Privacy policy
Bash List · effective 20 September 2026
Bash List is a parts-list app for RC bashers. This page says exactly what it stores, where, and why. It is written by the person who built the app, not a lawyer, and it is meant to be read.
Using the app without an account
You don't need an account. Without one, everything you do — your lists, your spares, your stores, the trucks you star — stays on your device in the app's own storage. Nothing is sent to us. If you delete the app, that data goes with it.
If you sign in
Signing in uses your email address and a one-time code; there is no password. When you're signed in, the data below is copied to our servers so it syncs across your devices and survives losing your phone.
| What | Why |
|---|---|
| Your email address | To sign you in and to send you store replies. |
| Your lists, spares and stores | That's the app. It's what sync backs up. |
| Part names read from packaging you scan | So the app can show names for parts. The photo itself is processed on your device and never uploaded. |
| Your name and phone, if you enter them when sending a list to a store | So the store knows who to hold the parts for and can reach you. |
We don't collect location, contacts, photos (beyond reading a part number on-device), advertising identifiers, or analytics. There is no tracking and no third-party advertising.
Sending a list to a store
If you use "Send list", we email the store you chose. That email contains your list, your name (if given), your email address, and your phone number (if given), so the store can reply to you. The store sees only that list — not your spares, your other lists, or anything else. The store's reply is stored so you can see it in the app. Links in those emails expire after 30 days.
Who else handles the data
| Service | Role |
|---|---|
| Supabase | Database and sign-in (US servers). |
| Vercel | Hosts the app and the small server functions that send store emails. |
| Resend | Delivers the sign-in and store emails. |
Links in the app to retailers (AMain Hobbies, RC Superstore, PNW RC Madness) and to Apple Maps open those sites; their privacy policies apply once you're there. We pass them only the part number or address you tapped.
Deleting your data
In the app: ⚙ → Delete account…. That permanently removes your account and everything stored under it — lists, spares, stores, sent requests and their replies. It is immediate and cannot be undone. Data on your device is cleared at the same time. If you'd rather we do it, email hello@bashlist.app from the address on the account.
Children
Bash List is not directed at children under 13 and we don't knowingly collect their data.
Changes
If this policy changes in a way that matters, the app will say so on the sign-in screen and the date above will move.