Pera Privacy Policy

Effective date: 17 October 2026

Pera is a list app. Your lists belong to you. We don't track you, and we can't see your lists. The only thing Pera can send us is the name of an item it doesn't recognize, and only if you choose to share it.

What changed: this version adds My photo (in Sharing a list), an optional photo for the people you share lists with; names the server that receives shared item names, and Cloudflare, through which our server and this website are reached (in Sharing unknown item names and This website); says that Pharmacy sections in other lists are never sent; and says which names Pera gives Siri (in Spotlight, Siri and Shortcuts). The previous version, effective from 16 October 2026, added Sharing unknown item names, which is optional and off unless you turn it on; until then, Pera sent nothing to us.

The short version

  • Your lists are kept on your device and, if you use iCloud, in your own iCloud account. We can't see them.
  • When you share a list, it goes through iCloud to the people you invite, and to no one else.
  • No advertising, no tracking, and no third-party code in the app. Only if you opt in, Pera sends us the names of items it doesn't recognize, so it can learn them. They aren't linked to you, and Pera checks them on your device to leave out people's names, phone numbers, addresses and health details such as doses.

What Pera keeps, and where

On your device. Your lists (titles, items, quantities, notes, sections, when items were checked off), the files you attach, and your settings are stored inside the app on your device, and are included in your device's backups like other app data. To make typing quicker, Pera also remembers items you've typed before, what it learned your item names mean and, if “Remember item details” is on, the quantity, note and section of items you delete. If “Match my keyboard language” is on, Pera looks at the language of the keyboard you're typing with to understand item names; it doesn't store it. That memory stays on the device you typed on, is never synced, and you can clear it in Settings → Typing and suggestions → Clear typing suggestions. If you share unknown item names, Pera also keeps a copy of the ones it sent (see Sharing unknown item names). Deleting Pera from a device removes everything it stored there.

In your iCloud. If you're signed in to iCloud, Pera syncs your lists and attachments between your devices with Apple's iCloud (CloudKit), in your own private iCloud database. We, the makers of Pera, have no access to it. Storage and transfer are provided by Apple under Apple's Privacy Policy.

Encryption. The content of your lists — list titles, item names, quantities, notes, sections and attachment names — is encrypted on your device before it is uploaded to iCloud, with keys kept in your iCloud Keychain, so Apple can't read it either. Attached files are stored encrypted by iCloud, and are end-to-end encrypted when you turn on Advanced Data Protection for iCloud. A few technical details that iCloud needs to sync — such as record identifiers, dates (including when an item was checked off), the order of items, whether an item is checked off and the size of attached files — are stored with iCloud's standard protection. When you share a list, its title is also stored with the share with iCloud's standard protection, so the invitation can show it.

Sharing a list

When you share a list, iCloud invites the people you choose. A new share is for invited people only; if you change its options in the iCloud sharing screen to let anyone with the link join, anyone who gets the link can. Everyone in the list can see its content and attachments, including the list's note, and, depending on the access you give them, change it. Whether you've seen a list's note is kept on each of your devices and never shared.

People in a shared list can see each other's names and, as iCloud provides them, the e-mail address or phone number they were invited with (in Shared With). In notifications and “Added by”, Pera shows people by name only, never by e-mail address or phone number. Pera shows each person as a circle with their initials, made from the name iCloud provides, or with the photo they chose for Pera (My photo, below); it doesn't access your contacts or your photo library for this. As the owner, you can remove people or stop sharing at any time; if you delete a list you own, it's removed for everyone. If someone else's list was shared with you, you can leave it.

My photo (optional). In Settings → Shared lists → My photo you can choose a photo for people to see instead of your initials in the lists you share or join, including people who joined with a link, and in lists you share or join later. Pera makes a small square copy of the photo (256 × 256 pixels) without its location or any other metadata, and syncs only that copy through iCloud, encrypted like your lists' content. It's shown only in Pera's own views of those lists, never in widgets, notifications, Spotlight or exported files, and only where you can edit the list: in lists you can only view, people see your initials. Pera shows someone's photo only if it was set by that person, and keeps a copy of these small photos on your devices to show them. Other people's photos are removed from your device when you leave the list, and when they leave or are removed once the owner's Pera next syncs. Remove Photo deletes your photo for everyone and from your devices. If you leave a list, are removed, or the owner stops sharing it, your photo there is deleted too (by your device, or by the owner's device the next time Pera syncs there). Choosing a photo uses the system photo or contact picker, so Pera doesn't get access to your photo library or contacts; from a contact card, Pera uses only its photo.

Sending a copy. “Send a Copy”, export and drag-and-drop create a .pera file with the list's content (including notes, check-off dates and the names of attachments, but not the attached files themselves). Whoever you send it to gets that copy; it isn't connected to your list.

Photos, videos and files

You choose what to attach, with the system photo picker, the camera or the file picker; Pera never asks to see your photo library. Before a photo is stored, Pera removes its location and other identifying metadata (and downsizes it). Videos, from the photo picker or as files, are saved without their location and other personal metadata (and made smaller when they're large). Pera's camera takes photos only, and photos you take with it aren't added to your photo library.

If you open an item's photo, tap Share and choose Save Image, your device asks once whether Pera may add photos to your photo library. This is add-only access: Pera can only add photos to your library and can't see or read anything in it; it adds a photo only when you choose Save Image. The photo is saved as Pera keeps it, without the location removed when it was added; a photo in a format Photos doesn't take is saved as a HEIC or JPEG copy, also without its location. You can change this in Settings → Privacy & Security → Photos.

Other files (such as PDFs or documents) are kept exactly as they are, so anything inside them — for example an author's name — stays in them. Attachments sync and are shared together with the list they belong to.

Notifications

If you allow notifications, Pera tells you when other people change a shared list you're in. Notifications are created on your device from what iCloud syncs; nothing is sent to us or through us. They show the list's name, what changed with the names of the items (for example “Anna added Milk”), an emoji before an item where one fits, and the first name of the person who made the change. If one of the changed items has a photo on your device, the notification can also show a small copy of it, made on your device without its location or any other metadata; the copy is kept only with the notification and goes when the notification does. When you touch and hold a notification, Pera's notification view shows the same changes from the notification itself; it keeps nothing and doesn't connect to the internet.

Whether notifications show this on the Lock Screen is up to your device's Show Previews setting (Settings → Notifications). With previews hidden — “When Unlocked” is the default on devices with Face ID — a locked device shows only “Changes in a shared list”, without names or photos. A paired Apple Watch, Announce Notifications and notification summaries follow your system settings. Pera removes a list's notifications when you leave or delete the list, when it stops being shared, or when you turn notifications off. You can turn them off in Pera's Settings (“Notify me about changes in shared lists”) or in the system Settings.

Widgets

Pera's widgets show a list you choose: on the Home Screen, its name, the first line of its note, how many items are left and the next items; on the Lock Screen and in StandBy, its name and counts, with item names and the list's note hidden until you unlock your device. The “Add to Pera” control shows no list content.

So the widgets can show your lists, Pera keeps a small copy of them — list names, colours and symbols, the names and quantities of items not yet done and of the last few done, and the first line of the list's note — in a storage area on your device that only Pera and its widgets can use. No item notes, attachments or people's names or addresses are in it. When you check off an item in a widget, the widget leaves a note there for Pera to apply. This copy stays on your device, is updated when your lists change (a list you delete or leave disappears from it, and it's emptied when you sign out of iCloud), and is removed when you delete Pera.

Spotlight, Siri and Shortcuts

So you can find your lists, Pera adds list titles and item names to Spotlight on your device. They aren't readable while your device is locked, and are removed when you delete a list. Pera offers actions to Siri and Shortcuts, and lets you continue a list on your other devices with Handoff. So Siri recognizes them when you say them, Pera tells Siri your list titles and the names of up to 100 items that aren't done yet, including items in lists other people share with you. Siri tells you what's left on a list, or checks items off, only after you've unlocked your device, or when you ask from an Apple Watch or another device of yours that's already unlocked. Requests you make through Siri, and the names Siri uses to understand them, are handled by Apple under Apple's Privacy Policy.

Apple Intelligence

When Apple Intelligence is available on your device, Pera uses Apple's on-device model to understand item names it doesn't know (for example that “plátano” is the same item as “Banana”), and, if you turn on “Suggest items with Apple Intelligence”, to suggest items. Everything runs on your device; your lists don't leave it for this.

Sharing unknown item names (optional)

Pera knows thousands of item names, but not all of them. Sharing the ones it doesn't know is opt-in: nothing is sent unless you choose Share when Pera asks, or turn on Settings → Typing and suggestions → Share unknown item names. If you choose Don't Share, Pera asks one more time later, after you've added more items it doesn't recognize, and then never again. Once you opt in, Pera sends us only the names of items it doesn't recognize, when you add them, each with the language Pera is set to on your device, the kind of list (for example Groceries), the icon and section Pera guessed, Pera's version and the date (not the time). It never sends names Pera already knows, items from Pharmacy lists or from a Pharmacy section in another list, items other people added, items from lists kept only on this device, items from a file you open, import or drag into Pera, items from a link in another app, or anything else from your lists. Text you paste into a list, or drag in as text, counts as items you added, even when you copied it from a document; a file you drag in is never sent.

Before a name is sent, Pera checks it on your device and leaves it out if it may hold personal or sensitive information: names it recognizes as a person's name, phone numbers, street addresses, e-mail and web addresses, health details such as medicine doses, numbers of three or more digits, and long text. These checks lower the chance that something personal is sent, but can't guarantee it: for example, Pera can't recognize every person's name in every language, or every way of writing an address.

No account, device or list details are sent, and the names aren't linked to you: we store each name with only the day it arrived, in random order, and we don't store your IP address with it. Pera sends the names over a secure (https) connection to our server, api.pera.green. To stop abuse, our server counts requests from each IP address for up to two hours, using a one-way code instead of the address itself. Our server is reached through Cloudflare, which protects it and passes requests on: the secure connection from your device ends at Cloudflare, which sends the request on to our server over a second secure connection. So Cloudflare handles the whole request, including the names and your IP address. It does this for us, as our service provider, under Cloudflare's Privacy Policy. As for any website, our web host, Hostinger, keeps standard logs of requests (IP address, time, the web address requested and the app or browser name, which for Pera is just “Pera”; not the names) for as long as it needs them to run and protect its servers.

We use the names only to teach Pera new items, icons and sections. Each name is deleted after 60 days; we keep only how often a name was sent. Because names aren't linked to you, we can't find or delete the ones you sent. Pera keeps a copy of the names it sent on your device for up to 60 days, so a later version can show you which of them it has learned; this copy is never sent or synced, isn't included in backups, and Clear typing suggestions deletes it. You can stop at any time by turning the setting off, which also deletes names waiting to be sent and this copy. We rely on your consent to do this.

Pera's App Store privacy details list this as “Data Not Linked to You: User Content” (they appear once Pera is on the App Store).

If you open a Pera link that points to a list on a website, Pera shows you the website's address and only downloads after you confirm, and only over a secure (https) connection. That website sees the request like any web visit (for example your IP address). Pera sends no cookies or personal information with it.

What we don't do

  • No accounts with us; your iCloud account is between you and Apple.
  • No third-party code: no analytics, crash-reporting or advertising tools. The optional item names described above are the only thing Pera sends us.
  • No tracking across apps or websites, and no selling or sharing of data.
  • No location, contacts, microphone or health access.

If you choose to share diagnostics or crash reports with app developers in your device's settings, Apple may pass crash reports to us; these are handled under Apple's privacy policy.

Beta testing. If you test a beta of Pera with Apple's TestFlight, Apple shares with us what TestFlight provides to developers, such as the name and e-mail address you were invited with, your device model and system version, install and session counts, crash reports, and any feedback and screenshots you choose to send. This is handled under Apple's TestFlight terms and privacy policy; we use it only to fix and improve Pera. The beta of Pera itself collects nothing beyond the optional item names described above, like the App Store version. Pera's own “Copy Diagnostics” (in Settings) only copies technical status to the clipboard (app version, sync status and error codes, no names or list content), and only when you tap it.

Deleting your data

  • Delete an item or a list in Pera: it's removed from your devices and from iCloud.
  • Delete all of Pera's iCloud data: on iPhone or iPad, Settings → your name → iCloud → Manage Storage (Manage Account Storage) → Pera.
  • Delete Pera from a device: everything it stored on that device is removed.
  • Remove Photo in Settings → Shared lists → My photo deletes your photo from every shared list and from your devices.
  • If you sign out of iCloud, switch accounts or turn off iCloud for Pera, the lists of that account are removed from this device and stay in that iCloud account. Lists with changes that never reached iCloud are kept until you choose: keep a copy on this device only, or delete them.

Children

Pera doesn't ask anyone, including children, for personal data. Sharing unknown item names is off unless someone turns it on, and sends no account, device or contact details.

This website

This website, pera.green, has no analytics or advertising and sets no cookies of its own. Like our server, it's hosted by Hostinger and reached through Cloudflare, which protects it and delivers its pages. Both see each visit like any web request: your IP address, the time, the page you asked for and your browser's name. Cloudflare may set a cookie its security checks need; it doesn't use it to follow you from site to site (Cloudflare's cookies, Cloudflare's Privacy Policy).

Changes to this policy

If this policy changes, we'll update it here and change the effective date. If Pera ever sends more than what's described here, we'll say so here and in the App Store before it does, and ask you again before sending it.

Contact

Questions about privacy: info@pera.green

Who is responsible: Jorge Garcia Armero, info@pera.green.