Privacy Policy

Effective 1 November 2026

RanOut is made by Laxman Pandey, an independent developer. This policy explains what the app stores, why, and what you can do about it. Questions go to support@ranout.app.

The short version

• Your data is encrypted in transit and at rest, but it is not end-to-end encrypted, so RanOut's administrator can access it.
• You can delete your account from the app's Settings at any time.

What is stored

• Email address, to send sign-in links and codes.
• Display name, shown to the members of your households.
• Household content: household names, members, items, notes, categories and purchase history.
• Device details: a random ID the app creates for each device you sign in on, the device platform (for example iOS), and a push notification token if you allow notifications.
• Sign-in history: the type and time of each sign-in event and the device ID, kept for one year.
• IP address, recorded in server logs with each request and used to limit repeated sign-in requests.

Who can see it

• Members of your household see that household's list and history, and each member's display name and email address.
• RanOut's administrator can access the servers and the data on them, for example to help with a problem you report, to keep the service secure, or when the law requires it.
• Service providers that run parts of RanOut:
  • Amazon Web Services hosts the servers and database in the United States and sends sign-in email.
  • Apple delivers push notifications, so Apple handles the notification text (for example, "Milk was added to your list").
  • ImprovMX forwards email sent to support@ranout.app.

How long it is kept

Your account details are kept until you delete your account. Household content, including items removed from the list, is kept while the household exists. Server logs are deleted after 14 days. They record each request and the IP address it came from, but not your list contents. If a sign-in email fails to send, the log also records the email address. Database backups are kept for up to 35 days, so deleted data disappears from backups within that time.

Deleting your account

Delete your account from the app's Settings. This removes your email address, display name, devices, sign-in history and household memberships, and any household where you are the only member. Items you added to a household that other people still share stay with that household, because they belong to its list. Copies in server logs and backups expire on the schedule above.

If you cannot open the app, email support@ranout.app from the address you sign in with to have the account deleted for you.

Children

RanOut is not directed at children under 13 and does not knowingly collect their information.

Changes

If this policy changes, the new version will be posted here with a new effective date.