RouteCart ("we," "us") is an early-stage, independently run app. This policy explains what we collect and why, in plain terms. It isn't a substitute for legal advice, and it will evolve as the app does.
What we collect
- Account info: your name and email address, when you create an account.
- Content you create: shopping lists, items, budgets, notes, store selections, saved products, aisle corrections, and the email addresses of people you invite to a list.
- Your shopping history (completed trips: store, total, and item count) and your Plan my week diet preferences.
- Basic usage data needed to operate the app (e.g. error logs), and, if you use the mobile app and enable notifications, a device push token.
- Location, only when you tap “near me” to find stores: your phone turns it into a ZIP code, and only the ZIP is sent to us to answer that search. We don't store it. Barcode scanning happens on your phone; no camera images are sent.
- If you join the RouteCart Plus waitlist: that you joined, when, and where in the app. We use your account email only to tell you when Plus is ready.
- If you subscribe to RouteCart Plus: your subscription status (whether it's active or set to end, which plan, and when the current period ends) and an identifier from the payment provider that handled it. We never see or store your card number; Stripe (web) and Apple (iPhone) handle payment details.
Who we share it with
- Supabase — hosts our database and handles authentication. Your account info and list data are stored there.
- Expo — delivers push notifications to the iPhone app. It receives your device push token and the notification text (e.g. “Sam added Milk”).
- Kroger's Public API — we send store and product search terms (e.g. a zip code, an item name) to Kroger to get real store, price, and aisle data. We are not affiliated with The Kroger Co. See Kroger's own privacy policy for how they handle that request.
- Stripe — processes Plus payments made on the web. It receives your email address and account ID, plus the card details you enter directly on Stripe's checkout page, which we never see.
- RevenueCat — manages Plus subscriptions bought in the iPhone app. It receives your account ID and your App Store purchase information to confirm whether Plus is active and tell us, and it uses that purchase data for its subscription reporting. It does not receive your name or email from us.
- Apple — processes purchases made through the App Store under its own terms and privacy policy.
- Vercel — hosts the app itself, and provides Vercel Web Analytics, which counts page views and visitors in aggregate without cookies and without tracking you across other sites.
- Sentry — receives error reports when the app crashes (the error, the page it happened on without any search terms, and your browser type). We don't send your name, email, or list contents.
We don't sell your data, and we don't share it for advertising.
List sharing
If you share a list, the people you invite can see that list's items and who checked off what. Sharing a list doesn't give anyone access to your other lists or account details.
Data deletion
You can delete your account any time from Settings → Delete account, on the web or in the iPhone app. That permanently removes your account, your lists (including lists you shared, for everyone on them), your purchase history, saved products and settings, and takes you off lists other people shared with you. Aisle corrections you submitted stay, with no link to you. It also cancels a Plus subscription bought on the web; one bought through Apple has to be canceled in your Apple ID settings. Stripe and Apple may keep their own payment records as the law requires. If you can't sign in, email support@routecart.app and we'll delete it for you.
Children
RouteCart isn't directed at children under 13, and we don't knowingly collect their data.
Changes
We'll update the date at the top of this page if this policy changes.