Legal
Privacy Policy & Data Practices
Last updated: August 31, 2026
Who we are
CartTogether (“we”, “us”) operates the CartTogether website at carttogether.app and the CartTogether mobile app on iOS and Android (together, the “Service”). This policy explains what information we handle when you use the Service.
Information we process
On your device. The app stores shopping lists, trip history, saved templates, nickname, theme preferences, and similar settings locally on your phone so the app works offline and remembers your cart between sessions.
When you share a cart. If you create or join a live shared cart, we sync cart contents and member presence to our cloud database so everyone on the cart sees the same list in real time. That typically includes item names, quantities, notes, aisle/category, bagged/skipped/out-of-stock status, your chosen nickname, a device identifier for presence, and join codes.
What we do not collect. The Service does not require an email/password account. We do not ask for your real name, payment card, precise location, contacts, or health data to use the shared cart. Photos and voice notes are optional and only used if you send them to the cart assistant.
Website. Our marketing site may receive standard server and CDN logs (for example IP address, user agent, and requested URL) needed to operate and secure the site. If you allow it in the on-site prompt, we also collect anonymized usage information to understand how the site is used and improve our service. You can deny that collection; your choice is remembered on this device. If we email you a tester or launch invite, following that link (hosted on our tracking subdomain) records that you opened or accepted the invite so we can see who joined a test. Those links then send you to Google Play or Apple TestFlight. Waitlist confirmation emails may include a tiny tracking image so we can tell whether the message was opened (no click required); some mail apps load that image automatically.
Cart assistant. If you send a photo or a voice note to the cart assistant, that media is forwarded to our assistant provider. Voice notes are transcribed so you can edit and confirm. Photos may be used to extract grocery items or a recipe. Those files are not added to your shared cart until you confirm, and you can keep using the list without the assistant.
Website assistant. If you use the chat on this site, we store the conversation (your questions and the replies) so we can operate the assistant, see what people ask, and stop abuse. That typically includes the message text, the page you were on, an approximate country from our CDN, a hashed IP address, and timestamps. The text is sent to our assistant provider. We rate-limit repeated asks so a flood cannot run up usage.
How we use information
We use this information to:
- Provide and sync shared shopping carts across devices
- Show who is on a cart and recent shopping activity
- Remember your local lists, history, and preferences
- Keep the Service reliable, secure, and abuse-resistant
- Send a waitlist confirmation if you join from the site or a Meta lead form, and record whether that confirmation was opened
- Email a closed-test or launch invite when we invite you, and record whether you open that mail or follow its links
- With your permission, improve the website using anonymized usage information
We do not sell your personal information.
Sharing
Shared-cart data is visible to other people you invite to that cart. We use infrastructure providers (for example cloud hosting and realtime database services) to run the Service. They process data only to provide those services to us. Tester-invite links send you onward to Google Play or Apple TestFlight. We may disclose information if required by law or to protect the Service and our users.
Retention
Local data stays on your device until you clear app data or delete the app. Shared-cart data remains in our cloud database while the cart is active and may be removed when members leave, carts become unused, or you request deletion as described on our Delete account page.
Children
The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13.
Your choices
You can leave a shared cart in the app, clear local app data from your device settings, or uninstall the app. To request deletion of cloud-synced cart data associated with you, follow the steps on carttogether.app/delete-account.
Contact
Questions about this policy: support [at] carttogether.app.