1. Scope and developer
Racotter is the developer of Cartly and is responsible for the information practices described in this policy. This policy applies to the Cartly app and to Cartly pages hosted at cartly.racotter.com.
2. Information we handle
We collect information you provide, information created through your use of Cartly, and limited technical information needed to operate and secure the service. The exact information depends on the features you choose to use.
| Category | Examples | Why it is handled |
|---|---|---|
| Account and profile | Email address, account identifier, display name if provided, sign-in provider information, language, and currency preference. | Authentication, account recovery, personalization, and support. |
| Shopping and recipe content | Lists, items, quantities, categories, notes, stores, trip status, purchase prices, totals, recipes, ingredients, and images you add. | To save, sync, organize, and display your Cartly content. |
| Collaboration data | Invite tokens, shared-list or live-cart membership, participant details, item activity, and independent copies created from shared content. | To deliver invitations and keep collaborators in sync. |
| Optional camera, photo, and microphone input | Barcodes or images you scan or select, and speech used for voice input. | To scan loyalty barcodes, attach images, and convert speech into text when you activate those features. |
| Device-local information | Loyalty card names, barcode values, card images, app preferences, cached data, and session information stored on your device. | To provide device features and keep you signed in. |
| Technical and service information | IP address, device and operating-system details, app version, request timestamps, network status, and security or error logs. | Reliability, fraud prevention, troubleshooting, and service security. |
Publicly served images
Images attached to certain synced recipe or product features may be delivered through public asset URLs. Do not upload sensitive personal information in those images. Device-local loyalty card content is not uploaded to Cartly's cloud service unless a future feature clearly tells you otherwise and asks for the required permission.
Website information
The Cartly website does not currently use advertising pixels or analytics cookies. It loads web fonts from Google Fonts, so Google may receive basic connection information such as your IP address and browser details. Invite tokens are present in invite-page URLs and should be shared only with people you intend to invite.
3. How we use information
- Provide, synchronize, maintain, and improve Cartly's features.
- Authenticate users and help recover or secure accounts.
- Deliver shared-list and live-cart invitations you initiate.
- Remember language, currency, and other app preferences.
- Process support, privacy, and account-deletion requests.
- Detect misuse, protect users, and maintain service reliability.
- Comply with applicable law and enforce our Terms of Service.
Where applicable law requires a legal basis, we rely on performance of our agreement with you, your consent, our legitimate interests in running and securing Cartly, and compliance with legal obligations. You may withdraw consent through device settings or by contacting us, but this does not affect processing that already occurred lawfully.
5. Device permissions and your choices
- Camera and photos: requested only when you scan a barcode or choose to add an image. You can deny or revoke access in device settings.
- Microphone and speech recognition: requested when you activate voice input. Speech recognition may be processed by your device or its platform speech service. Cartly does not intentionally retain the raw audio after the speech-input interaction.
- Collaboration: you control whether to create, send, or accept invite links. Anyone with a valid link may be able to use it, so treat invite links as private.
- Profile and content: you can update or remove many items directly in the app. Contact us for other corrections or access requests.
6. Retention and account deletion
Account and cloud-synced content are retained while your account is active and for only as long as needed to provide Cartly, resolve disputes, protect the service, or meet legal obligations. Expired invitations, security logs, and backup copies may remain for a limited period before deletion or scheduled rotation.
Email hello@racotter.com with the subject “Cartly account deletion request.” Send the request from your registered email address, or identify that address in your message. If you cannot access it, explain that in the request.
- We may ask for reasonable verification to protect your account.
- After verification, we will delete the account and associated cloud data within 30 days unless retention is legally required.
- Removing the app or clearing its storage deletes device-local loyalty cards, cached information, and preferences that Racotter cannot erase remotely.
Deletion does not remove an independent copy another user created from content you intentionally shared with them. Limited records may be retained when required for security, fraud prevention, dispute resolution, or law. We will not use retained information for unrelated purposes. Backup copies are removed through our service providers' normal rotation schedules.
7. Security and international transfers
We use reasonable administrative, technical, and organizational safeguards, including encrypted network transport and access controls. No method of storage or transmission is completely secure, so we cannot guarantee absolute security. Keep your password and invitation links confidential and contact us if you suspect unauthorized access.
Cartly and its service providers may process information in countries other than your own. Where required, we use legally recognized transfer safeguards and require service providers to protect information consistently with this policy.
8. Your privacy rights
Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of your personal information, and to appeal or complain to a privacy authority. You will not be discriminated against for exercising a privacy right. Email us to submit a request. We may verify your identity and will respond within the period required by applicable law.
9. Children's privacy
Cartly is not directed to children under 13, or to a higher minimum age where local law requires it, and we do not knowingly collect personal information from children without legally valid permission. Contact us if you believe a child provided information improperly so we can investigate and delete it.
10. Changes to this policy
We may update this policy as Cartly changes. We will revise the effective date and provide additional notice in the app or through another appropriate channel when a change is material or when law requires notice or consent.
11. Contact us
Contact Racotter with privacy questions, complaints, consent-withdrawal requests, or account-deletion requests.