Privacy Policy
Last updated: July 8, 2026
This policy explains what information One Cart collects, how it’s used, and the choices you have. One Cart is a shopping intelligence app operated by Chase Magdaleno, the individual developer of the app. If anything here is unclear, email ctmagdaleno@gmail.com and we’ll answer.
The short version
- We collect only what the app needs to work: your account, your lists, and (if you opt in) a push token so we can notify you about shared list activity.
- We don’t sell your data. We don’t share it with advertisers. We don’t track you across apps or websites.
- Your list content lives in your account. You can delete your account — and everything in it — anytime from the Profile tab.
What we collect
Account
- Email address and a hashed password — used to sign you in.
- Managed by our backend provider Supabase; passwords are hashed and never visible to us.
Profile
- Display name — shown to you and, if you share a list, to your collaborators.
- Notification preferences (whether you’ve opted into shared-list activity pushes).
- Push notification token — a device identifier issued by Apple, only stored if you allow notifications. Used to deliver pushes and nothing else.
- Beta agreement timestamp — when you accepted the beta tester agreement.
Your content
- Lists and items you create, including item name, price, URL, notes, image URL, purchase status, and priority. This is the core content of the app.
- Price history for your items — when an item’s price changes (including when our daily check of bookmarked items finds a new price), we record the price and date so we can show you the trend and alert you to drops.
- Share codes and collaborator memberships you generate when you share a list with someone.
Automatically collected
- We do not collect analytics, crash reports, advertising identifiers, location, contacts, camera or photo access, or any cross-app tracking data. There is no third-party analytics or advertising SDK in the app.
Third parties that receive data
These are the only services that receive information from the app:
| Service |
What it sees |
Why |
| Supabase (backend hosting, U.S.) |
Everything you save — account, profile, lists, items |
Data storage and authentication |
| Apple Push Notification Service (APNs) |
Push token + notification content when we send you a push |
Delivering shared-list notifications, only if you opted in |
| Expo Push Service |
Push token + notification content en route to APNs |
Push delivery pipeline |
| microlink.io |
The product URL you paste (nothing else) |
Fetching a title, image, and price for the item |
| The retailer’s website (e.g. amazon.com, target.com) |
The URL you paste |
Directly fetching product metadata |
Push tokens and URLs are passed through these services; content beyond what’s noted above is not sent anywhere.
- To let you sign in and use your account across devices.
- To store and sync your lists.
- To let you share a list with someone you choose.
- To send push notifications about activity on shared lists, but only if you opted in.
- To fetch product information from URLs you paste, so items auto-fill instead of being typed manually.
We do not use your data for advertising, profiling, or resale.
Data retention and deletion
- We keep your data as long as your account exists.
- To delete your account and all associated data, open the app and go to Profile → Delete Account. Deletion is immediate and permanent — your account, lists, items, price history, and shared-list connections are all removed.
- You can also request deletion by emailing ctmagdaleno@gmail.com from the email on the account; email requests are completed within 30 days.
- Push tokens are removed automatically when you disable notifications for One Cart in iOS Settings and the app updates the record.
Your rights
Depending on where you live, you may have rights under laws such as the GDPR (Europe) or CCPA (California), including the right to access, correct, or delete your data, and to know how it’s used. To exercise any of these rights, email ctmagdaleno@gmail.com and we’ll help.
Children
One Cart is not directed to children under 13, and we don’t knowingly collect data from anyone under 13. If you believe a child has provided us with data, email us and we’ll delete it.
Changes to this policy
If we update this policy, we’ll change the “Last updated” date at the top. Substantive changes will be noted in-app or via the email on your account.
Questions, requests, or concerns:
Chase Magdaleno — ctmagdaleno@gmail.com