Privacy Policy

Account information

• Phone number and password, to create and sign in to your account. We text you a one-time code to confirm the number is yours, and again if you reset your password. Your phone number is not shown to other users, and your password is stored only in encrypted (hashed) form.
• Email address, only for accounts created before CommCart switched to phone numbers.
• Username, shown to the other users in your Carpools.

Profile information

• Zip code, used to show carpools near you.
• Drop-off address (street, city, state), used so a Shopper can deliver your groceries.
• Preferred stores and shopping days.

Content you create

• Shopping list items, including names, quantities, units, categories, notes, and optional product photos.
• Chat messages and photosyou send in a carpool’s chat.
• Receipt photos and amounts, when you are the Shopper and scan a receipt.
• Ratings you give other users, and any notes you add to them.
• Reports you file about other users, and the people you block.

Carpool and trip activity

• The carpools you create, join, or request to join.
• Your role in each carpool, and the trips you shop for or hand off.
• Records that a payment between users was confirmed in person with the QR code, including the amount and who paid whom. We never see or process the payment itself. That happens in Venmo, PayPal, Zelle, or your bank.

• Push notification token. If you allow notifications, Apple gives the app a token so we can send you notifications.
• Technical and security information. When the app talks to our servers, we may receive your IP address, device and app version, and request logs. We use these to keep the app secure, prevent abuse (for example, limiting repeated requests), and fix problems.

What we don’t collect

• We do notaccess your device’s location. When a Shopper opens a drop-off route, the app hands the drop-off addresses to Apple Maps, which plans the route using your location under Apple’s own privacy policy.
• We do not use advertising identifiers.
• We do not use third-party analytics or tracking tools.

We use your information to:

• Run the app: create your account, match you with carpools near you, run trips and the Shopper rotation, show the shared list, split receipts, and record handoffs.
• Communicate with you: send notifications about join requests, trips, list changes, and chat messages, and reply when you contact us.
• Keep CommCart safe: filter offensive language, review reports, enforce our Terms and Conditions, prevent fraud and abuse, and secure our systems.
• Improve the app:fix bugs and understand what isn’t working.
• Meet legal obligations.

We do not use your information for advertising, and we do not sell it.

With the other users in your Carpools. CommCart works by sharing information within a Carpool:

• your username;
• your rating;
• the items you add to the list, with their photos;
• your chat messages;
• your share of each receipt;
• your trip history in that carpool.

Your drop-off address is shared with your carpool’s Shopper.

When you ask to join a carpool, its admin sees your username and rating.

Anything you post in a Carpool can be seen by the other users in it, so share only what you’re comfortable sharing.

With the companies that run CommCart’s technology. They may use your information only to do that work for us:

• Supabase, which hosts our database, file storage, sign-in, and server functions in the United States. It runs on Amazon’s cloud (AWS).
• Apple, which delivers push notifications and Apple Maps routes and looks up addresses on the map.
• Twilio, which sends the text messages with your verification and password-reset codes. It receives your phone number and the code.
• Resend, which delivers emails, including the reports users file, which are emailed to our team.
• Google, whose Gemini AI may be used to read receipt photos so the cost split is accurate. When it is used, the receipt photo is sent to Google. Under Google’s terms, Google may use content submitted through its free tier to improve its products, and that content may be reviewed by people. If you’d rather your receipts not be sent, don’t scan receipts that show information you consider sensitive. Store, items, and prices are what we need.

For legal reasons and safety. We may share information if we believe in good faith it is needed to:

• follow the law or respond to legal process;
• protect the rights, property, or safety of CommCart, our users, or the public, including reporting illegal content to the authorities as required by law;
• enforce our Terms and Conditions.

If CommCart changes ownership. If CommCart is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of it. This Privacy Policy will continue to apply to it.

We do not sell or “share” your personal information for targeted advertising, as those terms are defined under California law.

CommCart is free. We do not collect your credit card, bank, Venmo, PayPal, or Zelle account details.

When you tap Venmo or PayPal, CommCart opens that app with the amount filled in. What happens there is covered by that company’s privacy policy.

If we ever add paid features, we will update this policy before they launch.

• While you have an account, we keep your information so the app can work.
• When you delete your account (Profile → Delete Account):
  • we delete your profile, address, chat messages, notifications, shopping list items, receipts you scanned, ratings you gave, payment confirmation records, and the reports you filed;
  • we remove you from all your carpools;
  • trip history that other users still rely on, such as a completed trip, is kept with your name removed;
  • photos you uploaded may remain in our file storage for a limited time before they are cleaned up.
• Backups: copies may remain in our backups for a limited time before they are overwritten.
• Reports and safety records: we may keep information about reports and rule violations longer, where needed to keep the app safe, prevent repeat abuse, or meet legal obligations.

You can:

• See and edit your profile, including your username, zip code, address, and preferred stores, in Profile.
• Delete your account at any time in Profile → Delete Account.
• Turn off notificationsin your device’s Settings.
• Block other users so you no longer see their messages.
• Ask us for a copy of your information, to correct it, or to delete it, by emailing contact@commcart.ai. We will respond within the time the law requires, and we may need to verify your identity first.

California residentshave the right to know what personal information we collect, use, and disclose; to access, correct, and delete it; and not to be discriminated against for using these rights. We do not sell or share personal information, and we don’t use sensitive personal information for purposes that would give you a right to limit it. To make a request, email contact@commcart.ai. You can also have an authorized agent make the request for you.

If you live in another U.S. state with a privacy law that gives you similar rights, you can use them the same way.

We protect your information with industry-standard measures:

• encryption in transit;
• access controls that limit who can read each kind of data (for example, only the users in a Carpool can read its chat and photos);
• hashed passwords, and verification codes that expire quickly.

No system is perfectly secure, so we can’t guarantee absolute security. Use a strong password that you don’t use anywhere else, keep your phone locked, and never share a verification code with anyone. CommCart will never ask you for one.

CommCart is only for people 18 and older. We do not knowingly collect information from anyone under 18. If you believe a minor has created an account, email contact@commcart.ai and we will delete it.

CommCart is operated from the United States, and your information is stored in the United States. If you use CommCart from outside the U.S., your information will be transferred to and processed in the U.S.

We may update this Privacy Policy from time to time. If we make material changes, we’ll let you know in the app before they take effect. The “Last updated” date at the top shows when it last changed.

Questions or requests about your privacy: