Privacy Policy

Last updated: April 13, 2026

1. Information We Collect

When you use Kartov, we collect:

• Account information: Name, email address, and profile picture from your Google or Apple sign-in (or email/password if you sign up directly).
• User content: Lists, items, recipes, meal plans, custom categories, notes, prices, nudges, and activity you create within the app.
• Photos: Item photos, recipe photos, and receipt photos you voluntarily upload or scan.
• Device information: Device type, operating system, app version, and push notification tokens.
• Usage data: Product interactions such as which features you use, AI requests made, app version analytics, and basic activity history (used to improve the product and enforce plan limits).
• Purchase information: If you subscribe to Kartov Pro, we record your subscription status and entitlement (managed via Apple/Google and our processor — see Section 3).

2. How We Use Your Information

• Provide and maintain the Kartov service
• Sync your data across devices in real-time
• Send push notifications you've opted into
• Process recipe and receipt images using AI (Google Gemini)
• Generate smart suggestions based on your shopping history
• Track Pro entitlements and enforce subscription limits
• Improve the app and fix bugs

3. Third-Party Services

• Google Sign-In / Apple Sign-In: Authentication only — we receive your name, email, and profile picture.
• Google Gemini AI: Recipe images, receipt images, and shopping data may be sent to Google's API for processing. Google's Gemini API terms apply.
• Expo Push Notifications: Push tokens are sent to Expo's notification service to deliver notifications.
• RevenueCat & App Store / Google Play: Subscriptions are processed by Apple or Google. We use RevenueCat to verify entitlement status. We never see or store your payment card details.

4. Subscriptions & Payments

Kartov offers an optional Pro subscription. Payment is handled exclusively by Apple App Store or Google Play. We receive only the subscription status (active / expired / canceled) and product identifier, used to unlock Pro features in the app. Apple's and Google's privacy policies govern the payment data they hold.

5. Data Storage, Security & Retention

Your data is stored on our secure server (Hetzner, Germany). We use encrypted connections (HTTPS/TLS), JWT authentication, and parameterized database queries to protect your data.

We retain your data while your account is active. When you delete your account, all personal data, lists, photos, and content tied to that account are permanently deleted within 30 days (with the exception of records we are legally required to retain).

6. Data Sharing

We do not sell your personal data. We share data only:

• With members of your home (lists, items, meal plans, nudges, custom categories — by design of the shared experience)
• With third-party services listed above, strictly for functionality
• When required by law

We do not use your data for advertising and do not track you across other companies' apps or websites.

7. Your Rights

You can:

• Access all your data within the app
• Edit or delete any list, item, recipe, photo, or category at any time
• Delete your account and all associated data from Settings
• Cancel your subscription anytime through your Apple or Google account settings
• Contact us at support@kartov.app for data access, correction, or deletion requests

If you are in the EU/UK, you have rights under GDPR including access, rectification, erasure, restriction, portability, and objection. If you are in California, you have rights under CCPA including the right to know, delete, and opt out of sale (we do not sell your data).

8. Children

Kartov is not intended for children under 13. We do not knowingly collect data from children. If you believe a child has provided us personal data, contact us and we will delete it.

9. Changes

We may update this policy. Significant changes will be communicated via the app or by email.

9. Contact

Questions? Email us at support@kartov.app