Data Policy

Cruze Cart stores only the minimum data necessary to operate the service. The following information is stored in our database (powered by Supabase):

• Display name — your chosen display name
• Email address — used for account login and service communications
• Name and date of birth — first and last name if provided, and date of birth (collected at account creation to confirm the 13+ minimum age)
• Account metadata — account creation date, last sign-in timestamp, subscription status, promo-code redemptions
• Favorites — places you save (name, address, coordinates), synced to your account when signed in
• Notification preferences and push tokens — which alert categories you've enabled, and device tokens used to deliver them
• Group Cruze session data — while a group is active: membership, shared destination, shared routes, and live member positions (ephemeral; removed when the group ends or expires)
• Cruze Cart Family membership — who is in a Family, each member's role (organizer, co-organizer, member), and join and leave events, so the shared subscription can be applied and the organizer can manage the group
• Path reports — reports you submit about path conditions: type (police or hazard), hazard kind, location, timestamp, expiry, and the account id of the submitter (never shown to other riders), plus your votes confirming or clearing other riders' reports
• Merchandise orders — for website merch purchases: your name, email, shipping address, the items ordered, and order status, kept to fulfill the order and handle returns
• Records of legal acceptance — which document and version you accepted, when, the email used, and the IP address, kept as evidence of consent (retained after account deletion; see "Data Deletion")
• Scavenger hunt data — if you play a hunt: your participation and progress, and for each answer submitted, the location you submitted it from, the answer, whether it was correct, the distance from the target, and the time — stored against your account; plus winner and prize records
• Email preferences and suppression — your marketing opt-in state and unsubscribe token; and, if mail to you bounces or is marked as spam, your address on a suppression list we keep so we stop emailing you
• Diagnostics (not tied to your account) — sent only while "Share Anonymous Usage Data" is enabled in the app, and saved without your account or any identifier for your device. The routing comparisons arrive with a random identifier created when the app is installed; it is used only to limit how many one installation can send in a day and is removed before they are saved (for that limit we keep a short one-way code and a count for the day, with no route, place, or time attached, deleted once the day is over):
  • End-of-ride summaries of the route actually traveled, for rides with directions (including any stretch off the suggested route before it is recalculated) and for rides without directions while the app is open on screen — nothing is recorded with the app closed or the phone locked outside navigation. Your phone matches its GPS to the mapped paths on the device and sends the cart-path segments covered, the distance and travel speed on each, where the cart stopped, the ride's duration and distance, the time and distance spent moving (at 1 mph or faster, from the GPS speed), and, for rides with directions, the areas where the rider left the mapped paths. About 150 m is trimmed from each end of the ride on your device so the summary never shows where a ride began or ended, and the start time is floored to a 15-minute bucket. Speeds are counts in 4 mph bands rather than a trace, stops are a count and a number of seconds on a path, and an off-path area is a grid square of about 110 m — never one inside the trimmed ends. Raw GPS positions are never part of a summary.
  • Routing-quality comparisons, whose route start/end coordinates are rounded to about 1 km on your device before upload
  • Counts of how often in-app business listings were shown and tapped
• Partner/advertiser data — business name, ad content, and campaign settings for users of the partner portal

We do not store:

• Credit card numbers or bank account details
• Passwords in plain text
• A continuous history of your GPS locations or drives. Two optional features do store an individual location against your account — submitting a path report, and submitting a scavenger-hunt answer — and both are listed above. Nothing else records where you drive in a way that is linked to you.

User authentication and our database are powered by Supabase, an open-source backend platform. When you create an account or sign in (email/password, Sign in with Apple, or Google), your credentials are handled through Supabase's authentication service.

• Passwords are hashed using bcrypt — never stored in plain text
• Session tokens are encrypted and stored securely
• Supabase stores your email and encrypted password in their managed database
• Supabase's infrastructure is hosted on AWS and is compliant with SOC 2 Type II

Supabase's privacy policy is available at supabase.com/privacy.

Cruze Cart Premium subscriptions are purchased as in-app purchases through Apple's App Store on iOS and Google Play on Android. Apple or Google is the merchant of record and processes the payment; we never see your payment details.

• On iOS, we receive subscription status from Apple (product, renewal state, expiration) to unlock premium features on your account
• On Android, we receive the same subscription status from Google Play — delivered to our servers through Google Play Real-time Developer Notifications and verified against the Google Play Developer API — to unlock premium features on your account
• Free-trial eligibility, billing, and refunds are determined and handled by the applicable store (Apple or Google), under that store's terms

Apple's privacy policy is available at apple.com/legal/privacy, and Google's at policies.google.com/privacy.

Advertising purchases in the Partner Portal and merchandise orders on our website are handled by Stripe, a PCI-DSS Level 1 certified payment processor.

Merchandise orders. Merch checkout is hosted by Stripe Checkout. To fulfill and ship an order we collect your name, email address, and shipping address along with the items ordered, and we use them only to fulfill the order, send order and shipping updates, and handle returns or replacements. Stripe retains its own record of the order and the transaction under its terms, including after you delete your Cruze Cart account.

Cruze Cart does not store any payment information in our database. We never see, handle, or store your credit card number, CVV, expiration date, or bank account details. All payment data is transmitted directly from your device to Stripe's secure servers.

• We store only opaque Stripe reference IDs to associate a partner account with its billing records
• Campaign status (active, cancelled, refunded) is stored in our database to run the ad products
• No full card numbers, CVVs, or bank details ever touch our servers

Stripe's privacy policy is available at stripe.com/privacy.

The Cruze Cart apps render maps using MapTiler vector tiles on top of OpenStreetMap data. Cart-path data and routing are processed on your device.

• Displaying the map requests tiles from MapTiler's servers, which — like any web request — receive your IP address and the map areas requested
• Cruze Cart does not receive or store any data from your map interactions

MapTiler's privacy policy is available at maptiler.com/privacy-policy.

The app sends your approximate position (rounded to about 1 km) to OpenWeather to check conditions near you — while navigating if weather alerts are enabled, and also while the map is on screen to show current conditions. This lookup goes directly from your device to OpenWeather — your position is not sent to Cruze Cart's servers.

OpenWeather's privacy policy is available at openweather.co.uk/privacy-policy.

Destination search is powered by Google Places. When you type a search, your query text (and an approximate area used to rank results) is sent to Google. Google's privacy policy is available at policies.google.com/privacy.

Some notifications never leave your device. Weather alerts and Cruze Reminders are local notifications — the app schedules and shows them on your phone, and they are not routed through Apple's or Google's push services or through our servers.

Notifications that do come from us — Group Cruze activity, Cruze Cart Family activity, premium-expiration notices, and opted-in promotions and product news — are delivered through Apple Push Notification service (iOS) and Firebase Cloud Messaging (Android); we store a per-device push token to address them. Transactional email (account confirmations, password resets, receipts, Family join notices) and the optional marketing email described in the Privacy Policy are both delivered through Resend, which processes your email address for delivery. Our web services are hosted on Railway.

The Cruze Cart app accesses your device's GPS location to provide real-time navigation and, while the app is open on screen, to show your position on the map and — if "Share Anonymous Usage Data" is on — to match a ride to the mapped paths for an end-of-ride summary. Navigation, routing, and that path matching are processed entirely on your device. Your location leaves your device only for the optional features described above — Group Cruze live sharing (to your chosen group), weather lookups (approximate position to OpenWeather), end-of-ride telemetry (path-level summaries, never your raw GPS positions) that is not tied to your account, submitting a path report, and submitting a scavenger-hunt answer — each of which you control in the app. The last two are stored on our servers together with your account; the others are not. You can revoke location permissions at any time in your device's Settings app; however, doing so will prevent navigation features from working.

De-identified path-usage data derived from ride telemetry is also made available to the city that maintains the cart-path network, so it can plan and maintain it — which paths are used and when, travel speed on each, typical moving speed, where carts stop, and the areas where riders following directions leave the mapped paths. What that includes is set out in full in "Data Shared with Cities" in the Privacy Policy.

Our database is hosted on Supabase (AWS infrastructure) with the following protections in place:

• All data in transit is encrypted using TLS 1.2+
• All data at rest is encrypted using AES-256
• Database access is restricted by row-level security policies
• API access requires authenticated JWT tokens

You can permanently delete your account at any time from the App's settings (Settings → Account → Delete Account) — deletion is immediate — or by emailing support@cruzecart.com, which we will process within 30 days. Note that Apple, Google, and Stripe retain billing and order records for their own legal and compliance purposes even after account deletion; please refer to their data retention policies for details.

Deletion does not reach everything, and we would rather say so than claim it does. Some of our own data survives:

• Records of legal acceptance — which document and version you accepted, the date and time, the email address used, and the IP address. These are evidence that a contract was entered into; the record is unlinked from the deleted account and kept against the email address used at the time.
• Diagnostics and counts — these were never linked to your account and are saved without any identifier for your device, so there is nothing tying them to you for us to find and delete.
• Records your id is detached from rather than removed — for example a search keyword you suggested as a partner.
• Suppression-list entries — kept so we continue not to email an address that bounced or reported us.

The controlling description of what is deleted and what is kept is the "Data Retention and Account Deletion" section of the Privacy Policy.

We may update this Data Policy as we add or change the services we use. When we make material changes, we will update the effective date above and notify you where appropriate.

This Data Policy is provided by Cruze Cart, LLC, a Georgia limited liability company. If you have questions about the data described here, contact us at support@cruzecart.com or by mail at Cruze Cart, LLC, PO Box 202, Peachtree City, GA 30269. This document supplements the Privacy Policy and the Terms of Service.