1. Scope and summary
This Privacy Policy applies to the Android app PickQueue, package ID com.schukai.pickqueue. The app manages shopping lists without a user account and remains usable for local lists without the sync service.
If you enable optional sync, only client-side encrypted list events and necessary technical metadata leave the device. The sync relay receives no list keys and cannot decrypt the shopping-list content.
Effective: 17 July 2026
2. Controller and privacy contact
Ingrid Schukai & Volker Schukai GbR
Eichenstraße 26
82290 Landsberied
Germany
Email: hey@schukai.com
Further provider details are available in the German-language legal notice.
3. Data on the device
Depending on how you use it, PickQueue stores list names, products, quantities, units, notes, shops, favorites, supplies, workflow states, history, local display names, your own product or shop images, and sharing and device configuration.
The data are held in a local app database and private app files. List and sharing keys are kept in protected device storage. Android system backups for the app are disabled. Your own photos remain on the device and are not transferred as list content through the sync service.
4. Optional end-to-end encrypted sync
For shared lists, the app transfers authenticated encrypted events by HTTPS to pick-queue-sync.schukai.com. The relay stores ciphertext, random list and capability IDs, digests of high-entropy access tokens, access levels, pseudonymous device and operation IDs, revisions, server times, format and size information, and technically visible access volume.
List names, products, quantities, notes, shops, images, display names and list keys must never reach the relay in plaintext. Network operation and abuse protection also process technically necessary connection data such as IP address, time, requested API path, response status and transfer volume.
When pairing devices, the relay additionally processes random invitation and pairing data, hashes, a recipient public key, cryptographic proofs and an encrypted handoff envelope for no more than 15 minutes. Expired pairings are physically removed on a regular schedule.
5. Camera, photos and speech recognition
After you grant permission, the camera is used to read QR invitations, keys or product codes and to take deliberately selected local pictures. Image data are not transferred to the PickQueue relay.
Speech input uses the recognition service configured on the Android device. Whether speech is processed locally or additionally by that service's provider depends on the device and selected service. Audio is not routed through the PickQueue relay; the app receives recognized text and shows it for confirmation before it is added to a list.
6. No accounts, advertising or usage analytics
PickQueue currently creates no user account and contains no advertising, advertising-ID processing, or client analytics or crash-reporting SDK. Sync operations use protected aggregate operating metrics without list content, tokens, or individual list, device or operation IDs.
Optional sync is free during the current early-access phase. PickQueue currently processes no Google Play purchase or subscription data. This policy will be updated before a paid sync subscription is introduced.
7. Retention, backups and deletion
Local lists remain until you delete them in the app, clear the app's Android data or uninstall the app. Deleting a local-only list removes all related local content.
For a synchronized list, a device with administrative capability can delete the list, its capabilities and encrypted events transactionally from the relay. A device without that capability removes its local copy while other devices and the relay retain the list. Active encrypted events otherwise remain available so that devices that have been offline for longer can synchronize again.
Encrypted relay backups are currently retained for up to 56 days. A list deleted from the live relay may therefore remain as ciphertext with technical metadata in protected backups until backup rotation expires. schukai cannot read its shopping-list content without an authorized client key.
8. Rights, security and requests
Applicable data-protection rights may include access, correction, deletion, restriction, portability, objection and the right to complain to a supervisory authority.
Because PickQueue operates no user account and the relay cannot decrypt shopping-list content, list-deletion requests generally need to be carried out through an authorized device and the relevant list. Questions about technical relay metadata or privacy can be sent to hey@schukai.com.
PickQueue is a household and shopping app and is not directed specifically at children.
9. Changes
We update this policy if PickQueue's sync operation, retention, integrated services or data processing change. The effective date above identifies the current version.