ExList
ExList · Privacy Policy · Effective October 29, 2026
ExList is a private tracker for your own relationships. This policy explains what the app does with data. The short version: what you log about people stays on your devices and in your own iCloud. We never receive it.
Who we are
ExList is developed by Mozenrot (Leo Chernyak) (“we”). Contact: mozenrot@gmail.com.
What stays on your device
The people you add, their names, the lives you give and take, categories, notes, epitaphs and history are stored on your device and synced through your private iCloud account (Apple CloudKit), if iCloud is on. We have no access to this data and it is never sent to our servers or to any third party. Deleting the app or the people in it deletes it from your device; iCloud copies follow your iCloud settings.
Apple Wallet cards
If you add a tombstone card to Apple Wallet, the app sends the card’s text — the name you chose, the dates, the number of days and lives, the cause and the epitaph — to our signing service (Google Cloud Functions, European Union region). The service signs the card, returns it to your device and keeps nothing: the content is not stored and not written to logs. Requests are verified with Firebase App Check to confirm they come from the genuine app.
App analytics and crash reports
We use Google Firebase to keep the app working and to understand how it is used:
- Firebase Analytics — anonymous usage events such as “onboarding step completed”, “paywall shown”, “a life was logged” (without any detail about who or why) and ad events, together with standard device data (app instance ID, device model, OS version, country, app version).
- Firebase Crashlytics — crash reports with technical device and app state data.
- Firebase Remote Config and App Check — app settings and device integrity checks.
None of these include the names, notes or anything else you log about people. Google processes this data under the Firebase privacy terms.
Advertising
The free version shows ads from Google AdMob. Ads are never shown to subscribers or to users who bought “Remove ads”, during the first day of use, while logging, on the GAME OVER screen, or anywhere for a person with safety-related history.
AdMob may collect device identifiers, IP address, approximate location and ad interaction data. The Apple advertising identifier (IDFA) is used only if you allow it in the iOS tracking prompt. In the European Economic Area, the UK and Switzerland we ask for your consent before personalised ads, and in applicable US states you can opt out of the sale or sharing of personal information for targeted ads; you can change these choices from the app. Learn how Google uses data: policies.google.com/technologies/partner-sites.
Purchases
Subscriptions and in-app purchases are processed by Apple. We receive confirmation of what you bought, not your payment details.
What we don’t do
- No accounts, no sign-in, no contact list upload.
- We don’t sell what you log, and we can’t — we never have it.
Your rights
Depending on where you live (for example under the GDPR or US state privacy laws) you may have the right to access, delete or correct personal data, to object to processing or to withdraw consent. Most data we touch is held by Google on our behalf and is not linked to your identity; write to mozenrot@gmail.com and we will help. You can reset your advertising identifier and tracking choices in iOS Settings at any time.
Children
ExList is not directed to children under 13 (under 16 in the EEA) and we don’t knowingly collect their data.
Changes
If this policy changes, we will update this page and the effective date above.