Privacy Policy

Last updated: May 27, 2026

What we collect

Your email address, display name, your chosen profile photo, the contents of your shopping lists (item names, quantities, notes, item photos, list cover photos, who added what, who checked things off, what's recurring), and your purchase history within the app. If you sign in with Apple or Google, we also receive a stable user identifier from them. We collect anonymous crash and usage analytics through Apple's built-in services if you've allowed that at the OS level.

How we use it

To sync your data across your devices and your household, authenticate you, send password reset emails, process subscriptions through Apple and RevenueCat, surface smart suggestions and recurring-item reminders, and operate and improve the service. We do not sell your data and we do not run ads.

Where it's stored

On Google Firebase (Firestore + Authentication + App Check), which is SOC 2 / ISO 27001 certified. Data is encrypted in transit (TLS) and at rest. Photos you attach to items, lists, or your profile are compressed to ~250 KB before upload and stored alongside your other data. Only people in your household can see your lists; nobody else can. Some data is cached on your device for offline access.

Purchase data

When you buy a subscription, your purchase is processed by Apple (App Store) and tracked by RevenueCat on our behalf. RevenueCat receives a stable user identifier we generate for you, the product you purchased, the date/duration, and the renewal/cancellation status. RevenueCat does not see your name, email, lists, or any other content. We use this purchase data only to grant Premium access, calculate when subscriptions expire, support refund requests, and report anonymized conversion metrics.

Offline access

OurCart uses Firestore's offline cache (up to 50 MB) so the app works in areas with bad signal — common at grocery stores. Changes you make offline are stored locally and uploaded automatically the next time the device is online.

Siri & Shortcuts

If you use the "Add to OurCart" Siri shortcut, Apple processes your voice request on-device or in their own infrastructure (depending on your iPhone). OurCart only receives the final transcribed item name.

Sharing

We don't share your data with advertisers, brokers, or analytics resellers. We share data with service providers (Google, Apple, RevenueCat) strictly to operate the service. We may also share data when required by law (subpoena, court order) or to protect someone's safety.

Your rights

You can view, export, or delete your data at any time. Settings → Purchase history shows everything you've bought. Settings → Delete account permanently removes your account and queues your data for deletion within 30 days. You can also change your name (once every 30 days), change your password, change your profile photo, and turn off any notification category in Settings → Notifications.

Children

OurCart is not directed at children under 13. We don't knowingly collect data from anyone under 13. If you believe a child has created an account, contact privacy@ourcart.app and we'll delete it.

International transfers

Your data is processed on servers operated by Google in the United States. By using OurCart you consent to this transfer.

Changes

We'll notify you in-app of any material privacy changes. Continued use after a change means you accept the updated policy.

Contact

Privacy questions? Email privacy@ourcart.app.