Effective date: July 30, 2026
Review draft — this policy reflects how CartPal actually works today and is pending final legal review.
This Privacy Policy explains how Innovaiden, Inc. ("Innovaiden", "we", "us") collects, uses, and protects your information when you use the CartPal — Family Shopping Assistant iOS app ("CartPal"). CartPal is a private, household-based shopping app — not a social network, and never an advertising platform that sells your data.
If anything here is unclear, contact us at admin@innovaiden.com.
1. What CartPal is
CartPal lets a household keep shared shopping lists, shop them aisle-by-aisle in a store, scan receipts to track purchases and prices, photograph a pantry or fridge to keep a home inventory, and see private spending insights. Lists are shared only with the people you invite.
2. Information we collect
Account information. Your email address, a username/password, and an optional display name — or, with Sign in with Apple, the name/email Apple shares (including Apple's private relay address if you choose to hide yours).
Lists and items. The shopping lists you create, the items on them (including quantities, notes, and optional item photos you take), who added or checked off what, and each list's market (country) setting.
Receipts you scan. When you photograph a receipt, we store the image privately and use AI to read its lines (products, prices, discounts, store, date, total). Payment card numbers are redacted automatically at reading time and again before storage — full card numbers are never kept. The payment method is stored only in a masked form (for example "VISA ****1234"). If a loyalty-card number appears, it is stored encrypted and shown only to you.
Pantry photos. If you use Pantry Snapshot, the photos you take of your pantry, fridge, or freezer are stored privately for your household. You review what the AI found before anything is saved.
Derived product and price data. From confirmed receipts we build product records (name, category) and anonymous price observations — store, product, price, and date only, with no link to your account by construction. These anonymous observations power price comparison for everyone.
Location — used transiently, never stored as history. When you use nearby-store features or arrival prompts, your position is used on the device (and sent, only for the nearby-store query, as a single point) to find stores around you. We do not build or keep a history of your movements.
In-store signals (optional feature). If in-store aisle sorting is active, anonymous, aggregate-only radio-environment fingerprints may be used to improve aisle ordering. These carry no user identifier.
Service logs. Standard technical logs (API calls, errors, timestamps) for reliability and abuse prevention.
3. How we use your information
- To run CartPal: sync your lists across your household, sort your shop by aisle, parse your receipts, keep your pantry inventory, and compute your private insights (categories, spending, budgets, price history).
- To improve shared data quality: your receipt confirmations teach CartPal your product nicknames (private to you) and contribute anonymous price observations (never tied to you).
- Free tier only: the recommendations area may include clearly labeled "Sponsored" items chosen uniformly from our own catalog — not targeted using your personal data, and with no third-party advertising SDKs in the app.
- We do not sell, rent, or lease your personal information. We do not use your data to train AI models.
4. Who can see your data
- Your household. Lists and their items are visible to the people on those lists. Household features (pantry, insights, budgets) are visible to contributing household members.
- Anonymous price data. Price observations from receipts join a shared pool that is anonymous by construction (store + product + price + date only).
- Nobody else. No public profiles, no cross-household visibility, no data brokers.
5. AI processing of your photos
Receipt and pantry photos are processed by AI models running on Amazon Web Services (AWS Bedrock) in our own cloud environment, solely to extract the items you asked for (receipt lines, pantry contents, weekly-ad items). Your images and data are not used to train these models. Card-number redaction runs before any parsed content is stored.
6. Service providers
- Amazon Web Services — hosting, private image storage, databases, and AI processing, under our control.
- Apple — Sign in with Apple and subscription billing (we never see your payment card; Apple manages the transaction).
Each processes data only to provide their service to us.
7. Your controls and deleting your data
- Edit or delete any item, list, receipt, or pantry snapshot in the app.
- Archive lists instead of deleting them if you want to keep the history.
- Delete your account in-app (Settings → Delete account): this permanently removes your account, lists you own, receipts and their images, and pantry photos (private photo storage is swept). Already-anonymous price observations persist because they were never linked to you.
- Questions or requests: admin@innovaiden.com.
8. Retention
Your content is kept while your account exists. Verification and reset codes expire within minutes. Deleted content is removed from live systems promptly; short-lived backups age out on a rolling basis.
9. Security
Data is encrypted in transit; images live in private storage accessed through short-lived signed links; loyalty numbers are encrypted at rest; payment card numbers are never stored in full. No system is completely secure, but we design so that a breach of shared data would not expose who bought what.
10. Children
CartPal is a household tool intended for adults; accounts are not directed at children under 13 (or the equivalent minimum age in your country). A parent may of course keep lists that mention their children's needs.
11. Your privacy rights
GDPR (EEA/UK/Switzerland). We process your data to perform our contract with you (running CartPal), with your consent where asked (for example location and photos), and for our legitimate interests in securing and improving the service. You have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to complain to your supervisory authority.
US state rights (including California). You have the right to know, correct, and delete personal information we hold about you. We do not sell or share personal information as defined by the CCPA/CPRA.
Exercise any of these in-app or via admin@innovaiden.com.
12. Changes to this policy
We will post updates here and change the effective date above. Material changes will be highlighted in the app.
13. Contact
Innovaiden, Inc. 30 N Gould St STE R, Sheridan, WY 82801, USA admin@innovaiden.com
CartPal is covered by Innovaiden's corporate Privacy Policy where this app policy is silent.