Privacy Policy

Last updated: 26 June 2026

Togetherkit (“Together”, “we”, “us”) is a free space for sharing lists — shopping lists, notes, date ideas, and more — with the people you choose. This policy explains what we collect, why, and the choices you have. We keep it short because we collect as little as we can.

Who runs this service

Togetherkit is an independent personal project operated by Kitikorn Rakhangthong. You can reach us any time at [email protected].

What we collect

• Your Google account basics. When you sign in with Google, we receive your email address, name, and profile photo. We use these to create your account, show who you are inside a shared space, and let your invited people recognise you. We do not receive your Google password.
• The content you create. The items, lists, notes, date ideas, wishlist entries, labels, and homespaces you add are stored so you and the people you invite can see them in real time.
• Basic usage analytics. We use Google Analytics to understand aggregate, anonymous usage (for example, how many people open a page). This is not tied to your identity.

How we use it

• To provide the core service: sign-in, syncing your shared spaces, and showing your content to the people you invite.
• To keep the service working and secure.
• To understand, in aggregate, how the service is used so we can improve it.

We do not sell your data, show you ads, or use your list content for advertising.

Who can see your content

A “homespace” is a private shared area. Only people you invite into a homespace can see the content inside it. Access is enforced at the database level (row-level security) so that people who are not members cannot read your data.

Service providers we rely on

We use a small number of trusted providers to run the service:

• Google — sign-in (OAuth).
• Supabase — secure database and authentication hosting.
• Cloudflare — website hosting and delivery.
• Google Analytics — anonymous, aggregate usage measurement.

These providers process data only to provide their service to us.

Cookies & local storage

We use cookies and your browser’s local storage to keep you signed in and remember your preferences. Google Analytics sets its own cookies for anonymous measurement. We do not use advertising or cross-site tracking cookies.

Data retention & deletion

We keep your account and content for as long as your account is active. You can delete individual items at any time inside the app. To delete your account and all associated data, email us at [email protected] and we will remove it.

Children

Togetherkit is not directed at children under 13, and we do not knowingly collect their data.

Changes to this policy

If we change this policy, we will update the date at the top of this page. Significant changes will be reflected here before they take effect.

Contact

Questions about your privacy or this policy? Email [email protected].