Privacy Policy
How we protect your information
The Short Version
Cart Quest stores your email, a display name, and your shopping lists. That's it. No health data, no diagnoses, no tracking, no analytics, no selling your data. Delete your account and everything goes. Built by Mindful Apps (Australia).
What We Store
Account
Your email address (from Google sign-in or email registration) and a display name you choose. If you sign in with Google, we receive only your email — no contacts, calendar, or other Google data.
Shopping Data
Your shopping plans, lists, purchase history, and budget goals. This is the core of what Cart Quest does.
Payment
Handled entirely by Stripe. We store your Stripe customer ID to manage your subscription. We never see or store your card number.
What We Don't Collect
Cart Quest is a shopping list app, not a health platform. We do not collect or store health information, diagnoses, disability status, or any sensitive personal information. The app is designed with neurodivergent users in mind, but we don't ask you about or record anything related to your neurotype.
Cookies & Tracking
We use one cookie: your login session. That's it. No advertising cookies, no analytics cookies, no tracking pixels, no third-party scripts watching what you do. We don't use Google Analytics, Mixpanel, Hotjar, or any similar tools.
Server Logs
Like any web service, our servers record basic request logs (timestamps, URLs, error codes) for debugging. These logs are retained for up to 30 days and then automatically discarded. They are never shared with anyone or used for profiling.
Security
All data is transmitted over HTTPS and stored in Supabase with encryption at rest. Passwords (for email sign-up) are hashed — we can't read them. Payment processing is handled by Stripe, which is PCI DSS compliant.
Third-Party Services
Cart Quest relies on three external services:
- ● Supabase: Database and authentication (your data lives here)
- ● Stripe: Payment processing (your card details live here, not with us)
- ● Cloudflare: Hosting and DDoS protection
Each service has its own privacy policy. We chose them for their security track records.
Your Data, Your Control
Two things you can do at any time from your account settings:
- ● Update your display name
- ● Delete your account — this permanently removes your account, all shopping lists, plans, purchase history, and cancels your subscription. There is no undo.
Family Use
Cart Quest accounts are for adults (13+). Children are welcome and encouraged to use the app alongside a parent or guardian — we love hearing about kids helping with the shopping! We do not create accounts for or knowingly collect personal information directly from children under 13.
Changes
If we change this policy, we'll notify you via email. We won't quietly reduce your privacy protections.
Contact
Questions about your privacy?
Mindful Apps
Australia
Email: mindfulapps+privacy@icloud.com
Last updated: 4 April 2026