Deleting your Cartdock account

1. Delete in the app

1. Open Profile → Data.
2. Under Deletion, tap “Delete the account and all data”.
3. Type the word DELETE and tap “Delete everything”.

The deletion takes effect after 24 hours. Until then you can stop it in the same place: Profile → Data → “Stop the deletion”.

2. Delete without the app, by e-mail

Write to privacy@cartdock.app from the address you sign in to Cartdock with (your Google address, or the address you sign in with a password), for example with the subject “Account deletion”.

• We reply and confirm the request within 7 days and tell you when the deletion takes effect. Until that moment you can cancel it by replying to our e-mail.
• The account is deleted no later than one month after your e-mail, in the same way as in the app.
• We do not act on an e-mail from a different address: this way nobody can delete someone else's account. If you no longer have access to your sign-in address, delete the account in the app.

3. Cancel a subscription in the store

If you pay for a Cartdock subscription through Google Play or the App Store, deleting the account or the app does not cancel it: the store keeps charging you until you cancel the subscription there. Cancelling the subscription does not delete the account either, so do both.

• Android: open your subscriptions in Google Play, choose Cartdock and cancel the subscription.
• iPhone and iPad: open Settings, tap your name, then Subscriptions; choose Cartdock and cancel the subscription (Apple’s instructions).

How to withdraw from a subscription within 14 days and get money back is described in the terms of use.

4. Without an account

If you have not signed in to an account, your data on our server is tied to your phone, not to an e-mail address, so we cannot find it from an e-mail. You can delete it yourself in the app: Profile → Data → Deletion → “Delete my data”. As with an account, the deletion takes effect after 24 hours, and until then you can stop it. If the app does not contact our server for 14 days (for example, because you uninstalled it), we delete this data from the server ourselves. The data on your phone stays there.

5. What is deleted

• your Firebase Authentication sign-in account, e-mail address and name;
• receipts with their lines, receipt photos and recognition jobs;
• amounts you noted for lists without a receipt;
• questions to Rinka and the answers, reports of problems with receipts and reports about Rinka's answers;
• data export archives;
• the shared lists you created, together with the lines the members added (the members keep a copy on their own devices that no longer updates);
• your membership of other people's lists;
• your plan, activity-day records, devices and sign-in tokens.

6. What is kept and for how long

• Lines you added to other people's shared lists stay there without an author.
• A record that the deletion was carried out: the identifiers of the account and the device, the status of the request and the times. The identifiers are personal data, but the record holds nothing else about you — no e-mail address, name, lists or receipts. It is kept for 12 months after the deletion, as proof that the request was carried out, and is then deleted. If the service deleted the data of a guest (without an account) itself after 14 days without contact, the record is kept for 35 days.
• If the account had an e-mail address — until the end of the current month plus 1 day: a code of that address (an HMAC with a secret key; the address itself is not stored) and the number of receipt scans and questions to Rinka in that month. If you sign up again with the same address in the same month, the monthly limits continue from these numbers.
• If the account was suspended for breaking a rule when you deleted it — a sign-up block: the code of the e-mail address is kept for 6 months from the deletion, or until the suspension ends if that is later, so that the address cannot be used to sign up again (rules and account restrictions). The record of the decision keeps the first 8 characters of that code. A suspension at your request to restrict the processing of your data (Art. 18 GDPR) leaves no sign-up block.
• If we restricted your account — the record of our decision (only the codes of the action and the reason, without the account identifier) is kept for 12 months from the decision.
• Sign-in attempt counters with a hash of the e-mail address — up to one day.
• Service request logs (IP address, request address, response code) — up to 30 days.
• At OpenAI: receipt photos and questions already sent for recognition or to Rinka — up to 30 days in its abuse monitoring logs.
• Anonymous counters — how many scans and questions were charged to each plan and how many people used the service each day — with no link to you.

More in the privacy policy (sections “Your rights” and “How long we keep data”).

7. Data on your phone

When you delete in the app, it erases the data of the deleted account or guest on that phone, including receipt photos, when the deletion takes effect or, if the app is closed at that moment, the next time you open it. A deletion by e-mail does not touch your phone, and neither does any deletion touch the app on your other phones: to erase the data there, uninstall the app.

When you sign out, the personal lists of your account, the copies of shared lists you no longer have access to and the receipts of your account with their photos are not deleted from this phone but hidden: the app keeps them with the account identifier only (no e-mail address) and returns them when you sign in to the same account on this phone. Receipts not yet saved to the account get there only after that sign-in. A guest and other accounts on this phone do not see them. Deleting the account in the app on this phone erases them; the hidden lists and receipts of other accounts on this phone stay.

8. Delete some of your data without deleting the account

• You can delete a receipt, a list or an amount noted without a receipt in the app.
• You can withdraw the consent to AI processing in Profile → Data → Data processing.
• Send other requests about your data to privacy@cartdock.app.

9. Contact us

Questions about the app and bug reports: support@cartdock.app. Requests about your data, including account deletion: privacy@cartdock.app. We reply within 7 days. We carry out requests about your data no later than one month after your e-mail.