Undercart privacy policy

Updated 25 August 2026

Undercart plans a week of dinners to your budget, prices it at your real store, and checks itself against your receipt. This page says what the app holds to do that, and what it will never do with any of it.

The short version

We hold what the product needs and nothing else. We do not sell it, share it, or advertise with it, and the subscription price is the whole business model. There are no analytics trackers and no ad networks in the app.

What we hold

• Your sign-in. You sign in with Apple, or with a code sent to your email address. With Apple we receive the identifier Apple issues and, if you share it, your email, which can be Apple's private relay address. With a code we receive the address you typed. Sign-in is handled by Clerk, our identity provider.
• Your household's answers. The weekly budget, how many people eat, allergies and foods you exclude, equipment, the stores you shop at, and, if you grant it, a one-time location fix used to find your nearest store. These exist so the week can be planned and priced.
• Your weeks. The dinners, the shopping list, what you ticked, and how each week reconciled.
• Receipt photos. If you photograph a receipt, we store the image and what was read off it. You can delete the photo on its own at any time; the figures stay, the image goes. Deleting your account deletes both.
• Your subscription state. Whether the account is subscribed, mirrored from Apple. Apple processes payment; we never see your card.

What the planning model sees

Dinners are chosen by an AI model (Anthropic's Claude). It is sent the store's product list and prices, and your household's food constraints: budget, head count, allergies, exclusions, equipment, time. It is not sent your name, your email, your location, or anything that identifies you.

Prices

Shelf prices are read from retailers' own public pages, per store, on a weekly schedule. That data is about stores, not about you.

Notifications

Up to three, each optional, chosen in the app: your list is ready, tonight's dinner at five, and a price move that pushes the week over your number. The dinner notification is scheduled on your phone. Nothing else is ever sent: no streaks, no nudges, no offers.

Where it lives

Data is stored with Convex, our backend provider, and identity with Clerk. Both act on our instructions. We do not use analytics or advertising services.

Deleting everything

Settings has Delete account. It removes your weeks, receipts, household answers, and account from our servers, then your sign-in identity, then the copies on your phone. It works without asking why.

Changes and questions

If this policy changes, the date above changes with it. Questions: hello@undercart.app.