Privacy Policy

You can browse deals without an account. Site usage, feedback you choose to send, and technical information (below) can come from any visitor; the rest only if you create an account:

• Account details: your email address and a password. Your password is stored only as a scrambled (hashed) value by our sign-in provider, so we can't read it.
• Your preferences: your home area (a neighborhood you pick, not your address), which groups' deals you want to see (such as kama'aina, military, kupuna or keiki at home), and whether you have Amazon Prime (so we can show Whole Foods' Prime prices). If you set these without an account, they're kept in a cookie in your browser instead.
• Your lists: the items and quantities on your shopping list.
• Your shopping trips: when you start shopping, a copy of your list as it stood, what you marked as got 'em, not available or no need, and the savings figure for each store you check out.
• Saved and used deals: the deals you save, and when you tap “I used this deal”, the date and the amount you tell us you saved or spent, so we can add up your savings.
• Deal alerts: what you follow (a kind of product, search words, a kind of deal, a business, or new deals near your home area) and how far each reaches (near your home area or all of O'ahu), how often you want alerts, whether they come by email, notification or both, which deals we've already sent you (so we never send the same one twice), and a private code that lets the unsubscribe link in our emails work without you signing in.
• Notifications (apps): if you turn on notifications in one of our apps, a code that lets us send notifications to that phone (a “push token” issued for our app through Apple or Google), whether it's an iPhone or an Android phone, and when it was registered. We don't receive your phone number or anything else about your phone.
• Location (apps): only when you tap “Near me” or “Use my location”, and only while the app is open, the app asks your phone for its approximate location (on Android it asks only for approximate location) and works out the nearest O'ahu neighborhood on your phone. We never receive or store your coordinates. Only the neighborhood is used, to show nearby deals or, if you choose, as your home area.
• Account status and plans: when your account and free trial started and end, what access it has, and, if you subscribe, your plan, its status and renewal date, and the reference numbers our payment processor gives you and your subscription.
• Payments: when you subscribe on our website, you enter your payment details on Stripe's secure page, and Stripe processes your payments. We receive your plan, its status, dates and amounts, but never your full card number.
• Subscribing in our apps: if you subscribe in one of our apps, Apple's App Store or Google Play handles the payment. We receive your subscription's status, dates and a purchase reference (through RevenueCat, below), never your payment details.
• Referrals: your invite code, the name you choose to show on your invites (optional), and a record of who you invited and who invited you: when they signed up, when their first payment was made, and any reward. If you open a friend's invite link, your browser keeps the invite for up to 30 days so you get the longer trial when you sign up.
• Repeat-trial and referral checks: a standardized form of your email address (for example, ignoring dots in a Gmail address), a scrambled, one-way form of the network address you signed up from, and a note in your browser that an account was created there. We use these only to stop repeat free trials and to spot referrals that look like the same person; the last two never block anything on their own. When a friend you invited pays, we also ask Stripe whether they paid with a card saved on your account; we compare Stripe's card codes and keep only the result, never card numbers.
• Price reports: when you tell us a price looks wrong, the item, the reason, any note you add, and your account.
• Feedback: when you use “Send feedback”, what it's about, your rating if you give one, your message, the page you were on, and your account if you're signed in (or, if you're not, an email address if you choose to leave one for a reply). To stop spam, we also keep a scrambled, one-way form of your network address, used only to limit how many messages can be sent in an hour. A copy of each message is emailed to our inbox.
• Basic usage counts: when you print or email your list, we record that it happened along with the number of items and the totals, so we can tell whether the app is helping people shop.
• Site usage (analytics): which pages are viewed, the site that sent a visitor here (and any campaign tags in the link), the kind of device and browser, the device's time zone, what people search for on the site and which product comparisons they open. This part works the same whether or not you have an account, uses no cookies and stores nothing in your browser, and isn't tied to your account or your name.
• How you found us: if you arrive from a link carrying campaign tags or an ad's click code (for example, from one of our ads or a flyer's QR code), your browser keeps those tags for up to 30 days, along with the site that sent you and when you arrived. If you create an account in that time, we save them with your account, so we can tell which ads and links bring people who sign up. For a click from a Meta (Facebook or Instagram) ad, we also save your browser type. If you came from a Meta or Google ad, we tell that platform when you sign up or subscribe; see “Who we share it with”.
• Ad measurement in our apps: our apps include Meta's software development kit (SDK). It tells Meta when the app is installed and opened, and when a new account first signs in to it, along with basic details of the phone and app (such as the phone model, operating system, app version, language and time zone) and an anonymous ID Meta's software creates for that installation. On Android it also collects the phone's advertising ID, which you can reset or delete in your phone's settings, and when you start a free trial or subscribe in the app, RevenueCat (below) tells Meta, with that anonymous ID and the plan's price. On iPhone, our app doesn't ask to track you or use Apple's advertising identifier, and Meta receives these results only in the aggregated, anonymous form Apple allows. None of this includes your email address or your list.
• Account activity: if you have an account, we also record key steps you take, such as signing up, adding to your list, following something, starting a shopping trip, viewing plans, and subscribing or canceling, whether you use the website or our apps. These are linked to an internal account number, not your email address, and never include what's on your list or the search words you follow. Our apps contain no analytics software of their own; the only outside measuring software in them is Meta's, described above.
• Technical information: like most websites, our hosting provider logs standard details of each visit or app request (such as your IP address, browser or app version, and the page or data requested) for security and to keep the service running.

We don't collect your full payment card details (Stripe, Apple or Google handle them), your precise location (your home area is a neighborhood you pick, and “Near me” in the apps works out a neighborhood on your phone), your phone number, or anything from your contacts or photos, and we don't follow what you do on other websites.

• To run your account, keep you signed in, and save your lists and trips.
• To show you deals for your home area, the groups you chose, or, in the apps, the neighborhood you're in when you ask, save the deals you like, and add up what you save.
• To run free trials and paid plans, and to bill you through Stripe if you subscribe on our website (or, in our apps, to recognize a subscription bought through the App Store or Google Play).
• To run the referral program: give invited friends their longer trial, apply the free months you earn, and stop abuse.
• To fix wrong prices and improve the accuracy of the deals we show.
• To understand how the site is used and whether it helps people save: which features get used, where visitors come from, and where people get stuck, using the analytics above and our own records (for example, how many lists are printed or emailed, and the totals on them).
• To keep the service secure and prevent abuse.
• To send you email: account emails (confirming your sign-up, resetting your password), your shopping list when you ask us to email it to you, deal alerts for what you choose to follow, emails about your free trial, plan and receipts, and a note when you earn a free month from a referral. Alerts are opt-in: you get them only after following something, and every alert and trial email has a one-click unsubscribe.
• To send deal alerts as notifications on your phone, if you turn notifications on in one of our apps.
• To measure our advertising: which ads and links bring people who install our apps, sign up and subscribe, and what each costs us (see “How you found us” and “Ad measurement in our apps”).

We use only cookies the site needs: the ones that keep you signed in; your home area and deal preferences if you set them without an account; an invite from a friend's link, for up to 30 days; and a note that an account was created in this browser, for a year, used only for the repeat-trial checks above. Our analytics are set up to work without cookies or anything else stored in your browser: to tell visits apart, PostHog combines your IP address and browser details with a secret value that changes every day, so a visitor can't be recognized from one day to the next. The site also keeps a few small notes in your browser that never leave it unless described here: whether you've seen the welcome tour, your recent searches, and, if you arrived from a tagged link or an ad, those campaign tags for up to 30 days (see “How you found us”), which are sent to us only if you sign up. Stripe's checkout and billing pages are run by Stripe and use its own cookies, described in Stripe's privacy policy. We don't use advertising cookies or ad pixels.

Our apps don't use cookies. They keep you signed in by storing your sign-in securely on your phone (in the iPhone keychain or the Android keystore) and remember a few settings on the phone. Meta's software in the apps keeps its anonymous ID for the installation on the phone (see “Ad measurement in our apps”).

If we add other advertising services, we'll update this page first and ask for your consent where the law requires it. You can block or delete cookies in your browser settings; blocking the essential ones will stop you from staying signed in.

We never sell your email address, your lists or your account details. We do use service providers, and they handle data on our behalf:

• Supabase — our database and sign-in service (hosted in the United States).
• Vercel — hosts the website (servers in the United States).
• Cloudflare — manages our domain name.
• Google Workspace — hosts our inbox, so it holds any email you send to hello@brokedacart.com and the copies of feedback sent through the site.
• Postmark — sends our emails: account emails, lists you ask us to email you, deal alerts, trial and referral emails, and the copy of your feedback that comes to our inbox. It receives your email address and each email's contents (your list, the deals in an alert, or your feedback). We turn off its open and click tracking.
• Stripe — processes payments when you subscribe, and runs the checkout and billing pages. It receives your email address and the payment details you enter, and tells us your plan, its status and amounts. Stripe's use of your information is also covered by its own privacy policy.
• PostHog — our analytics service (data stored in the United States). It receives the site usage and account activity described above. It uses your IP address only to count visits without cookies, then discards it: it doesn't keep the address or work out a location from it. It never receives your email address or your list.
• Expo — builds our apps, sends their notifications and delivers app updates (based in the United States). It receives your phone's push token and each notification's contents (for example, the deals in an alert), and, when the app checks for an update, the app's version, whether it's an iPhone or Android phone, and a random ID for that installation.
• Apple and Google — deliver our apps' notifications to iPhones (Apple Push Notification service) and Android phones (Firebase Cloud Messaging), receiving the push token and the notification. When you download our apps, or subscribe in them, Apple's App Store or Google Play handles it under its own terms and privacy policy.
• RevenueCat — keeps subscriptions bought in our apps in step with plans bought on our website. It receives an internal account number and your App Store or Google Play purchase records, not your payment details, and, on Android, the anonymous ID Meta's software creates, which it uses to tell Meta when you start a free trial or subscribe.
• Meta and Google — to measure our ads. When you come to the website from one of our ads and then sign up or subscribe, we tell that ad's platform, using only the ad's click code (and, for Meta, your browser type). In our apps, Meta's software and RevenueCat send Meta what's described under “Ad measurement in our apps”. This lets us see which ads work, and lets the platform show our ads to people likely to find them useful. We never send your email address or your list. Meta and Google handle this information under their own terms and privacy policies.

People you invite see the name you choose to show on your invites, if you set one, and a deal you share with your invite. The person who invited you never gets your name or email address from us; they're told only when a friend's subscription has earned them a free month.

Some state privacy laws call this kind of sharing with advertising platforms “selling” or “sharing” personal information, even though no money changes hands. You can opt out at any time; see “Your choices”.

We may also share information if the law requires it, to protect our rights or users' safety, or as part of a sale or transfer of the business, in which case we'd tell you.

We keep your account information, preferences, lists, trips, saved and used deals, alert settings and referral records while your account is open. When you delete your account (on your Account page, or by asking us), we cancel any plan bought on our website and delete your account right away along with the lists, trips, saved and used deals, alerts, notification tokens, referral records, price reports and usage records tied to it, and we ask our analytics service to delete the account activity it holds, which it does within minutes. Records of payments are kept as long as the law requires for tax and accounting, and Stripe keeps its own records under its policy. Feedback you sent is kept without your account or name. Site usage that was never tied to an account is kept by our analytics service for up to a year. A phone's push token is deleted when you sign out of the app on that phone, when the notification service tells us the phone no longer accepts our notifications, or when you delete your account. Deleting your account doesn't cancel a subscription bought through the App Store or Google Play; cancel it in your store account. We may keep totals and counts that no longer identify you, and routine server logs for a short time.

You can remove items from your list, or clear the whole list, at any time, and unsave any deal. On your Account page you can change your home area and deal preferences, change or remove the name on your invites, unfollow anything and set alert emails to daily, weekly or off, and manage or cancel your plan; every alert and trial email has an unsubscribe link. You can also change your email address or password, or delete your account, on your Account page. To see or correct the information we hold about you, or for anything else, email hello@brokedacart.com. We'll respond within 30 days.

In our apps, you can turn notifications on or off in your phone's settings, choose email, notifications or both in Saved, under Following, and allow or refuse location; “Near me” isn't needed, since you can always pick a neighborhood instead. You can also delete your account in the app, on its Account screen.

If you'd like your account activity left out of our analytics, email hello@brokedacart.com and we'll do that. To stop us sharing information with Meta and Google for our ads, use our Do Not Sell or Share My Personal Information page or, in our apps, the switch under “Your privacy choices” on the Account screen. We treat a browser's Global Privacy Control signal as the same opt-out. Once you opt out, an opted-out browser keeps no ad click codes, nothing about your account is sent to an ad platform, and the app on that phone stops reporting to Meta. On Android you can also reset or delete your advertising ID in your phone's settings.

If you live somewhere with privacy laws that give you additional rights (for example, California or the European Union), you can use the same address to exercise them.

We use reputable providers, encrypted connections and access controls that keep each person's list private to them. No system is perfectly secure, so please use a strong password and don't reuse it elsewhere.

Broke Da Cart is not for children under 13, and we don't knowingly collect information from them. If you think a child has given us their information, email hello@brokedacart.com and we'll delete it.

Your information is stored and processed in the United States. If you use the site from elsewhere, you understand it will be handled there.

If we make meaningful changes, we'll update the date at the top and, where appropriate, let you know by email or on the site before they take effect.