Carry! Privacy Policy

Because Carry! is built for lists that several people share, all of the app sits behind a sign-in — including your own private lists. You can sign in with an email address and password, with a phone number verified by a one-time SMS code, or with your Google account.

Accounts are handled for us by Firebase Authentication (Google LLC), which stores your sign-in credential and issues the token that keeps you signed in. Passwords are handled entirely by Firebase: the app never sees them and we never store them.

Account details. The email address and/or phone number you sign in with, and the account identifier created for you at sign-up.

Your profile. A first name, asked for at sign-up so other people on a shared list know who you are. Last name, a second contact address, street address, city, state, country, postcode and language preference are all optional. Your profile is saved on your device and mirrored to your account so it returns when you reinstall or sign in on another phone.

Your lists and items. Every list you create is stored on your device and backed up to your account in our database — private lists included. That backup is what brings your lists back after a reinstall or on a second device. It covers list names and descriptions, items with their quantities, units, categories, notes and favourites, whether an item is checked off and by whom, and how you have arranged things (sub-lists, pinned and archived lists).

Shared lists and activity. For a shared list we also store who its members are and what each may do (owner, editor or viewer), and an activity record of who added, edited or checked off an item and when. When you invite someone, we store the email address or phone number you typed so the invitation can reach them.

A contact-to-account entry. So that inviting someone who already uses Carry! adds them to the list straight away rather than leaving an invitation nobody can see, your account keeps an entry linking each address you sign in with to your user id and display name. It can only be looked up by someone who already knows that exact address, it cannot be listed or downloaded in bulk, and it holds nothing else.

Location — only when you ask for it. If you tap the location button and grant the permission, the app reads your device’s approximate or precise location to show nearby stores, fill in your address for you, and select the right regional item catalogue. The most recent location is kept with your profile. Carry! never reads your location in the background, and never shows it to anyone else on your lists.

Items that are not in our catalogue. When you type an item our master catalogue does not have, that item name is sent to us for review — together with your user id, display name and country — so that popular items can be added to the catalogue for everyone. Nothing else from your list is included.

• No advertising. Carry! shows no ads and does not use an advertising ID.
• No analytics or crash-reporting services. The app contains no tracking or telemetry SDK.
• No access to your contacts, photos, microphone or camera. Inviting someone means typing their email address or phone number; the app never reads your address book.
• No payment information. There are no in-app purchases.
• No background location and no location sharing between members.

We do not sell or rent your information, and we never use your lists for advertising.

We use what we collect only to run the app: to sign you in and keep your account secure; to sync your lists between your own devices and the people you share them with; to restore your lists and profile after a reinstall; to show each member item names in their own language; to remind you when something you buy regularly is missing from an active list; and to grow the shared item catalogue from the items people actually type.

That is the complete list of purposes. Your list content is never used for advertising or profiling.

People you share a list with. Anyone you invite to a list can see that list, its items, its activity feed and your display name. Lists you have not shared are readable only by your own account.

Google, as our service provider. Carry! runs on Firebase Authentication and Cloud Firestore, operated by Google LLC, which processes this data on our instructions to provide the service under the Firebase data processing terms. It is not shared with Google for its own purposes. Google describes its handling of the data in its privacy policy.

Our administrators. The in-app admin tools reach the off-catalogue item reports described above and profile records (which include an address and a last known location where you have provided them). They give no access to anyone’s lists.

Beyond this we disclose information only where the law requires it, or where it is necessary to protect the safety and rights of our users.

Your lists live in a database on your device, which is the copy the app reads and writes as you shop. The same data is mirrored to Cloud Firestore under your account, on Google Cloud infrastructure, which encrypts data at rest.

All traffic between the app and Firebase is encrypted in transit with HTTPS/TLS. Access is enforced on the server by security rules rather than by the app alone: a list can be read only by an account that is a member of it, only owners and editors can change one, and your profile record can be read only by your own account.

No method of transmission or storage is perfectly secure, but we apply these safeguards as a matter of course and keep data only for as long as it is needed to provide the app.

• Only a first name and one contact address (email or phone) are required. Last name, second contact address, address and location are all optional, and the app works without them.
• Location is read only when you tap the location button, and you can refuse or withdraw the permission at any time in your device settings.
• You can edit or delete any list or item at any time. Deleting a list removes it from your account and from everyone you shared it with.
• You can leave a shared list, and an owner can remove a member or change what they are allowed to do.
• Depending on where you live, you may have further rights to access, correct, export or restrict the processing of your personal data. Write to us at the address below and we will act on the request.

You can delete your account from inside the app: Settings → Delete account. This permanently removes your lists and their items, members and activity from our database, deletes your profile record, deletes the sign-in account itself, and clears the app’s data from the device. It cannot be undone, and shared lists you own are removed for everyone.

Simply uninstalling the app removes only the copy on your device; the backup stays under your account so your lists return if you sign in again. If you would rather we did it for you, or you cannot sign in, email info@clickgearlabs.com and we will delete the account and its data for you.

Two things outlive that deletion. Items you added to a list somebody else owns, and the record of what you did on it, stay with that list. And an item name you sent for catalogue review stays in the review queue, which only our administrators can read; the catalogue entry that comes out of it is plain text, with no name or contact details attached.