Legal

Privacy policy

Effective October 8, 2026

This policy explains how Waypost LLC (“Avocart”, “we”, “us”) collects, uses and shares information when you use the Avocart iPhone app, the website at avocart.io and related services (together, the “Service”).

The short version. We use your information to plan your meals and build your cart. We do not sell your personal information. We do not use your health data for advertising, and we do not share it with data brokers. You can delete your account and your data at any time from the app.

1. Information we collect

Account information

You sign in with Apple or Google. We receive your name, your email address (or an Apple private relay address) and an account identifier from that provider. We do not receive or store a password.

Profile and household

You can enter details for yourself and for the people you cook for: a name, age, sex, height, weight, body-fat percentage, activity level, goal, diet type, exclusions (for example gluten-free or no pork) and nutrients to focus on. Avocart uses these to calculate calorie and nutrient targets and to check recipes. Only add another person’s details if you have their permission, or if you are their parent or guardian.

Health and fitness data (optional)

If you allow it, Avocart reads the following from Apple Health on your iPhone: steps, active energy, exercise minutes and workouts, for today and the past seven days. Avocart never writes to Apple Health.

If you connect a WHOOP account, Avocart reads your cycle strain and energy, workouts, recovery (recovery score, heart-rate variability and resting heart rate), sleep performance and body measurements. You can disconnect WHOOP at any time in Settings. When you disconnect, we revoke our access and delete the stored connection.

We use this data only to choose and size meal recommendations and to write the short reason shown on each recommendation (for example, “Today: 20,320 steps”). We send the activity summary to our servers with each feed request. We store the reasons shown to you with your feed history, so a stored reason can include a day’s step count or activity level. We do not use health data for advertising or marketing, and we do not sell it or share it with data brokers.

Recipes, cart and orders

We store the recipes you save or import, the versions you create for members of your household, your cart, your store choice and the orders you place through Avocart.

How you use the app

We record how you interact with recommendations (for example, which recipes you open, save or skip, and for how long you view them) to improve your feed.

Location (optional)

If you allow it, the app uses your device location once to find your postal code, so it can list Instacart stores near you. We use the postal code to find stores. We do not track your location.

Recipe websites

When you open a recipe page on the web in the app and add it, we fetch that page to read its title, image and ingredient list.

Technical information

Our servers keep standard logs, such as IP address, app version, request times and errors, to run and secure the Service.

2. How we use information

To provide the Service: calculate targets, recommend and grade recipes, apply swaps, create recipe versions for your household and build your shopping list.
To personalize your feed based on your profile, household, activity and how you use the app.
To send your shopping list to Instacart when you check out.
To keep the Service secure, fix problems and improve it.
To answer you when you contact us.
To meet legal obligations.

3. How we share information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share information only as follows:

Instacart. When you check out, we send Instacart the items in your shopping list, quantities and product preferences (for example organic or seed-oil-free), and the store you chose. Instacart’s own privacy policy governs what happens on Instacart.
Service providers. Companies that host our servers and database, provide sign-in, and process recipe and nutrition data for us. They act on our instructions and may use the information only to provide services to Avocart. When we send recipe content to a provider for processing, we send the recipe and the diet rules, not your name or contact details.
Sign-in providers. Apple and Google, to sign you in.
Legal reasons. If the law requires it, or to protect the rights, safety and property of our users, the public or Avocart.
Business transfers. If Avocart is part of a merger, acquisition or sale of assets, information may transfer as part of that deal. This policy will continue to apply to it.

4. How long we keep information

We keep your information while your account is open. When you delete your account, we delete your account, profile, household, health-derived data, recipes, cart and order history within 30 days, except where we must keep a record by law. Server logs are kept for up to 90 days.

5. Your choices and rights

Health access. Turn Apple Health access on or off in the iPhone Settings app under Health, then Data Access & Devices. Disconnect WHOOP in Avocart’s Settings.
Edit. Change your profile and household at any time in the app.
Delete. In the app, open Profile, then Settings, then Delete account.
Access, correction and deletion requests. Write to contact@avocart.io. Depending on where you live (for example California, under the CCPA, or the EU and UK, under the GDPR), you may have the right to access, correct, delete or receive a copy of your information, and to object to or restrict some uses. We will not treat you differently for using these rights. We may need to verify your identity first.

6. Security

We use encryption in transit (HTTPS), access controls and token-based authentication. Third-party access tokens (such as a WHOOP connection) are stored on our servers and are never sent to the app. No system is completely secure, so we cannot guarantee absolute security.

7. Children

The Service is for adults. You must be 18 or older to create an account. An adult account holder may add a child as a member of their household so that meals fit the child. We do not knowingly collect information directly from children under 13. If you believe a child has created an account, write to us and we will delete it.

8. International users

Avocart is run from the United States, and your information is processed in the United States and in other countries where our service providers operate.

9. Changes to this policy

We may update this policy. We will change the effective date above, and if a change is significant we will tell you in the app or by email before it takes effect.

10. Contact

Waypost LLC · 963 E. 4th Street, Los Angeles, CA 90013 · contact@avocart.io