Privacy policy

Last updated 26 September 2026

CartCompare is a grocery price-comparison app run by an independent developer in Australia. This page explains what the app and its server store about you, why, and how to delete it. Questions: [email protected].

What we store

• Your account: your email address and a salted, hashed version of your password (we never store the password itself), whether you've confirmed your email, and when you signed up.
• Your lists and favourites: the shopping lists you create or join, the products on them, who added each item, who's a member of each list, and the products you save as favourites.
• List invitations: when someone invites you to a list by email, who invited you, to which list, and when, until you accept or decline. Until then, people on that list can see your email address as invited.
• Sign-in sessions: a random token for each device you're signed in on, and when it was last used. Sessions end when you log out or after 30 days without use.
• Email links: password-reset and email-confirmation links, stored only as a one-way hash and expiring after 1 hour (reset) or 7 days (confirmation).

What we don't store or do

• We don't keep a history of what you search for linked to you. Recent searches are cached for 15 minutes to avoid asking the supermarkets twice, and server logs record requested addresses (which include search words), but neither records who made the request.
• No advertising, no analytics or tracking SDKs, and we don't sell or share your data.
• No location, contacts, photos or other phone data.

Stored only on your phone

The app remembers products you've recently used (to show them first and suggest them as you type) and your light/dark theme choice. These stay on your device and are never sent to us.

Who else is involved

• Woolworths, Coles and Aldi: to get prices, your search words are sent to Woolworths' website, to a third-party Coles price service (via RapidAPI), and matched against Aldi's public product pages. Your account details are never sent to them.
• Cloudflare carries all traffic between the app and our server (and so sees your IP address and the requests passing through), and hosts this domain.
• Resend delivers our emails (password reset, email confirmation, list invitations), so it receives your email address and the message. An invitation email includes the inviter's email address and the list's name.

IP addresses

Your IP address is used to limit abuse (for example, too many searches or sign-ups in a short time). These counters are kept only in memory, for at most an hour, and aren't linked to your account. Our server logs don't record IP addresses.

Where it's kept and for how long

Your data is kept on our server in Australia for as long as you have an account. Nightly backups of the database are kept for 30 days, on the same server and in Cloudflare's R2 storage.

Deleting your account

You can delete your account in the app (menu → Delete account) or on the delete account page. This immediately and permanently deletes your email, password, favourites, sessions, pending invitations, and any lists only you are on. Shared lists you created pass to another member so they don't lose them; items you added to shared lists stay on those lists. Copies in backups disappear within 30 days.

Children

CartCompare isn't directed at children under 13.

Changes

If this policy changes, we'll update this page and the date at the top.