CartMate ("the app") is a shared grocery list and meal planner developed by Marian Pavel ("we", "us"). This policy explains what data the app handles and why. The short version: we store the data the app needs to work, we don't run ads, and we never sell your data.
Members of your household can see your display name, profile photo, and the content you add (items, recipes, meal plans) — that is the point of the app. Beyond that, data is only processed by the infrastructure providers the app is built on: Google Firebase (authentication and push notifications), RevenueCat (subscription state), Cloudflare (network and DDoS protection), and our hosting provider. Each acts as a processor for the purposes described above.
Your data is kept for as long as your account exists. You can delete your account at any time in the app under Settings → Delete account. Deletion is immediate and complete: your account, household memberships, lists, items, recipes, push tokens, and sign-in identity are removed from our systems. Encrypted database backups age out automatically within 14 days.
Depending on where you live (including under the GDPR), you may have the right to access, correct, export, or delete your personal data, and to lodge a complaint with a supervisory authority. Deletion and correction are available directly in the app; for anything else, contact us and we will help.
CartMate is not directed at children under 13 (or the higher minimum age in your country), and we do not knowingly collect data from them.
If this policy changes materially, we will update this page and note the new effective date above.
Marian Pavel — [email protected]