Privacy Policy
Khass — shared grocery lists. Last updated 10 August 2026.
Khass is a shared grocery list. This policy describes exactly what the app stores, why, and what control you have over it. It is short because the app collects very little.
No account, no personal details
Khass never asks for an email address, password, or phone number. On first launch the app creates an anonymous identifier for your device so your lists can be told apart from other people's. That identifier is not linked to you personally and we cannot use it to contact you.
What is stored
- An anonymous device identifier, created automatically on first launch.
- The names of lists you create or join.
- The items on those lists, including any quantity you type.
- Which items are marked as bought, and which member marked them.
- A display name, only if you choose to enter one. It is optional.
- Timestamps for when lists and items are created and changed.
What is not collected
- No email address, password, or phone number.
- No location data.
- No contacts, photos, or files.
- No advertising identifiers, and no third-party analytics or tracking.
- Nothing is sold or shared with advertisers. There are no adverts in Khass.
Camera
The camera is used for one purpose: reading the QR code of a list you want to join. It is requested only when you tap Scan QR code, never when the app opens. Frames are decoded on your device to read the six-character code. No photo or video is recorded, saved, or transmitted.
Who can see your lists
A list is visible to its members. Anyone who has a list's six-character share code, whether typed or scanned from its QR code, can join that list and see its contents and its members' display names. Treat a share code like a key: only give it to people you want on the list. A list's contents are not public and cannot be found without its code.
Where data is stored
List data is stored using Supabase, which hosts the database on infrastructure in Europe. Data is transmitted over an encrypted connection. Access is restricted at the database level so that a person can only read lists they are a member of.
Deleting your data
You control this from inside the app:
- Leave a list — removes your membership and your display name from that list. The list continues to exist for its other members.
- Delete a list — available to the person who created it. This permanently removes the list and all of its items for everyone.
- Delete all your data — under Settings on the home screen. This removes your anonymous account, every list only you were on, and your name from every list you shared. Lists you shared with other people stay with them, and are passed to whoever joined first. This cannot be undone.
You do not need to contact anyone to delete your data, but if you have a question about it you can reach us at the address below.
Children
Khass is not directed at children and does not knowingly collect data from them.
Changes
If this policy changes, the date at the top of this page will be updated. Material changes will also be noted in the app's release notes.
Contact
Questions about this policy or a data request: contact@willowcy.com