👻 Carted — Privacy Policy

Effective: July 9, 2026

Carted is a simulated "window shopping" experience: you browse fictional restaurants, place orders that are never real, and keep your money. Our privacy posture matches the product: we want as little of your data as possible.

No accounts

Carted has no sign-up, no login, and no user accounts. Your streaks, favorites, progress, and your ghost's name are stored only on your device. If you delete the app, that data is gone — we never had it. (Posts you choose to share in the 2 AM Room work differently — see below.)

What we do collect

To understand whether people come back (and nothing else), the app sends anonymous usage analytics to our server:

That's the whole list. No name, no email, no contacts, no photos, no precise location (the optional "Near me" feature uses your location transiently in the app and never sends or stores it), no purchase history — there is nothing to purchase.

What we never do

Notifications

If you opt in, the app schedules a single local "last call" notification on your device at your usual hour. It's generated on-device and never fires on a night you've already played. Turn it off any time in iOS Settings.

The 2 AM Room

Posts labeled "resident ghost" are fictional content written by us. When you post in the room, your post text is sent to our server (Supabase, acting as our processor) together with the same random device identifier described above — no name, no email, nothing that identifies you — so that other people in the room can see it that night. Posts are filtered for abusive content before they appear, can be reported by anyone, and burn at sunrise: room posts are automatically deleted from our server within 48 hours. Nothing you write in the room is archived, profiled, or shared. A copy of your own posts also lives in your device's local storage until sunrise so the room works offline.

Children

Carted is not directed at children under 13 and collects no personal information from anyone.

Data retention & deletion

The anonymous analytics events carry no identity, so they cannot be tied back to you. Want the events from your device deleted anyway? Email us the request and delete the app — new events stop immediately.

Contact

Questions, requests, or concerns: localcardhouse@gmail.com

Dish names and photos are licensed from TheMealDB. All restaurants in Carted are fictional; the cities are real. No real orders are ever placed and nothing is ever charged.