Molista Privacy Policy

At Molista, we respect your privacy and aim to collect and use only the minimum amount of data necessary to operate the app and provide its services.

Information We May Collect

• Account information, such as your name and email address.
• Google or Apple sign-in information if you choose to use either sign-in method.
• Spaces, shopping lists, grocery items, added items, and purchased items.
• Invitations and members participating in a shared space.
• Receipt information that you enter or extract from images.
• Technical error and crash information used to improve app stability.

Sign-In

Molista uses Supabase Authentication to manage accounts and sessions.

If you choose to sign in with Google or Apple, the authentication system provided by that service is used to complete the sign-in process. Molista does not receive your Google or Apple account password.

Shared Lists and Spaces

A Molista space can be shared with other members. Members of a space may be able to see grocery items, who added an item, who purchased it, its status, and related information.

Space data is not shared with users who are not authorized to access that space.

Voice Input

Molista provides voice-based grocery entry. Voice recognition is processed locally on the device using on-device speech recognition technologies. Molista does not upload voice recordings to its servers for speech recognition.

Some non-sensitive text corrections may be stored to improve product and grocery understanding, after applying safeguards intended to prevent personal or sensitive information from being shared.

Images and Receipts

Users may take or select a receipt image to extract receipt information. Images and text may be processed locally on the device using optical character recognition and image-processing technologies.

On supported devices, Molista may use on-device artificial intelligence capabilities to improve the interpretation and organization of text extracted from receipts. Receipt images are not sent to a cloud AI service for this purpose.

Molista does not use receipt images to train general-purpose artificial intelligence models. Extracted receipt information may be synchronized with your account or space to provide reports and price history.

Storage and Synchronization

Molista uses Supabase to store and synchronize account, space, shopping list, and related data. Access controls are applied so users may access only the data they are authorized to access.

Some information may also be stored locally on the device to support offline use and improve performance.

Speech and Receipt Processing Models

The app may download additional technical files when users choose to enable certain features, such as the Arabic speech recognition model or Arabic receipt-processing model.

These files may be downloaded from external storage services such as Cloudflare R2. They are technical application files used to operate features locally on the device and do not contain user data.

Crash Reporting

Molista uses Sentry to help identify technical errors and crashes and improve app stability.

Technical information may include:

• Device type and operating system.
• App version.
• Error or crash information.

We aim to avoid sending passwords, shopping list contents, or sensitive information in crash reports.

How We Use Information

We use information only to:

• Operate the application.
• Synchronize shopping lists and spaces.
• Manage accounts and invitations.
• Provide reports and price history.
• Improve app quality and stability.
• Prevent unauthorized use or abuse.

We do not sell user data to advertisers or other third parties.

Data Retention and Account Deletion

User data is retained while the account remains active or for as long as necessary to provide Molista services.

Users can delete their account directly from within the Molista app using the “Delete Account” option in account settings.

When an account is deleted:

• Personal account information, memberships, and user-specific data are deleted.
• Lists solely owned by the user are deleted if no other members remain.
• If a list is shared with other members, ownership is transferred to another member instead of deleting other users' data.
• Some shared records may remain in a de-identified form, such as displaying “Deleted Member”, to preserve the integrity of shared lists and reports.
• User-specific invitations and personal data are removed as part of the account deletion process.
• Local account data stored on the device, including session data and related local files, is removed.

Users may also request account deletion outside the app using the following page:

Delete Molista Account

We may retain a limited amount of information for a limited period where necessary for security, legal compliance, or abuse prevention. Once it is no longer required, the information will be deleted or de-identified.

Some information may remain in system backups for a limited period according to the technical retention cycle of the services we use.

Children

Molista is not designed to knowingly collect personal information from children below the legally permitted age for using digital services.

Security

We use reasonable technical and organizational safeguards to protect user data, including access controls, secure user sessions, and separation of account and space data.

However, no electronic storage or transmission method can be guaranteed to be 100% secure.

Third-Party Services

Molista may rely on third-party services, including:

• Google
• Apple
• Supabase
• Sentry
• Cloudflare

Information processed by these services may also be subject to their respective privacy policies.

Changes to This Privacy Policy

We may update this Privacy Policy when new features are introduced, improvements are made, or legal or regulatory requirements change. The “Last updated” date will be revised when material changes are made.

Contact Us

For privacy or data-related questions, contact us at:

Email: alhamad.84m@gmail.com