OFO Labs
Back to CartMate

Privacy Policy

CartMate

Privacy Policy for CartMate

CartMate - Grocery List Published by OFO Labs

Last Updated: July 12, 2026 Effective Date: July 12, 2026

Introduction

OFO Labs ("we", "us", "our") operates the CartMate mobile application ("CartMate", "the App"). This Privacy Policy explains how we handle information when you use CartMate.

We are committed to protecting your privacy. CartMate is designed with a privacy-first architecture: we do not collect, store, or process any personal data on our servers. Your data stays on your device and in your personal iCloud account.

Publisher: OFO Labs Contact: ofolabs@gmail.com Location: Kiel, Germany, 24105

Data We Collect

We do not collect any data.

CartMate does not collect, transmit, or store any personal information, usage data, analytics, or diagnostics on any servers operated by us or any third party. We have no servers, no databases, and no analytics infrastructure.

How Your Data Is Stored

On-Device Storage

CartMate stores your shopping list, saved items, categories, markets, and preferences locally on your device using Apple's SwiftData framework. This data remains on your device and is not accessible to us.

iCloud Sync

If you are signed in to iCloud, your data is additionally stored in your personal iCloud account using Apple's CloudKit framework. This keeps your data in sync across your own devices and backed up with your Apple ID.

  • Your iCloud data is managed entirely by Apple under Apple's Privacy Policy and Terms of Service.
  • We do not have access to your iCloud data.
  • We cannot read, modify, or delete your iCloud-stored information.
  • iCloud data is encrypted in transit and at rest by Apple.
  • You can manage or delete your iCloud data through your device's Settings under your Apple ID.

For more information about how Apple handles iCloud data, visit: https://www.apple.com/legal/privacy/

CartMate has no sharing or collaboration features: your data is never shared with other people, and no one but you (through your own devices and iCloud account) can access it.

Third-Party Services

Apple Services

CartMate uses the following Apple-provided services:

  • iCloud / CloudKit: For synchronizing your data across your own devices. Governed by Apple's Privacy Policy.
  • StoreKit: For processing in-app purchases. All purchase transactions are handled by Apple. We do not receive or store your payment information, billing details, or Apple ID.

No Third-Party SDKs

CartMate does not include any third-party SDKs, analytics tools, advertising frameworks, crash reporting services, or tracking libraries. The App communicates exclusively with Apple's services.

In-App Purchases

CartMate offers an optional one-time in-app purchase ("CartMate Pro") processed entirely by Apple through StoreKit. We do not receive your payment information, credit card details, or billing address. Purchase history and receipt validation are handled by Apple's infrastructure.

Tracking and Advertising

CartMate does not track you. We do not:

  • Use advertising identifiers (IDFA)
  • Implement any tracking pixels or beacons
  • Fingerprint your device
  • Collect usage analytics
  • Share any data with advertisers
  • Participate in any advertising networks
  • Use any attribution or measurement tools

CartMate requests no App Tracking Transparency (ATT) permission because there is nothing to track.

Permissions

CartMate requests minimal device permissions:

  • Network Access: Required only for iCloud sync. No data is sent to any server other than Apple's iCloud.
  • Silent background updates: Apple's push service (APNs) may wake the App in the background so your devices stay in sync through iCloud. CartMate never shows notifications and never asks for notification permission.

CartMate does not request access to your camera, photos, contacts, location, microphone, health data, or any other sensitive device capabilities.

Children's Privacy

CartMate does not knowingly collect any personal information from anyone, including children under the age of 13 (or the applicable age in your jurisdiction). Since CartMate collects no data whatsoever, there is no risk of children's data being collected, stored, or shared.

CartMate is rated 4+ on the App Store and contains no objectionable content. The App is suitable for use by all ages.

If you are a parent or guardian and believe your child has somehow provided personal information through this App, please contact us at ofolabs@gmail.com and we will investigate promptly.

Your Rights Under GDPR

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have certain rights under the General Data Protection Regulation (GDPR) and related legislation. Because we do not collect or process any personal data, most of these rights are satisfied by default:

  • Right of Access (Art. 15 GDPR): We hold no personal data about you. There is nothing to access.
  • Right to Rectification (Art. 16 GDPR): We hold no personal data about you. There is nothing to correct.
  • Right to Erasure (Art. 17 GDPR): We hold no personal data about you. To delete your local data, delete the App. To delete your iCloud data, manage it through Settings > Apple ID > iCloud on your device.
  • Right to Restriction of Processing (Art. 18 GDPR): We do not process any personal data.
  • Right to Data Portability (Art. 20 GDPR): We hold no personal data. Your data is stored locally on your device and in your iCloud account, both of which you control.
  • Right to Object (Art. 21 GDPR): We do not process any personal data for any purpose.
  • Right Not to Be Subject to Automated Decision-Making (Art. 22 GDPR): CartMate does not perform any automated decision-making or profiling.

Data Controller: Since we do not collect or process personal data, there is no data controller relationship. Apple acts as an independent data controller for any data processed through iCloud and StoreKit under Apple's own privacy policy.

Legal Basis: Not applicable, as we do not process personal data.

Supervisory Authority: If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local supervisory authority. In Germany, the relevant authority is:

Unabhangiges Landeszentrum fur Datenschutz Schleswig-Holstein (ULD) Holstenstrasse 98, 24103 Kiel, Germany https://www.datenschutzzentrum.de

Your Rights Under Other Privacy Laws

California (CCPA/CPRA)

We do not sell, share, or use personal information for targeted advertising. Since we collect no personal information, the California Consumer Privacy Act and California Privacy Rights Act rights are satisfied by default.

Brazil (LGPD)

We do not collect or process personal data. All rights under Brazil's Lei Geral de Protecao de Dados are satisfied by default.

Other Jurisdictions

Regardless of your location, CartMate's privacy-first design means we collect no data from any user in any jurisdiction.

Data Retention

We retain no data. All your data is stored locally on your device and/or in your iCloud account. You have full control over your data:

  • To delete local data: Delete the CartMate app from your device.
  • To delete iCloud data: Go to Settings > Apple ID > iCloud > Manage Account Storage on your device.

Security

While we do not store any user data, we take the following security measures in the App:

  • All communication with iCloud uses Apple's encrypted transport (TLS).
  • Data at rest in iCloud is encrypted by Apple.
  • No sensitive data is stored outside of SwiftData/iCloud.
  • No hardcoded secrets or API keys in the application.
  • No third-party code that could introduce vulnerabilities.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last Updated" date at the top of this document. We encourage you to review this Privacy Policy periodically.

Since we do not collect any contact information, we cannot notify you directly of changes. The current version of this Privacy Policy is always available within the App under Settings and at this page.

Contact Us

If you have any questions about this Privacy Policy or CartMate's privacy practices, please contact us:

OFO Labs Email: ofolabs@gmail.com Location: Kiel, Germany, 24105

This Privacy Policy applies to CartMate version 1.0 and later.