CartPath Privacy Policy

Draft · Prepared September 7, 2026. Operator contact details must be confirmed before publication.

This policy describes the information handled by the CartPath grocery planner, including its website and home-screen app.

Information we use

When you sign in, CartPath receives an account identifier and email address from its sign-in provider. Guests use a randomly generated identifier stored in their browser. Both signed-in and guest lists are saved on our server; a device copy supports recovery.

Saved information includes grocery lists for each store, quantities, checked items, recipes, staples, pantry inventory, store addresses or saved location text, purchase history, reminder preferences, and shopping-trip history. Imported recipes may retain the original ingredient and direction text, cleaned ingredient fields, source platform, source URL, import method, confidence, and your corrections. Shopping timers record start and completion information to personalize estimates. When reminders are enabled, CartPath also stores the selected shopping days and time, reminder timing, store, and timezone. The app retains up to 100 purchase-history entries, 100 completed trip records, and 12 timing samples per store.

Usage measurement

For signed-in accounts, CartPath records privacy-protected app sessions with a session identifier, start and recent-activity times, account identifier, and whether the app appears to be running as an installed home-screen app or in a browser. A 30-minute inactivity boundary prevents ordinary refreshes and quick reopenings from being counted as separate sessions. CartPath also records limited events for meaningful actions such as creating a list, adding an item, sorting, completing a trip, importing or creating a recipe, using voice or photo entry, using a staple, enabling reminders, and installing the app when the platform reports that reliably. Event records can include a store chain, broad entry method, counts, duration, and an acquisition source or campaign when supplied; they do not include grocery names, recipe contents, pantry contents, precise locations, or detailed purchase history.

CartPath uses this information to calculate service usage, product adoption, funnels, and retention. Aggregate reporting and privacy-conscious account engagement rows are restricted to the CartPath owner. Ordinary users cannot access another account’s session or event history. Usage tracking is designed not to prevent normal CartPath actions if measurement fails.

Reminders and notifications

Grocery reminders are optional and remain off until you enable them. Your selected routine is saved to your account. Notification permission belongs to each browser or device and can be revoked. CartPath does not continuously track or monitor your location. Completed-trip patterns may be used to suggest a different reminder schedule, but CartPath will not silently change your selected routine.

Photos, Notes, and voice

CartPath reads selected photos and screenshots using image-to-text software running in your browser. The current app does not upload these original images to its grocery database. Reviewed ingredients are saved when you add them. Pasted Notes and text files are processed in the browser; the selected items or recipes you save are stored with your data. CartPath does not access your Notes library.

Voice entry uses your browser’s speech-recognition service. Depending on your browser and device, audio may be processed by an external speech provider under its own privacy terms. CartPath does not itself store audio recordings. Text you add to lists or recipes is saved.

Location and recipe links

Location is requested when you choose “Use my current location” and requires device permission. The current app suggests coordinates for you to review. If you save the suggestion, that location text becomes part of your stored data. It does not continuously track your movements. Store details may also appear in purchase history.

When you import a traditional recipe link, our server requests the linked webpage and extracts recipe information. The destination website receives a request from our hosting service. Social-media links are identified separately. CartPath does not download or scrape third-party videos when permitted content is unavailable; it instead asks you to supply screenshots or recipe text.

Why we use information

We use information to operate your lists, save and sync your changes, suggest recipes from pantry ingredients, remember purchases and staples, estimate shopping time, and troubleshoot the service.

Service providers and sharing

CartPath uses OpenAI Sites for hosting and sign-in integration, Cloudflare-backed database infrastructure for saved data, Google Fonts for typefaces, and jsDelivr and image-to-text resources for photo reading. These services may receive technical information such as IP addresses, browser details, or request logs when contacted. Your browser’s speech provider may process voice input. Their own privacy terms also apply.

The current application does not include advertising trackers or features that sell your grocery data or share it for targeted advertising. Service operators may access information as necessary to provide, maintain, or secure the service, or comply with applicable legal obligations.

Storage and your choices

Saved lists and other account data remain until you remove them or request deletion, subject to the history limits above. Device storage includes a guest identifier, local data copies, preferences, and cached app files. Clearing browser storage does not itself delete the server copy.

Use “Delete my data” in CartPath to delete the current account’s saved database record, its CartPath session and feature-event records, and the guest record associated with this browser, and clear CartPath’s local data on this browser. Close other CartPath tabs and devices first: older open sessions or offline copies can otherwise save old data again. Clear CartPath storage on other devices too. Deletion does not delete your ChatGPT account or independently retained service-provider logs or backups, whose retention is governed by those providers.

You can edit individual items, recipes, and pantry entries, clear purchase history, and deny or revoke camera, microphone, and location permissions in your device or browser settings. The current app does not respond differently to Do Not Track signals and does not perform cross-site advertising tracking.

Children

CartPath is intended for a general adult audience and is not directed to children under 13. If you believe a child has submitted personal information, contact the operator to request removal.

Changes and contact

We will update this page and its effective date when our practices change, including when retailer, pricing, or coupon services are introduced.

Privacy contact: awaiting operator confirmation before publication.