Privacy Policy

Last updated: May 31, 2026

BaqiCart ("we", "our", "us") provides a shared grocery cart service for households across the MENA region. This policy explains what we collect, how we use it, and the rights you have over your data.

Information we collect

Account data — your name, email, optional phone number, and default country/language.
Household data — the household name, the people you invite, and member roles.
Grocery cart activity — items added, status changes, prices entered, comments, and chat messages within a cart.
Allergen preferences — the allergens you opt to be warned about (e.g. milk, peanuts).
Device data — push notification tokens, app version, OS, and basic diagnostics needed to deliver the service.

How we use information

To run the service: render your carts, sync them across your household, and surface allergen warnings.
To send transactional notifications you opt into (item bought, chat message, household activity).
To improve reliability and product quality through aggregated, non-identifying analytics.
To protect accounts and the service from abuse.

How information is shared

We share data only as described below.

Within your household — cart activity, comments, and presence are visible to active household members by design.
With service providers — Supabase (database, auth), Vercel (web hosting), Render (API hosting), Expo (push delivery), and analytics processors. These providers act on our behalf under contract.
When required by law — if compelled by a valid legal process, after reasonable review.

We do not sell or rent your personal data to third parties.

Storage and security

Data is stored in Supabase (PostgreSQL) with row-level security policies, transport encryption in flight, and encryption at rest. Access is restricted to authorized personnel. We retain account data for as long as your account is active, plus a brief window for backups.

Your rights

Access — request a copy of the data we hold about you.
Correct — edit your profile and household data directly in the app or contact support.
Delete — close your account and request deletion of associated data.
Export — request a machine-readable export of your carts.
Withdraw consent — turn off optional notifications or analytics at any time in Settings.

Children

BaqiCart is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us data, please contact support so we can remove it.

Changes to this policy

We may update this policy as the product evolves. Material changes will be announced in the app or by email at least 7 days before they take effect.

Contact us

For any privacy question, write to support@baqicart.com.