Privacy Policy
Last updated August 9, 2026
Shortlist is a place-discovery app operated by From Salt. This policy explains what we collect, why, and what you can do about it. We have tried to write it in plain language rather than legal boilerplate.
What we collect
Account information. When you create an account we store your email address. If you sign up with a password, it is hashed by our authentication provider and we never see or store the password itself. If you sign in with Google, we receive your name, email address, and profile photo from Google.
Profile information. Your display name, username, and profile photo. Your username and display name are public — they appear wherever your lists and saved places are visible to others.
Things you save. The places you save, the status you give them, any personal notes you write, and the lists you create. Personal notes are private to you unless you share the list they belong to.
Connections. Who you are connected to on Shortlist, and pending connection requests.
Usage data. We use PostHog to understand how the app is used — screens visited, features used, and basic device and session information. This helps us find what is broken and what is confusing.
What we do with it
We use your information to run the product: to sign you in, to show your saved places and lists, to show you what the people you are connected to have recommended, and to rank what you see so that your friends' recommendations come first. We use usage data to improve the app.
We do not sell your personal information, and we do not use it for advertising.
Who else sees it
Other people on Shortlist. Your profile, and any list you set to a visibility beyond “Only me,” are visible to the people you have shared them with. You control this per list.
Service providers. We rely on a small number of companies to operate the product: Supabase (database, authentication, and file storage), Google (Maps and Places data), PostHog (product analytics), and Apple (app distribution). They process data on our behalf under their own terms.
Google Maps. Because we use Google Maps features and content, that use is also subject to the Google Maps End User Additional Terms of Service (opens in a new tab) and the Google Privacy Policy (opens in a new tab).
Legal requests. We may disclose information if we are legally required to.
Your choices
You can edit or remove your profile information from within the app at any time. You can delete your account, which removes your profile, your saved places and notes, and your lists.
If you would like a copy of your data, or want it deleted and cannot do it in the app, email us and we will handle it.
Keeping it secure
Data is encrypted in transit and at rest by our infrastructure providers, and access to your rows is enforced at the database level rather than only in the app. No system is perfectly secure, and we will not pretend otherwise — but we treat private notes and account details as private by design.
Children
Shortlist is not intended for anyone under 13, and we do not knowingly collect information from them.
Changes
If we change this policy in a way that materially affects you, we will update the date at the top and let you know in the app.
Contact
Questions about any of this: hello@fromsalt.com.