Privacy Policy for ListIt

Last updated: 21 September 2026

This Privacy Policy explains how the ListIt mobile application and the ListIt Chrome extension ("ListIt", "the app", "we", "us") handle information when you use them. Except where a section says otherwise, it applies to both; the section titled The Chrome extension covers the differences that are specific to the browser extension. ListIt is an AI-assisted tool that helps you create and manage eBay listings from photos. The app is published by AHB Studio. If you have questions, contact us at [email protected].

Summary: ListIt is designed to keep your private data on your device. We do not sell your personal information. The app connects directly to Google's Gemini AI (to draft listings from your photos) and eBay (to publish and manage your listings). We use Google Firebase Analytics to collect pseudonymous operational telemetry and diagnostic metrics to monitor AI identification reliability, listing speed, and error rates without tracking you across third-party apps or websites.

Information the app accesses

  • Photos and camera. You capture or select photos of items you want to list. These images are sent to the Google Gemini API to generate a suggested title, description, price, and category. Photos for a draft are stored locally on your device and are uploaded to eBay's Picture Services only when you choose to publish a listing.
  • eBay account information. When you connect your eBay account, the app receives OAuth access and refresh tokens that let it create and manage listings on your behalf. It reads your listing, sold, and account data from eBay to display your listings and sales inside the app.
  • Your Google Gemini API key. You provide your own Google AI API key. It is used only to authenticate your requests to Google's Gemini API.
  • Advertising and device data. The app may display ads through Google AdMob. To serve ads, Google may collect device identifiers (such as an advertising ID) and related information to serve personalized or non-personalized ads. Where required, you will be asked for consent before personalized ads are shown. For more details on how Google uses partner data, see Google’s Partner Policy.
  • App analytics and operational telemetry. The app collects pseudonymous usage events and performance metrics via Google Firebase Analytics. This includes operational metrics (such as AI analysis duration, publishing latency, error codes, and feature usage) and pseudonymous item metadata for items you analyze, draft, or publish (such as item title, eBay category, condition, and listing price). These telemetry signals are used strictly to monitor AI accuracy, measure listing reliability, diagnose failures, and improve app performance. They are never linked to your personal identity or contact details, are never sold, and are never used for cross-app advertising tracking.

Where your information is stored

  • On your device. Drafts, photos, cached listing data, your eBay tokens, and your Gemini API key are stored locally on your device. Sensitive credentials (your eBay tokens and Gemini key) are kept in the device's secure, encrypted storage (Android Keystore) where available.
  • Our backend. ListIt uses a lightweight server (a Cloudflare Worker) for a single purpose: exchanging eBay authorization codes and refresh tokens during sign-in. It acts as a pass-through and does not durably store your personal data or your listing content.

How information is used

  • To analyze your photos and generate draft listing content (via Google Gemini).
  • To create, update, end, and display your eBay listings and sales (via eBay).
  • To keep you signed in to eBay between sessions.
  • To show ads that help keep the app free (via Google AdMob), where applicable.
  • To monitor application stability, measure AI identification accuracy, track listing speed, and diagnose technical errors (via Google Firebase Analytics).

The Chrome extension

The ListIt Chrome extension performs the same job as the app — turning photos into eBay listings — but the technical details of where data lives differ from the mobile app. This section governs where the two differ.

  • Where extension data is stored. Your drafts, photos, cached eBay listing and sales data, your eBay sign-in tokens, your Google Gemini API key and your preferences are stored using Chrome's extension storage (chrome.storage.local) on the computer where the extension is installed. This storage is local to your browser profile. Unlike the mobile app, it is not held in an operating-system encrypted keystore, and it is protected by your computer's and browser profile's own security rather than by separate encryption. Nothing is written to Chrome Sync, so extension data is not copied to your other devices by Chrome.
  • Your photos. Photos you add are sent directly from your browser to Google's Gemini API, using the Gemini API key you supply, so that a listing can be drafted from them. When you publish, photos are uploaded to eBay's image service through the ListIt backend, which passes them to eBay and does not keep a copy.
  • What the backend does. The extension uses a lightweight server (a Cloudflare Worker) to complete eBay sign-in, to relay certain eBay API requests, to publish and update listings, and to forward photo uploads to eBay. It holds no database: requests are processed and passed on, and listing data and photos are not retained on it.
  • Anonymous usage data. The extension reports a small amount of anonymous usage data so we can tell how many installs are active: a randomly generated install identifier, your browser name, the name of the event (currently only that the side panel was opened), a timestamp, and the extension version, plus a once-daily check-in. This contains no photos, no listing content, no eBay account details and nothing that identifies you personally, and the identifier is not linked to any account.
  • Permissions. The extension requests access to eBay sites (to read a listing page you ask it to import and to fill listing forms for you), to Google's Gemini API, and to the ListIt backend. It does not read pages on other websites.
  • Payments. If you upgrade, checkout is handled on RevenueCat's hosted payment page. The extension never receives or stores your card details.
  • Removing your data. Uninstalling the extension deletes its local storage, including your drafts, photos, eBay tokens and Gemini API key. You can also disconnect your eBay account at any time from Settings.

Third-party services

When you use ListIt, information is processed by the third parties you connect to or that serve ads. Their handling of your data is governed by their own privacy policies:

Affiliate links

ListIt participates in the eBay Partner Network, an affiliate advertising programme. Links in the app that take you to eBay's website — such as viewing one of your live listings, or searching sold prices for comparison — carry a tracking code identifying ListIt as the referrer.

If you buy something on eBay within 24 hours of following one of those links, ListIt may earn a small commission from eBay. This costs you nothing, does not change the price you pay, and never affects which items or prices the app shows you. The tracking code is handled entirely by eBay; ListIt does not receive information about what you browse or purchase.

Data sharing and sale

We do not sell your personal information. We do not share your information with third parties except as needed to provide the app's core functions described above (Google for AI processing, ads, and operational analytics; eBay for listing management).

Your choices and controls

  • Disconnect eBay at any time in Settings, which removes the stored eBay tokens from your device.
  • Remove your Gemini API key in Settings.
  • Uninstall the app to remove all locally stored data, including drafts and credentials.
  • Ad personalization can be managed through your device's advertising settings and any in-app consent prompt.

Data retention

Data stored on your device remains until you delete it (e.g., by disconnecting eBay, removing your key, deleting drafts, or uninstalling). Tokens exchanged through our backend are not retained after the sign-in exchange completes.

Children's privacy

ListIt is not directed to children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal information from children.

Security

We take reasonable measures to protect your information, including storing sensitive credentials in the device's encrypted keystore and holding service secrets only on the server side. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

Contact

For privacy questions or requests, contact: [email protected].