Privacy · Wren

The short version

Wren keeps what it needs to run your shopping lists: your account, your household, and the lists and items you add.
No ads, no tracking, no analytics, and nothing is sold or shared for marketing.
Wren runs on servers we operate ourselves. A few services handle specific jobs, listed below.
Write to [email protected] to get a copy of your data or to have it deleted.

Who we are

This policy covers hosted Wren: the Wren app for iPhone, the web app at app.shopwithwren.com, the sign-in pages at id.shopwithwren.com, and this website at shopwithwren.com. Hosted Wren is run by Matt Blum (“we”, “us”). If you use a Wren server that someone else runs (a self-hosted install), that person controls your data there and this policy does not apply to it.

What we collect

Your account

Email address and name. You give us these when you sign up. We use your email to sign you in and to send account emails, and your name so the people you share with know who added what.
Password. If you sign up with a password, it is stored only as a one-way hash. We never see or store the password itself.
Sign in with Apple or Google. If you choose one of these, Apple or Google tells us your name and email address (Apple may give us a private relay address instead). We don’t receive your Apple or Google password or anything else from those accounts.

Your household and lists

What you add: list names, items, quantities and notes, which stores an item belongs to, and when items are checked off.
Who did what: each change is recorded with who made it and when. This is what makes Undo, syncing between devices, and “deleted by” work.
Household members and invitations: who belongs to your household, and invitation links you create.
API keys you create for automations such as Home Assistant. Only a hash of each key is stored, plus its name and when it was last used.

Sign-in and security records

When you sign in, register, or reset a password, we record the time, the IP address and the browser or app it came from. We use this to protect accounts (for example, to slow down password guessing) and to investigate problems.
Our servers keep standard request logs (IP address, time, and what was requested) for a short time, for security and troubleshooting.

What we don’t collect

No advertising identifiers, no analytics or tracking scripts in the apps or on this site, no location, and no contacts. The iPhone app doesn’t include third-party SDKs that collect data.

How we use it

To run Wren: keep your lists in sync across your devices and with the people in your household.
To keep it secure: protect accounts, prevent abuse, and fix problems.
To contact you about your account: verification, password resets, invitations, and important changes to Wren or these policies. We don’t send marketing email.
To apply your plan’s limits (for example, how many lists a household can have).

We don’t sell your data, share it with advertisers, or use it to train AI models.

Who else touches your data

Wren, its database, its sign-in service and its mail server run on hardware we operate. A few outside services are involved:

Cloudflare sits in front of shopwithwren.com and its subdomains (the web app and sign-in pages) to deliver traffic and block attacks. Your requests pass through its network.
Apple and Google, only if you use Sign in with Apple or Google, or install the app through the App Store or TestFlight. Their own privacy policies cover what they collect.
People in your household see the lists you share, your name, and the changes you make.

We would only disclose data to anyone else if the law requires it, or to protect someone’s safety, and we would tell you if we’re allowed to.

How long we keep it

Your account and lists: for as long as you have an account.
Deleted items: they stay in Recently deleted for 30 days so you can restore them, then they are permanently removed. You can also delete one permanently straight away.
Sign-in and security records: up to 180 days.
Backups: we back up the database every night and keep backups for up to 13 months, so deleted data can remain in a backup until it ages out. Backups are only used to recover from a failure.

Your choices and rights

Access and correction: you can see and edit your lists in the app at any time. To correct your name or email, update it on your sign-in account page or ask us.
A copy of your data: ask and we’ll send you an export.
Deletion: ask and we’ll delete your account and, if you’re the only member, your household and its lists. Lists in a household you share stay with the remaining members.
Leaving a household: you can leave a household in the app at any time.

Write to [email protected] for any of these. We’ll reply within 30 days. Depending on where you live, you may have further rights under laws such as the GDPR or CCPA, and you can complain to your local data protection authority.

Children

Wren isn’t meant for children under 13, and we don’t knowingly collect data from them. If you think a child has signed up, let us know and we’ll delete the account.

Changes

If we change this policy in a way that matters, we’ll update the date at the top and tell you in the app or by email before the change takes effect.

Contact

Questions about privacy: [email protected].

Your lists are yours.Here’s what Wren keeps.