Last updated 10 August 2026
Cartful is a free shared grocery list. It stores the lists you create so they can sync between the phones in your household. It does not sell your data, show you ads, or track you across other apps and websites.
All of it is information you enter yourself:
We want to be specific, because "we don't collect data" is easy to say and hard to check. Cartful has no code that collects any of the following:
The app uses no cookies and no third-party analytics, advertising or crash reporting services.
Voice commands are optional. While you are using one, the microphone is on and your device's or browser's own speech recognition turns what you say into text. Depending on your device and language that may happen entirely on the device, or the audio may be sent to Apple or Google to be transcribed, exactly as the built-in dictation on your keyboard does. Cartful never receives, records or stores the audio itself — only the resulting text, which is then treated like anything else you type into your list.
The camera and photo library are only accessed when you tap to add a photo. The photo you pick is uploaded so the rest of your household can see it; no other image is read.
Everyone in your household can see everything in it. That is the point of a shared list. Anyone who has your household's join code can join it, so treat the code like a key and only share it with people you want on your list. Any member can generate a new code at any time, which stops the old one working.
We do not sell, rent or share your data with anyone. No advertiser, data broker or analytics company receives anything.
Cartful runs on Microsoft Azure in the United States. Microsoft hosts the servers and storage on our behalf and does not use your data for its own purposes. They are the only third party involved.
If you use the app outside the United States, your data is transferred to and stored there.
You can do this yourself, in the app, at any time:
If you would rather we did it for you, email cartful@aloedesk.com and we will delete the household you name. We may ask you to confirm from a device that is already a member, since there is no other way to tell it is yours.
One technical caveat: deleted photos are removed from our storage immediately, but because photos are served with long-lived caching they may briefly remain in a browser or network cache before disappearing.
Your data stays as long as the household exists. If a household has not been opened for 24 months, we may delete it and everything in it. Deleting a household removes it right away.
Cartful is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child has entered personal information, email us and we will remove it.
Depending on where you live, you may have the right to access, correct, export or delete your personal information, and to object to how it is processed. This includes the EU and UK under GDPR, and California under the CCPA.
In practice, everything Cartful holds about you is visible in the app and you can delete it yourself using the steps above. For anything else, email cartful@aloedesk.com.
We do not sell personal information and we do not share it for cross-context behavioural advertising, so there is nothing to opt out of.
Traffic between the app and our servers is encrypted in transit. Each household's data is protected by an access token issued when you create or join it, and requests for a household you are not a member of are rejected.
Your household's join code is a credential. Anyone who has it can join and see your lists, so share it carefully and regenerate it if you think it has got out.
If this policy changes we will update this page and the date at the top. If a change materially affects what we collect or how we use it, we will say so in the app.
Cartful is made by Aloe Desk. For anything about privacy, email cartful@aloedesk.com.