Privacy Policy

Last updated: 18 October 2026

We understand that protecting your personal information is important. This Privacy Policy sets out our commitment to protecting the privacy of personal information provided to us, or otherwise collected by us when providing our mobile application (our App, including the features within it that open as web pages) and our website at www.wiselist.app (together, our Services) to you. In this Privacy Policy we, us or our means WiseList Pty Ltd ABN 86 625 148 496.

Types of information

Personal information: is information or an opinion, whether true or not and whether recorded in a material form or not, about an individual who is identified or reasonably identifiable.

Sensitive information: is a sub-set of personal information that is given a higher level of protection. Sensitive information means information relating to your racial or ethnic origin, political opinions, religion, trade union or other professional associations or memberships, philosophical beliefs, sexual orientation or practices, criminal records, health information or biometric information.

The information we collect

Personal information: The types of personal information we may collect about you include:

• your name;
• your contact details, including email address and telephone number;
• any delivery address you saved in our App and records of any orders you placed when WiseList offered a delivery service (we no longer offer one);
• your gender;
• your age and/or date of birth;
• your payment details, such as records of your purchases and subscriptions and the email address you enter at checkout (your card number is entered with our third party payment processors, such as Apple, Google or Stripe, and is not passed to us);
• your preferences and/or opinions;
• information you provide to us through customer surveys;
• details of products and services we have provided to you and/or that you have enquired about, and our response to you;
• your browser session and geo-location data, device and network information, statistics on page views and sessions, acquisition sources, search queries and/or browsing behaviour;
• information about your device, including its operating system and version, the version of our App you use and the token used to send push notifications to your device;
• information about your access and use of our Services, including through the use of Internet cookies, your communications with our online Services, the type of browser you are using, the type of operating system you are using and the domain name of your Internet service provider;
• your postcode, suburb and country;
• your profile details, such as your profile photo and bio, and, if you log in with Apple or Facebook, the account identifier and sign-in token we receive from them;
• the content you create or save in our Services, such as grocery lists, Fridge & Pantry items and use-by dates, saved recipes, meal plans, bills and reminders, watched products, receipts you scan, notes, and posts and comments;
• photos you upload, such as photos of receipts, bills, recipes, product barcodes and packaging, your profile photo and photos in posts;
• dietary, allergy or health information that you choose to give us, for example in Meal Plan (see ‘Sensitive information’ below);
• information about your household, such as the members of your household in our App and, if you give it to us, the number of adults, children and pets in your household, any dietary preference for your household (such as vegetarian or vegan) and your shopping budget;
• if you use Build My Shop (which plans your weekly shop), a weekly record of the items on your grocery list and in your Fridge & Pantry, and the baskets it builds for you;
• information about your household bills and services, such as the providers you use, bill amounts and due dates, and your answers to our questions about them (for example, whether you rent or own your home and when your insurance is due for renewal);
• loyalty card numbers and fuel voucher cards that you save in our Services;
• if you claim a reward offered with one of our partners, your full name, the reference number for the service you signed up for and the reward you choose;
• records of the links to our partners that you follow from our Services, and of the emails and notifications we send you;
• the addresses of the pages you visit when you open a partner’s or other website inside our App;
• messages and feedback you send us, including through the contact form on our website;
• additional personal information that you provide to us, directly or indirectly, through your use of our Services, associated applications, associated social media platforms and/or accounts from which you permit us to collect information; and
• any other personal information requested by us and/or provided by you or a third party.

Sensitive information: Some features of our Services let you tell us about dietary needs, allergies or health goals, for example the diet options, the ‘Anything to avoid’ box and the goals box in Meal Plan. This may be health information, which is sensitive information. Giving it is optional. If you choose to give it, you consent to us collecting, using and disclosing it (including to our artificial intelligence service providers) to provide those features, as set out in clause 13.1 of our Terms and Conditions. We store it with your meal plans. We also keep a record, linked to your account, of the diet options you chose and the general kind of request you made (for example, an allergy or a cholesterol goal), so that we can understand and improve how these features are used. Receipts, bills and other photos or text you give us may also contain health information, for example the items on a pharmacy receipt or a medical bill. If you choose to give us such content, you consent to us collecting and using the health information in it in the same way as the rest of that content, as described in this Privacy Policy (for example, we keep the items read from a receipt you save). If at any time we need to collect other sensitive information about you, unless otherwise permitted by law, we will first obtain your consent and we will only use it as required or authorised by law.

How we collect personal information

We collect personal information in a variety of ways, including:

• Directly: We collect personal information which you directly provide to us, including when you download our mobile application, register for an account, use the features of our Services (for example, when you create a list, scan a receipt or upload a photo), make a purchase, through the ‘contact us’ or feedback forms on our mobile application or website or when you request our assistance via our mobile application, email or over the telephone.
• Indirectly: We may collect personal information which you indirectly provide to us while interacting with us, such as when you use our mobile application, in emails, over the telephone and in your online enquiries.
• Automatically: When you use our Services, we record information about how you use them, such as the features you open and the actions you take, linked to your account, and our servers record technical information such as your IP address. Our App also includes Google Firebase Analytics, which may record information such as the screens you view, and our Android app also sends crash reports to Google (Firebase Crashlytics). Software from Meta (Facebook) in our App may also send Meta information about your device and your use of our App (see ‘Our main service providers’ below). See the “Cookies and similar technologies” section below for more detail on the use of cookies and similar technologies.
• From third parties: We collect personal information from third parties, such as Apple or Facebook when you use them to log in, Apple, Google or Stripe when you make a purchase, and other users, for example when a member of your household invites you or shares a list with you.

Collection and use of personal information

Personal information: We may collect, hold, use and disclose personal information for the following purposes:

• to enable you to access and use our Services, including to provide you with a login;
• to provide our Services to you, including to show prices and specials for your area, to keep your lists and other content, to send you reminders and notifications about your lists, items and bills, and to process any refunds;
• to enable you to access and use our associated applications;
• to contact and communicate with you about our Services;
• for internal record keeping, administrative, invoicing and billing purposes;
• for analytics, market research and business development, including to operate and improve our Services, associated applications;
• to run promotions, competitions and/or offer additional benefits to you;
• for advertising and marketing, including to send you promotional information about our products and services and information that we consider may be of interest to you;
• to use artificial intelligence to provide features of our Services (see ‘Artificial intelligence’ below);
• to share information with members of your household (some of it, such as meal plans, by default) and, when you choose to, with other users (see ‘Sharing with your household’ and ‘Posts and your profile’ below);
• if you claim a reward offered with one of our partners, to check and provide your reward;
• if you give us your date of birth, to help avoid showing alcohol and other age-restricted products to users under 18, and to work out your age for our comparisons of bills and services;
• to keep our Services and your account secure and to prevent misuse;
• to comply with our legal obligations and resolve any disputes that we may have;
• if you have applied for employment with us; to consider your employment application; and
• if otherwise required or authorised by law.

Artificial intelligence

Some features of our Services use artificial intelligence to produce content, such as meal plans, meal ideas, recipes imported from links, text or photos, lists, suggested use-by dates and details read from photos of receipts and bills (see clause 8.3 of our Terms and Conditions). To provide these features, we send the information each feature needs to our artificial intelligence service providers, which are currently mainly Google (Gemini, and Cloud Vision for reading text in photos). For example:

• Meal Plan: your plan settings, including any diet options, things to avoid and goals you enter, your budget and the names of items in your Fridge & Pantry;
• Use It Up and suggested use-by dates: the names and quantities of your Fridge & Pantry items and how soon they expire;
• receipt and bill scanning: the photos you take and the text read from them;
• recipe imports: the link, text or photos you give us, and the captions, text, images and video audio of the recipe you link to (the audio of a video may be transcribed by OpenAI);
• lists, meal ideas and notes: what you type, such as a request for a list, a meal idea or a note; and
• savings tips: the items on your grocery list.

When you import a recipe from a link, our servers fetch the content from the website concerned (for example, Instagram or TikTok). Any video is downloaded temporarily and deleted after it has been processed.

Photos you upload

You can add photos in our App, for example of receipts, bills, recipes, product barcodes and packaging, your profile and posts. We use them to provide the feature concerned.

Photos of receipts and recipes are sent to Google to read the text and are not stored by us after they have been read. When you save a receipt, we keep the details read from it, such as the store and its location, the date, the items and prices, and the text of the receipt, after taking steps to remove card, payment and loyalty details from that text. If a receipt scan does not work, we may keep the text read from the photo (after taking the same steps) and what our artificial intelligence made of it, linked to your account, for about 30 days, so that we can work out what went wrong.

Other photos, such as photos of bills, photos you send to help us add a product, your profile photo and photos in posts, are stored in our file storage with Amazon Web Services in Sydney. Bill photos are also read by Google’s artificial intelligence to suggest the bill’s details. We do not currently delete these photos automatically, including when you delete the item they relate to or remove your account. Bill photos are not currently linked to your account, so we may not be able to find a particular bill photo to give you a copy of it or to delete it. If you want another photo deleted, please contact us before you delete the item it relates to or remove your account, because afterwards we may not be able to find it.

Sharing with your household

If you create or join a household in our App, the members of your household can see each other’s name and profile photo and share your grocery list and any other lists you choose to share. If you share an invite link, anyone with a WiseList account who has the link while it is valid (currently up to 7 days) can see your name, your profile photo and how many people are in your household, and can join your household straight away without further approval. They will then see the information shared with your household. When someone is invited by phone number or email address, they will see the name, profile photo and login phone number or email address (or Facebook account) of the person who leads the household. When you invite someone by phone number or email address, our App may show you whether they already have a WiseList account.

Meal plans are shared with your household by default. Household members can see the meals in a shared plan, but not the diet options, things to avoid or goals you entered. Meals from a shared plan may also appear, with your name, on your household members’ App home screen.

Fridge & Pantry sharing is off by default. If you turn it on, the people in your household at that time can see the items in your Fridge & Pantry and can set a use-by date, mark an item as opened or remove it. Someone who joins your household later cannot see your items unless you turn sharing on again. Sharing with a person ends when you or they leave or are removed from the household.

Posts and your profile

If you publish a post in our App, or comment on or like a post, other users of our App can see it together with your name and profile photo, and can view your profile (including your bio and posts) and follow you. A post may also be seen by anyone a user shares a link to it with. You can choose to allow only your followers to comment on your posts.

Disclosure of personal information to third parties

We may disclose personal information to:

• third party service providers for the purpose of enabling them to provide their services, to us, including (without limitation) IT service providers, data storage, web-hosting and server providers, artificial intelligence service providers, analytics providers, email and SMS providers, maintenance or problem-solving providers, marketing or advertising providers, professional advisors and payment systems operators;
• our employees, contractors and/or related entities;
• our existing or potential agents or business partners;
• sponsors or promoters of any promotions or competition we run;
• members of your household (some information, such as meal plans, is shared with them by default) and other users of our Services, where you choose to share information with them, and, when someone invites you by phone number or email address, whether you have a WiseList account (see ‘Sharing with your household’ and ‘Posts and your profile’ above);
• anyone to whom our business or assets (or any part of them) are, or may (in good faith) be, transferred;
• courts, tribunals and regulatory authorities, in the event you fail to pay for services we have provided to you;
• courts, tribunals, regulatory authorities and law enforcement officers, as required or authorised by law, in connection with any actual or prospective legal proceedings, or in order to establish, exercise or defend our legal rights;
• third parties to collect and process data, such as Google Firebase Analytics in our App (To find out how Google uses data when you use third party websites or applications, please see www.google.com/policies/privacy/partners/ or any other URL Google may use from time to time), Apple Analytics (To find out how Apple uses data please see https://support.apple.com/en-us/HT210682) or other relevant analytics businesses; and
• any other third parties as required or permitted by law, such as where we receive a subpoena.

Our main service providers: The main service providers that currently receive personal information from us include:

• Google, which hosts our servers (Google Cloud), provides artificial intelligence and text recognition (Gemini and Cloud Vision), sends push notifications and provides analytics and crash reporting in our App (Firebase), and provides the fonts used on our website and in our App’s web pages (Google Fonts), videos on some pages of our website (YouTube) and spam protection for our website’s contact form (reCAPTCHA);
• Amazon Web Services, which stores photos you upload and sends our SMS sign-in codes and automated emails;
• Microsoft, which hosts our email, including messages you send to Support@WiseList.app and through our website’s contact form;
• Apple, Google and Stripe, which process payments when you buy through the App Store, Google Play or Stripe (for example, a one-off WiseList+ Lifetime purchase);
• Apple, if you use it to log in;
• Meta (Facebook), if you use it to log in. Meta’s software in our App also contacts Meta when the App starts, which gives Meta your IP address and some information about your device and our App, and in our Android app it may also send Meta information about when the App is installed and opened;
• EmailOctopus, which sends some of our emails; and
• OpenAI, which may be used to transcribe the audio of recipe videos you import.

Overseas disclosure: Where we disclose your personal information to third parties listed above, these third parties may store, transfer or access personal information outside of Australia. Our App and website run on servers hosted with Google Cloud in Sydney, Australia, and the photos you upload that we keep are stored with Amazon Web Services in Sydney. However, some of our service providers, including Google (for artificial intelligence, text recognition, push notifications, analytics and crash reporting, and the fonts, videos and spam protection on our website), Apple, Meta, Stripe, EmailOctopus and OpenAI, are likely to process personal information outside Australia, including in the United States, the United Kingdom and the European Union (for example, Ireland), and may also do so in other countries where they or their own service providers operate. Microsoft, which hosts our email, may also do so, as may the services that provide fonts, scripts and videos on our website (see ‘Cookies and similar technologies’ below).

We will only disclose your personal information to countries with laws which protect your personal information in a way which is substantially similar to the Australian Privacy Principles or we will take such steps as are reasonable in the circumstances to protect your personal information in accordance with the Australian Privacy Principles.

Your rights and controlling your personal information

Your choice: Please read this Privacy Policy carefully. If you provide personal information to us, you understand we will collect, hold, use and disclose your personal information in accordance with this Privacy Policy. You do not have to provide personal information to us, however, if you do not, it may affect our ability to provide our Services to you and your use of our Services.

Information from third parties: If we receive personal information about you from a third party, we will protect it as set out in this Privacy Policy. If you are a third party providing personal information about somebody else, you represent and warrant that you have such person’s consent to provide the personal information to us.

Restrict and unsubscribe: To object to processing for direct marketing/unsubscribe from our email database or opt-out of communications (including marketing communications), please contact us using the details below or opt-out using the opt-out facilities provided in the communication. You can turn off push notifications at any time in your device’s settings.

Access: You may request access to the personal information that we hold about you. To request access, please contact us using the details below. An administrative fee may be payable for the provision of such information. Please note, in some situations, we may be legally permitted to withhold access to your personal information.

You can view and update some of your information yourself in the Profile section of our App, such as your name, postcode, country and date of birth. To change the email address or phone number linked to your account, please contact us.

Correction: If you believe that any information we hold about you is inaccurate, out of date, incomplete, irrelevant or misleading, please contact us using the details below. We will take reasonable steps to promptly correct any information found to be inaccurate, out of date, incomplete, irrelevant or misleading. Please note, in some situations, we may be legally permitted to not correct your personal information.

Complaints: If you wish to make a complaint, please contact us using the details below and provide us with full details of the complaint. We will promptly investigate your complaint and respond to you, in writing, setting out the outcome of our investigation and the steps we will take in response to your complaint. You also have the right to contact the relevant privacy authority. In Australia, this is the Office of the Australian Information Commissioner (OAIC), which you can contact at www.oaic.gov.au.

Storage and security

We are committed to ensuring that the personal information we collect is secure. We take steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification and disclosure.

We hold personal information electronically, on servers and in databases and file storage provided to us by our hosting and cloud service providers (currently mainly Google Cloud and Amazon Web Services; see ‘Overseas disclosure’ above). Some information is also kept on your own device by our App.

While we are committed to security, we cannot guarantee the security of any information that is transmitted to or by us over the Internet. The transmission and exchange of information is carried out at your own risk.

Cookies and similar technologies

We may use cookies on our online Services from time to time. Cookies are text files placed in your computer’s browser to store your preferences. Cookies, by themselves, do not tell us your email address or other personally identifiable information. We do not currently use cookies on our website for advertising or retargeting, but some of the services described below may set their own cookies. If and when you choose to provide our online Services with personal information, this information may be linked to the data stored in the cookie.

Our website’s contact form uses Google reCAPTCHA to help protect it from spam. reCAPTCHA collects information about your device and how you use the page, which is sent to Google, and Google may set cookies. Some pages of our website include videos from YouTube; when these load, Google may set cookies, including cookies it uses for advertising. Our website also loads fonts, icons and scripts from third-party services, such as Google Fonts, Cloudflare (cdnjs), jsDelivr and Amazon Web Services, and the parts of our App that open as web pages load fonts from Google Fonts. These services receive your IP address and information about your browser.

Parts of our App open as web pages. These pages store some information on your device using your browser’s storage, such as your login session and some of your settings and recent content (for example, your latest meal plan), so that they work as expected.

You can block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our online Services.

Data from Social Accounts

If you connect your WiseList account to a social network account, such as Facebook, we will collect data about you from the social network. We will do this in accordance with the privacy settings you have on that social network.

The data we may receive includes your name, user ID, profile picture, email address and any other information you agree to share. We currently use your name to set up your account, and keep your Facebook user ID and the sign-in token Facebook gives us.

We use this data to help create your public profile on our Service, and help you share your experiences on our Service with your friends, followers or contacts on the social network you have connected your WiseList account to.

If you agree, we may also use your data to give you updates on the social network which might be of interest to you or any promotion you are taking part in. We won’t post to your social network or friends, followers or contacts without your permission.

App login

When you create an account and log in, we collect the phone number or email address you log in with, the one-time codes we send you, any password set on your account (for example, on an older account), and information about your device. It is in our legitimate interest to use this data to keep your account secure.

We send one-time codes by SMS, using Amazon Web Services, or by email, and we keep a record of the codes we send and the phone number or email address each was sent to. If you log in with Apple, Apple may give us your name, your email address (which may be a private relay address) and an identifier for your Apple account. We keep that identifier and the sign-in token Apple gives us, and ask you to confirm your name and email address in our App.

If you decide to log-in using a social network, such as Facebook sign-in, or any other third party log-in methods, we are not given your password or other account login details for those social networks or other third party services. However, we may receive some information from those third party services depending on the third party account you choose to use to log in. For example, depending upon the third party service you choose to use and your settings on that service, we may receive your email address registered with that third party service.

You should keep access to the phone number or email account you log in with safe, and not share your one-time codes or any password with anyone else. You are responsible for actions that are taken using your account. If you think someone has access to your account, you should tell us immediately and, if your account has a password, change it.

Children

Under our Terms and Conditions, if you are under 18 you may only use our Services with permission from your parent or legal guardian. Giving us your date of birth is optional. If you add it to your profile, we use it to help avoid showing alcohol and other age-restricted products to users under 18, and to work out your age for our comparisons of bills and services. If you are a parent or guardian and believe your child has given us personal information without your permission, please contact us.

How long we keep information

How long we keep personal information depends on the kind of information and why we hold it. Some information currently has a set limit:

• we keep the full details of your 20 most recent meal plans (including any diet options, things to avoid and goals) and delete older ones, but the names and dates of the meals in older plans currently remain in our records;
• if a receipt scan does not work, we currently keep the text read from it and what our artificial intelligence made of it for about 30 days (see ‘Photos you upload’ above); and
• photos of receipts and recipes are not kept after they have been read (see ‘Photos you upload’ above).

Most other personal information, including other photos you upload, the content you save in our Services (such as the weekly baskets Build My Shop builds for you) and records of how you use our Services, does not currently have a set retention period. You can delete some content yourself in our App or by removing your account, but this does not delete everything, including photos and records of how you used our Services. To ask us to delete that information, please contact us (see ‘Deletion of Personal Information’ below).

Deletion of Personal Information

You have the right to request the deletion of personal information that we collect or maintain about you. To submit a request to delete personal information, please submit an email request to Support@WiseList.app and please specify in your request the details you would like to have deleted.

We will ask that you provide certain information to verify your identity. The information that we ask you to provide to verify your identity will depend on your prior interactions with us and the sensitivity of the personal data at issue. We will respond to your request in accordance with the Privacy Act 1988 (Cth). If we deny your request, we will explain why.

You can also remove your account yourself, using ‘Remove account’ in the Help & Support section of our App. This is designed to delete your account profile and much of the information linked to it, including your grocery lists, bills, loyalty and fuel voucher cards, posts, comments, feedback, messages in your App inbox, saved delivery addresses and past orders, and household membership, and the link to any Apple or Facebook account you log in with. Some information is not currently deleted when you remove your account, for example your Fridge & Pantry items, saved recipes and custom lists, the meal plans you make in Meal Plan (including the list of meals shown on your App home screen), the receipts you save, your Build My Shop details, your answers to our questions about your bills, any reward claims, photos you have uploaded, and records of purchases and of how you used our Services. To ask us to delete that information too, please email us as described above. If you find information that has not been deleted after you remove your account, please email us. We may need to keep some information where the law requires or allows us to, for example records of payments.

Links to partners and other websites

Our Services may contain links to other websites. We do not have any control over those websites and we are not responsible for the protection and privacy of any personal information which you provide whilst visiting those websites. Those websites are not governed by this Privacy Policy.

Some links in our Services take you to our partners, such as comparison services, brokers and providers for energy, broadband, insurance and loans (see clause 9 of our Terms and Conditions). When you follow one of these links, we may record that you followed it, linked to your account. Some of these links pass through an affiliate tracking service used by the partner, which records the click. We do not add your name, email address or phone number to these links, but the partner’s website will receive information from your browser or device in the usual way, and the partner’s own privacy policy applies to anything you give them. If you open a partner’s or other website inside our App, we record the addresses of the pages you visit on that website, linked to your account, to work out whether you signed up with that partner and to decide which emails we send you. If you claim a reward offered with a partner, we use the details you give us to check and provide your reward, and we may share them with that partner for that purpose.

If you send your list to a store’s online cart (see clause 5.1 of our Terms and Conditions), the store receives the products and quantities on your list, and the store’s own privacy policy applies.

Amendments

We may, at any time and at our discretion, vary this Privacy Policy by publishing the amended Privacy Policy on our website. We recommend you check our website regularly to ensure you are aware of our current Privacy Policy.

APPENDIX A

a. a reference to ‘personal data’ shall also mean ‘personal information’ as defined in the Privacy Act 1988 (Cth);

b. a reference to ‘sensitive information’ has the same meaning given to it in the Privacy Act 1988 (Cth); and

c. if we collect, use or disclose any information from you in accordance with this Privacy Policy that is also sensitive information (such as dietary, allergy or health information you choose to give us), then we will do so only with your consent (which you give when you choose to provide it for the feature concerned) or as otherwise permitted by law. We will not use your sensitive information for direct marketing unless you have consented to that use. We will not use or disclose your sensitive information for any other purpose unless the purpose is directly related to the primary purpose for which your sensitive information was collected (for example, understanding how the feature for which you gave it is used, so that we can improve it).