services
  • PowerSync (JourneyApps) — Real-time data synchronization between devices

5.2 Payment Processing

  • Stripe (Stripe, Inc.) — Payment processing for web subscriptions
  • Apple (Apple Inc.) — In-app purchase processing for iOS
  • Google Play Billing (Google LLC) — In-app purchase processing for Android

5.3 Third-Party Privacy Policies

Each third-party service has its own privacy policy governing their use of your data:

6. Local Storage

The App uses local storage technologies to function:

  • IndexedDB: Stores your packing lists, items, and categories locally on your device for offline access
  • LocalStorage: Stores app preferences (theme, language)
  • Cookies: Minimal use for authentication session management only

This data remains on your device unless you enable cloud sync (Premium feature). You can clear this data by uninstalling the App or using the "Reset all data" option in Settings.

7. Data Storage and Security

7.1 Local Storage

By default, your data is stored locally on your device. This data remains on your device and is not transmitted to our servers unless you enable cloud sync.

7.2 Cloud Sync (Optional)

If you create an account and enable cloud sync:

  • Your data is stored securely on servers provided by Supabase (supabase.com)
  • Data is encrypted in transit using TLS/SSL
  • Data is associated with your user account and protected by authentication

7.3 Data Retention

  • Local data: Remains on your device until you delete the App or clear App data
  • Cloud data: Retained until you delete your account or request data deletion
  • Subscription data: Retained for tax and legal compliance (typically 7 years)
  • Deleted data: Permanently removed within 30 days of deletion request

8. Data Sharing

We do not sell your personal information. We may share your information only in the following circumstances:

  • Service Providers: With third-party services that help us operate the App (e.g., cloud hosting, authentication, payment processing)
  • Legal Requirements: If required by law or to protect our rights
  • Business Transfers: In connection with a merger, acquisition, or sale of assets

9. Your Rights

Depending on your location, you may have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Delete your data
  • Export your data
  • Withdraw consent for data processing

Exercising Your Rights

10. Age Requirement

This App is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If we learn that we have collected data from a child under 13, we will delete it promptly. If you believe a child under 13 has provided us with personal data, please contact us at info@commerce-consulting-services.com.

11. International Data Transfers

If you use the App from outside the European Union, your data may be transferred to and processed in countries with different data protection laws. We ensure appropriate safeguards are in place for such transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top and, for material changes, displaying an in-app notice or sending you an email.

13. Contact Us

If you have questions about this Privacy Policy, please contact us:

GDPR Compliance (For EU Users)

Data Controller: Commerce Consulting Services, SIA

Legal Basis for Processing

  • Contract performance: Providing the App service (Art. 6(1)(b))
  • Consent: For optional features like cloud sync (Art. 6(1)(a))
  • Legitimate interests: Improving our services, security (Art. 6(1)(f))
  • Legal obligation: Tax and legal compliance (Art. 6(1)(c))

Data Protection Rights

Under GDPR, you have the right to access, rectify, erase, restrict processing, data portability, and object to processing. You also have the right to lodge a complaint with your national data protection supervisory authority.