Privacy Policy
CartPatt is a shared grocery list app for families, operated by an independent developer. This policy explains what data CartPatt collects, how it is used, and the choices you have. Questions? Email support@cartpatt.com.
Information We Collect
- Account information. Your email address and a nickname. If you sign in with Google or Apple, that service also sends us your name and, for Google, a link to your profile picture; we keep what it sends with your account and use the name only as your starting nickname.
- Profile photo (optional). If you add one, a reduced copy is stored and shown to the members of your family.
- Your lists and purchases. Items you add, notes, label colours, what was checked off and when, who added or checked it, and your family group membership.
- Trip totals (optional). After you finish shopping you can enter what the trip cost and in which currency. Totals are kept per trip, with the currency you entered.
- Notifications (optional). If you allow notifications, we store this phone's push token, its platform (iOS or Android), its CartPatt language, and whether the finished-shopping notice is on, so we can send that notice in your language.
- Support email. Whatever you send to support@cartpatt.com.
CartPatt does not show ads, does not use third-party analytics or tracking in the app, and does not sell your data. We do not collect your location or contacts.
The cartpatt.com website (separate from the app) counts page views with
Vercel Web Analytics, which does not use cookies and is not linked to
your CartPatt account. Invite codes and anything after ? or
# are removed from page addresses before they are counted.
How We Use Information
Your data is used only to make CartPatt work:
- Keeping your family's shared shopping list in sync
- Showing purchase history, restock suggestions, statistics and trip totals
- Sending the reminders and the finished-shopping notice you turned on
- Showing a household status summary in the home-screen widget
- Answering your emails
The widget summary and your app language choice are stored on your device. Reminders are scheduled on your device.
Who Can See Your Data
- Members of your family group see the shared list, purchase history, shared trip totals, nicknames and profile photos — that sharing is the purpose of the app.
- Items and totals you mark Just for me are visible only to you.
- The service providers below process data for us, only to run CartPatt.
Service Providers
- Supabase — database, sign-in and file storage. Data is stored in India (AWS Mumbai region).
- Google and Apple — sign-in, if you choose them.
- Expo (United States), with Apple Push Notification service and Google Firebase Cloud Messaging — delivering notifications you turned on.
- Resend (United States) — sign-up and password-reset emails.
- Cloudflare and Google (Gmail) — receiving and answering support email.
- Vercel — hosting cartpatt.com and counting its page views.
Because these providers operate in several countries, your data may be processed outside the country where you live.
Data Retention
Your data is kept for as long as your account exists, so your family's shared history keeps working. We keep occasional database backups for safety; they are deleted after 90 days. Providers keep short-lived technical logs under their own policies. Support emails are deleted once the question is settled and no longer needed.
Account & Data Deletion
- Leave a family in Settings: you stop seeing its history and statistics, and your Just for me items and totals in that family are deleted. The family's shared list stays.
- Delete your account in Settings → Delete account, or email support@cartpatt.com from the email address on your account. Your account, profile, profile photo, Just for me items and totals, and your phones' notification registrations are deleted.
- Items, purchases and trip totals you added to a shared family list stay with the remaining family so their history keeps working; they are no longer linked to your account. If you were the only member, the family and everything in it is deleted.
- Copies in backups are removed when those backups expire (within 90 days).
You may also withdraw consent to this policy by deleting your account; the app cannot work without the data described above.
Children
CartPatt is a family app, and household shopping is often shared with teenagers. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, contact us and we will delete it.
Your Rights
You can ask to see, correct or delete your data, or ask any other privacy question, at support@cartpatt.com. We will answer within 30 days.
Changes to This Policy
If this policy changes, we will update this page and the effective date above.