Privacy policy
Last updated: 8 November 2026
The short version
- Your shared lists are seen by you and your partner. Your private lists are seen by you only.
- No ads, no tracking, no third-party analytics, and we never sell your data.
- We count things like "added an item", never what the item was.
- Email hello@bayong.app and we'll delete your data within 30 days.
Bayong is a shared grocery list for couples, made by Kim Marasigan in the Philippines. This policy explains what Bayong stores, why, and who can see it. Questions: hello@bayong.app.
What we store
- Your email address, to sign you in. We email you a one-time code; there's no password.
- Your name and colour, so your partner can see who added what.
- Your profile picture, only if you add one. It's shrunk on your phone before upload.
- What you put in the app: lists, items, notes and links on items, prices if you add them, to-dos and their due dates, saved staples, and the aisles you choose. That's the app.
- Your phone's time zone, so your partner's alerts wait until your morning, and so your partner can see your local time.
- Your language setting (English or Filipino), so alerts arrive in your language.
- A notification token for your phone, to deliver the alerts you've turned on.
- Usage counts, such as "opened the app", "added an item" or "checked off an item". They never include the item's name or anything you typed. We use them to see whether Bayong is working for couples. They're linked to your account, not shared with anyone.
We don't collect your location, contacts, or health data, and there's no crash-reporting tool. Photos are read only when you choose a profile picture.
Who can see it
- Shared lists: you and your partner.
- Private lists: only you. This is enforced on our server, so your partner's phone never receives them.
- Your name, colour, picture and local time: you and your partner.
- Who did what: on shared lists, your partner sees who added and who checked off each item, and when (Profile → Bought history).
- An Ipabili link: anyone you send it to can see that list's name, its shared items with their notes and quantities, and the first names of you and anyone who checked items off, until the link expires or you turn it off. To check items off they type a name. That name is saved on the items they check, so you can see who did it, and in their own browser, so they don't have to type it again.
- Nobody else. We don't sell or rent your data, show ads, or use advertising or third-party analytics tools.
Services that handle data for us
| Service | What for |
|---|---|
| Supabase | Database, sign-in and picture storage, hosted in Singapore |
| Expo, Apple Push Notification service and Google Firebase Cloud Messaging (Android) | Delivering notifications. The alert text (a name, the list and item names) passes through them. |
| Brevo | Sending sign-in code emails |
| Cloudflare | Hosting this website and the Ipabili link page |
They handle data only to provide their service to Bayong. When someone opens an Ipabili link, their IP address is used to count requests per minute, to stop abuse. These counts hold nothing else and are cleared out automatically.
How long we keep it
- Your account data stays while you have an account.
- Deleted items and lists go to Recently deleted for 30 days so nothing is lost by accident. They stay stored after that; email us and we'll erase them for good.
- Notification delivery receipts are deleted after 7 days. A record of when alerts were sent (no content) stays with your account.
- A profile picture you replace stays stored until you ask us to erase it.
- Ipabili links stop working when they expire (at most 3 days) or when you turn them off.
Your choices and rights
You can turn each kind of alert on or off in Profile → Notifications, or turn them all off in your phone's Settings. You can remove your profile picture in Profile.
You can ask us to show you, correct or delete your data, including your whole account: email hello@bayong.app from the address you sign in with, and we'll do it within 30 days. Under the Philippine Data Privacy Act of 2012 (RA 10173) you can also contact the National Privacy Commission.
Children
Bayong isn't made for children under 13, and we don't knowingly collect their data.
This website
bayong.app has no cookies, no analytics and no tracking. Its fonts are served from this site, not from Google or anyone else.
Changes
If this policy changes, we'll update the date at the top, and tell you in the app if the change matters.