1. Who we are
Sorted (“Sorted,” the “app,” “we,” “us,” or “our”) is operated by SkylonTech Inc., a company based in Ontario, Canada. We are the controller responsible for your personal information under this policy.
If you have any questions about this policy or how we handle your data, contact us at support@skylontech.ca.
2. Scope and who can use Sorted
This policy applies to the Sorted mobile apps for iOS and Android, this website (sorted.skylontech.ca), and the related services we provide (together, the “Services”).
Sorted is intended for adults. You must be at least 18 years old (or the age of majority where you live, if higher) to create an account and use the Services. We do not knowingly direct the Services to, or collect personal information from, anyone under 18. See Children’s privacy.
3. Information we collect
Information you give us
- Account information. When you sign up with an email address we collect that address and a display name. If you sign in with Google, we receive your name, email address and profile photo from Google. If you sign in with Apple, we receive your name and email address from Apple; if you choose Apple’s “Hide My Email,” we receive the relay address Apple gives us instead. You can change your display name and add or remove a profile photo at any time. Profile photos are stored on our own server.
- Your lists. The lists you create and the items on them: names, quantities, notes, categories, icons and whether an item is checked off.
- People you share with. When you share a list with a link or QR code, we create a link for that list. Anyone who has it can join the list until it expires after 7 days or you stop it, and we keep a record of the link for 30 days after it ends. When you invite one of your contacts, we use the email address stored for them so the invitation reaches them. Once you have shared with someone, the app keeps a contact entry for them (display name, email address and photo) under your profile, and an entry for you under theirs, so you can share with each other again without retyping an address.
- Feedback. If you send us feedback or a bug report from the app, we receive your message, your display name, the email address to reply to, and the app version, platform and device model, so we can reproduce the problem.
- Premium purchases. If you subscribe to Sorted Premium, the payment is handled by Google Play or the Apple App Store. We never see your card number. See Premium and billing for what we do receive.
Information created as you use Sorted
- Buying history. When an item is checked off on a list, we record what was bought, when, in which category, and how many. On a shared list this is recorded for every member of the list, not only the person who ticked the item, because the shopping was done for the household. Your history powers the Insights tab (what you buy and how often), the “Running low” reminders, and the recipe suggestions. It is private to you and is not shown to other users.
- Categories and icons. The category and icon an item gets are produced by AI from the words you typed. See How we use AI.
- Recipe ideas and favourites. After a shopping trip, Sorted can suggest recipes based on what was bought. We keep which suggestions you favourited.
- Preferences. Your settings, such as whether recipe ideas and “Running low” reminders are on, which shared lists you have muted, and category corrections you have made. We also keep your device’s time zone so reminders arrive at a sensible hour.
- Notifications. If you allow notifications, we store a device token so we can send you alerts: a list shared with you, someone joining your list, a “Running low” reminder, recipe ideas being ready, and notices about your Premium subscription.
- Analytics events. We use Google Firebase Analytics to understand how the app is used overall, for example that a purchase was recorded or a list was shared. Item names, list names, display names and email addresses are never sent to analytics.
- Diagnostics. If the app crashes we use Firebase Crashlytics to collect a crash report and basic device state so we can fix the problem. The same rule applies: no item names, list names, names or email addresses.
Information collected automatically
Like most apps, we and our providers automatically collect technical information such as your IP address, device and operating-system type, app version, and log and timestamp data. This is used to operate, secure and improve the Services and is kept for a limited time. Every request from the app to our server also carries a device-integrity check (Google Play Integrity on Android, Apple App Attest on iOS) that confirms the request comes from a genuine copy of Sorted. The app also fetches a small configuration file (Firebase Remote Config) that lets us switch features on and off without an update.
4. How we use your information
We use the information described above to:
- create and secure your account and sign you in;
- store and sync your lists between your devices and the people you share with;
- sort your items into categories, draw icons, and suggest recipes (see How we use AI);
- build your Insights, “Running low” reminders and recipe suggestions from your buying history;
- send you invitations, account emails and the notifications you have allowed;
- run your Premium subscription and, if you share it, connect it to the people you share with;
- answer your feedback and support requests;
- understand overall usage, fix crashes and improve the app;
- prevent abuse and protect the Services and our users; and
- comply with the law.
We do not use your lists, your buying history or your messages to build advertising profiles, and we do not sell any of it.
5. How we use AI
Three features in Sorted use AI models run by other companies. In every case the request goes from our server, not from your phone, and it never includes your name, email address or account identifier.
- Categories. When you add an item we have not seen before, the item name (and the list name, for context) is sent to a text model through OpenRouter to pick a category. The answer is saved in a shared dictionary keyed to the words, so the next person who types “oat milk” gets the same category without another AI call. Nothing in that dictionary says who typed the words first.
- Icons. List and item icons are drawn by a Google Gemini image model from the item or list name. Icons are cached and shared the same way as categories.
- Recipe ideas. After a shopping trip, the names and categories of the items that were bought (not who bought them) are sent to a text model through OpenRouter to suggest recipes, and a recipe photo is drawn by Gemini. The resulting recipes go into a shared catalogue that any Sorted user may be shown; the catalogue contains the recipe, not your list or your name. You can turn recipe ideas off in Profile, and nothing is sent for lists where the feature is off.
AI output can be wrong. Categories and icons are suggestions you can change. Recipe ideas are not dietary or medical advice; check ingredients yourself if you have allergies or restrictions.
7. Legal bases for processing (EEA, UK, and similar regions)
If you are in the European Economic Area, the United Kingdom, or a region with similar laws, we rely on the following legal bases:
- Performance of a contract - to provide the account, list sync, categories and icons, buying history and Insights, recipe ideas, notifications you have allowed, and the Premium subscription you have bought.
- Legitimate interests - to secure the Services, verify that requests come from a genuine copy of the app, prevent abuse, understand overall usage, fix crashes and improve the app, where those interests are not overridden by your rights.
- Consent - for push notifications and any optional processing that requires it. You can withdraw consent at any time in the app or your device settings.
- Legal obligation - where we must keep or process information to comply with applicable law, including records of privacy requests you make.
9. Where your data is stored
- Your account, lists and live sync are stored by Google in its North American multi-region data centres, which are in the United States.
- Buying history, Insights, recipes, Premium records and profile photos are stored on our own server, hosted by Contabo in the European Union.
- Email is sent through ZeptoMail’s Canadian service.
- AI requests are processed by OpenRouter and Google in the United States.
See International data transfers for the safeguards we rely on when data leaves your country.
10. Advertising
Sorted does not show ads and contains no advertising software. If we ever add advertising, we will update this policy first, tell you in the app before it appears, and ask for your consent where the law requires it.
11. Data retention and deletion
We keep your personal information for as long as your account is active. Your lists and your buying history are kept for the life of your account, because that is what Insights and “Running low” are built from. When you no longer want to use Sorted, you can:
- Delete your account from Profile in the app. Deletion is immediate and permanent. It removes your profile and photo, your lists, your buying history and Insights, your recipe favourites, your contacts and your entry in other people’s contacts, pending invitations, your Premium records and shares, and your sign-in. A shared list that still has other members is handed to one of them rather than destroyed; lists you only joined are simply left. We send one goodbye email to confirm.
- Ask us to delete it by emailing support@skylontech.ca from the email address on your account, for example if you can no longer sign in. See Your privacy rights for how we verify requests.
After deletion, a few things remain for a limited time:
- Backups. Our server is backed up daily and database backups are kept for seven days, after which deleted data is gone from backups too.
- Email records. A record of each email we sent you (address, subject and delivery result) is kept for 30 days for troubleshooting. Records of the Premium notices we sent are kept for up to 13 months so we never send the same one twice.
- Support email. Feedback reports stored in the app are deleted with your account. Emails you exchanged with support, including feedback forwarded to our support inbox, are kept for up to 12 months after they are handled.
- Shared history. If you checked items off on a list that other people remain members of, the fact that an item was bought stays in their history. It no longer carries your name.
- Legal. We may keep limited information where required for legal, security or fraud-prevention purposes, including the record of your deletion request.
12. Your privacy rights
Depending on where you live, you have some or all of the following rights over your personal information:
- access a copy of the information we hold about you;
- correct information that is inaccurate or incomplete;
- delete your information;
- restrict or object to certain processing;
- receive your information in a portable, machine-readable format; and
- withdraw consent where processing is based on consent.
How to exercise them
Much of this you can do directly in the app: edit your profile, edit or delete lists, turn features off, and delete your account. For a copy of your data, or for anything else, email support@skylontech.ca from the email address on your account. If you write from a different address, we will ask you to confirm from the account address, or to answer questions only the account owner would know, before we act. We respond within 30 days. A copy of your data is delivered as a set of plain JSON files with a short guide to what each one contains. We will not discriminate against you for exercising your rights.
Canada (PIPEDA and provincial laws)
You may access and challenge the accuracy of your personal information, and you may complain to the Office of the Privacy Commissioner of Canada or your provincial commissioner.
European Economic Area & UK (GDPR)
You may lodge a complaint with your local data-protection supervisory authority.
California (CCPA/CPRA)
You have the right to know, delete, and correct your personal information, and to opt out of the “sale” or “sharing” of personal information. We do not sell or share your personal information as those terms are defined in California law.
13. International data transfers
We are a Canadian company and our providers operate in Canada, the United States and the European Union, as described in Where your data is stored. These countries may have data-protection laws that differ from those in your country.
Where we transfer personal information out of the EEA, the UK, or other regions that restrict transfers, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an applicable adequacy decision.
14. How we protect your information
We use technical and organizational measures to protect your information: encryption in transit everywhere, encryption at rest with our providers, sign-in required for every request, database rules that let you read only the lists you belong to, device-integrity checks on every request to our server, and a server that is reachable for administration only over a private network. No method of transmission or storage is completely secure, so we cannot guarantee absolute security - but we work to protect your data and to respond quickly if a problem arises.
15. Children's privacy
Sorted is intended for adults (18+) and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, please contact support@skylontech.ca and we will delete it.
16. This website
sorted.skylontech.ca sets no cookies and runs no analytics. Our web server keeps ordinary access logs (IP address, page requested, time) for a short period for security. The site loads its typefaces from Google Fonts, which means Google receives your IP address when a page loads. The pages that finish an email verification or password reset, and the page that opens a shared link in the app, process the one-time code in the link and nothing else.
17. Changes to this policy
We may update this policy from time to time. Each version has a number and an effective date, shown at the top of this page, and earlier versions stay available. If a change affects what we collect or how we use it, we will tell you in the app and ask you to review and accept the new version before you continue; for minor wording changes we will show you a notice. We keep a record of which version you accepted and when.
18. Contact us
If you have questions, requests, or concerns about this policy or your personal information, contact us:
SkylonTech Inc.
Ontario, Canada
support@skylontech.ca