1. Introduction
Welcome! CarryAlly connects individuals who request grocery shopping help ("Requester") with individuals who offer to shop for them ("Shopper"). This Privacy Notice explains how CarryAlly, LLC. ("CarryAlly," "we," "us," or "our") collects, uses, discloses, retains, and protects personal data when you use the CarryAlly mobile application, website, and related services (the "Platform").
CarryAlly acts as the "controller" of personal data described in this Notice. For general information about how CarryAlly works, please see our Terms of Use and Help Center.
2. What We Collect
Here's what we collect, and why:
- Account and contact details, like your name, email, phone number, home address (we ask everyone for this at sign-up so we can match you with your neighborhood), date of birth, and profile photo.
- Identity verification details. We receive a verification result from our identity verification vendor (see Section 3.2); we don't receive or store government ID images or biometric data ourselves.
- Order details, such as your grocery membership number, grocery requests (each, an "Order"), including items requested, approved substitutions, selected retailer, totals, timestamps, cancellations, and refunds.
- Receipts and delivery photos. Uploading a receipt is required to complete an Order, it's how we confirm what was purchased and release payment. Receipts are automatically redacted by our systems before a Requester sees them, removing the Shopper's own payment and loyalty card details.
- Payment details.
- Device information, like your device type, operating system, IP address, and app version, standard technical details that help us keep the app running.
- Support requests. Anything you tell our support team when you reach out for help.
- Support chat messages. If you or another user need help resolving an issue with an Order, we open a chat for that purpose. Chat access is limited to the parties involved and closes once the delivery and any related issues are resolved. We keep a record of that chat together with the Order it relates to, so we can refer back to it if a question about that transaction comes up later.
- Optional profile details you choose to share, like your neighborhood, how long you've lived there, pets, or stores you shop at. You control what you add, and it's shown to other CarryAlly members to help build trust and connection in your community.
CarryAlly is for adults only, you need to be at least 18 to use it. We don't knowingly collect data from anyone younger.
3. How We Use It, and Who We Share It With
We use your data to run CarryAlly and keep everyone safe: creating and managing accounts, matching you with your neighborhood, verifying age (and, for Shoppers, identity), connecting Requesters with Shoppers, handling payments and payouts, supporting you when you need help, looking into disputes or fraud, improving the Platform, keeping you updated, and meeting our legal obligations.
We don't sell your personal data, and we don't use it for targeted advertising.
3.1 Between Requesters and Shoppers
We only share what's needed, and only when it's needed. A Requester's delivery address isn't shared with their Shopper until after the Shopper has finished shopping and uploaded a receipt, and access to that address ends the moment delivery is complete. A Shopper's home address is never shared with a Requester. Every Shopper completes identity verification before they're ever able to see a Requester's information. Shoppers use CarryAlly independently, they're not our employees, agents, or data processors, but we still expect them to handle anything they see responsibly, and only to get your order to your door. Anything you add to your public profile is visible to other members of your community on the Platform.
3.2 Our Vendors
A few trusted vendors help us run CarryAlly behind the scenes: Stripe handles payments, Socure handles identity verification, and Google Firebase powers our infrastructure. They only use your data to provide these services to us, not for their own purposes, which in legal terms makes them our "processors," unless we say otherwise elsewhere in this Notice.
3.3 When the Law Requires It
We may share personal data when we reasonably need to: to follow the law, respond to a legal request, enforce our Terms of Use, investigate fraud, or protect the safety of our community.
3.4 If CarryAlly Is Ever Acquired
If CarryAlly is involved in a merger, acquisition, or sale of assets down the road, your data may be part of that transaction, but it stays protected under this Notice.
4. We Don't Sell Your Data
We mean that literally. CarryAlly does not sell your personal data, and we don't use it for targeted advertising.
5. How Long We Keep Your Data
We keep your personal data only for as long as we need it to provide the Platform and fulfill the purposes described in this Notice. Once we no longer need it, and keeping it isn't required to meet a legal obligation, we'll delete it or make it anonymous so it can no longer be linked back to you. Chat records tied to a specific Order are retained alongside that Order's history for as long as we keep the Order itself.
6. Your Rights
Depending on where you live, you may have rights over your personal data, including the right to:
- Confirm whether we're processing your data, and get a copy of it in a portable format;
- Correct anything that's inaccurate;
- Delete data you've given us or that we've collected about you;
- Opt out of the sale of your data, targeted advertising, or profiling, not applicable right now, since we don't do any of these;
- Limit our use of sensitive personal information, also not applicable right now, since we don't collect any;
- Exercise these rights without facing discrimination for it.
To exercise any of these rights, email privacy@carryally.com. We may need to verify it's really you before we act on a request, and we'll respond within 45 days (with a possible one-time 45-day extension if needed).
If we turn down a request, you can appeal by emailing legal@carryally.com within 30 days, and we'll get back to you within 60 days. If we still say no, we'll let you know how to file a complaint with your state's Attorney General or applicable privacy regulator.
7. Keeping Your Data Safe
We use reasonable safeguards, like encryption and access controls, to protect your data. No system is ever 100% secure, but we take this seriously.
8. If This Notice Changes
We may update this Notice from time to time. If we do, we'll update the date at the top, and where the law requires it, we'll give you notice or ask for your consent before the changes take effect.
9. Questions? We're Here
Have a question about this Notice or how we handle your data? Reach out anytime to privacy@carryally.com, we're happy to help.