Privacy Policy

You can browse deals without an account. If you create one, we collect:

• Account details: your email address and a password. Your password is stored only as a scrambled (hashed) value by our sign-in provider, so we can't read it.
• Your lists: the items and quantities on your shopping list.
• Your shopping trips: when you start shopping, a copy of your list as it stood, what you marked as got 'em, not available or no need, and the savings figure for each store you check out.
• Price reports: when you tell us a price looks wrong, the item, the reason, any note you add, and your account.
• Basic usage counts: when you print or email your list, we record that it happened along with the number of items and the totals, so we can tell whether the app is helping people shop.
• Analytics information: our analytics services use cookies and similar technologies to collect information about how you use the site, such as the pages you view, what you click, your device and browser, your IP address (and the approximate location it implies), and the site that referred you.
• Technical information: like most websites, our hosting provider logs standard details of each visit (such as your IP address, browser and the page requested) for security and to keep the service running.

We don't collect payment details (the app has no payments), your precise location, or anything from your contacts.

• To run your account, keep you signed in, and save your lists and trips.
• To fix wrong prices and improve the accuracy of the deals we show.
• To understand how the app is used and whether it helps people save, including through analytics services.
• To keep the service secure and prevent abuse.
• To send you account emails, such as confirming your sign-up. If we ever offer a newsletter or deal alerts, they will be opt-in.

We use two kinds:

• Essential: a cookie that keeps you signed in. The account can't work without it.
• Analytics: cookies and tags that tell us which pages and features are used, so we can improve the site.

We don't currently use advertising cookies. If we add advertising services later, for example to measure our own ad campaigns or to show ads, we'll update this page and ask for your consent first where the law requires it. Where the law requires it, we also ask for your consent before setting analytics cookies. You can block or delete cookies in your browser settings; blocking the essential one will stop you from staying signed in.

We never sell your email address, your lists or your account details. We do use service providers, and they handle data on our behalf:

• Supabase — our database and sign-in service (hosted in the United States).
• Vercel — hosts the website (servers in the United States).
• Cloudflare — manages our domain and forwards mail sent to hello@brokedacart.com.
• Analytics providers — services that measure how the site is used. They receive the usage information described above through cookies and similar tools, and we'll list them here as we add them.
• An email delivery service — when the app sends email, we'll use a delivery provider, and we'll name it here when we do.

We don't share personal information with advertising platforms. If that ever changes, it could count as “selling” or “sharing” personal information under some state privacy laws, and we would update this page, ask for your consent where required, and give you a way to opt out before it began.

Some product photos are loaded directly from Open Food Facts, a public product database. Like any website, it can see your IP address when your browser fetches an image.

We may also share information if the law requires it, to protect our rights or users' safety, or as part of a sale or transfer of the business, in which case we'd tell you.

We keep your account information, lists and trips while your account is open. If you ask us to delete your account, we delete your account and the lists, trips, price reports and usage records tied to it. We may keep totals and counts that no longer identify you, and routine server logs for a short time.

You can remove items from your list, or clear the whole list, at any time. To see, correct or delete the information we hold about you, or to close your account, email hello@brokedacart.com. We'll respond within 30 days. There isn't a delete-account button in the app yet, so email is how to do it.

Analytics and cookies: you can decline non-essential cookies when we ask, change your browser's cookie settings, or turn on a browser or device setting like Global Privacy Control. You can also email hello@brokedacart.com if you want your information left out of analytics.

If you live somewhere with privacy laws that give you additional rights (for example, California or the European Union), you can use the same address to exercise them.

We use reputable providers, encrypted connections and access controls that keep each person's list private to them. No system is perfectly secure, so please use a strong password and don't reuse it elsewhere.

Broke Da Cart is not for children under 13, and we don't knowingly collect information from them. If you think a child has given us their information, email hello@brokedacart.com and we'll delete it.

Your information is stored and processed in the United States. If you use the site from elsewhere, you understand it will be handled there.

If we make meaningful changes, we'll update the date at the top and, where appropriate, let you know by email or on the site before they take effect.