Privacy Policy

This policy explains what Manifest Cart collects, why, and the choices you have. We built Manifest Cartas an anti-advertising product: we don't run ads and we don't sell your personal information.

What we collect

Account:your email and a username. We sign you in with email/password or with Apple/Google sign-in (we identify you by the provider's stable ID, not your email).

Photos and videos: the media you capture or upload. Before a photo is stored we strip embedded metadata (including GPS location) on our servers.

Activity: the posts and comments you create, the products you tap through, and the resulting purchase events — including a record of the store, order value, and date of purchases attributed to your clicks — so we can pay the right people the right amounts. Our click tracking stores no IP address, browser fingerprint, or device identifier.

Community: the creators you follow, the posts you like and save, the shelter you choose to support, shelters you nominate, and any badges or streaks you earn. If you report a post or block another member, we keep a record of that so the block sticks and our moderators can act on it.

Notifications: the push token your device gives us, and your notification settings. Turning notifications off in your device settings or in the app stops us sending them; email us if you also want the stored token deleted.

Payments: if you set up payouts, your Stripe account identifier and the ledger of what we owe and have paid you. Your bank details, government ID and tax information go directly to Stripe — Manifest Cart never sees or stores them.

Support and safety: messages you send our support team, and signals we use to detect fraud and self-dealing on the earning system.

Diagnostics: limited error and performance data to keep the app working.

Sign-in security: our authentication provider records the IP address and device of each sign-in, so you and we can spot an account being accessed by someone else. This is separate from the click tracking described above, which records none of it.

How we use it

To run the core service — turning your photos into shoppable posts, attributing sales, and paying out the right share to the people who made them — and to keep the platform safe and working. That's it.

Who we share it with

Service providers who operate the product on our behalf: our cloud database and storage provider, our error-monitoring provider, the affiliate networks that attribute sales, and our payments provider for withdrawals and tax forms. They process data only to provide their service. We do not sell your data or share it with advertisers.

Automated safety scanning

Every photo and video you upload is automatically scanned by an AI moderation service before it can be published, to check it against our Community Guidelines (no counterfeits, stolen content, hate or explicit material, animal cruelty, and so on). Flagged uploads are held for human review before they go live.

Third-party services we use

We rely on a small set of named providers to run Manifest Cart, each processing only the data it needs to do its job:

• Supabase — our database, authentication, and photo storage.
• Google Gemini — automated content moderation (safety scanning described above) and product recognition, which suggests the store or product a photo shows.
• Stripe — payments, payouts, and tax forms.
• Affiliate networks — currently Commission Junction (CJ), Rakuten Advertising, Awin, and Amazon Associates — attribute purchases from participating retailers back to your posts.
• Resend — sending account and notification emails.
• Expo — delivering push notifications to your device.
• Sentry — error and performance diagnostics to keep the app working.
• Google Analytics — anonymous usage statistics for our marketing website only (which pages are visited); not used inside the app.
• Meta Pixel — measures how well our own announcements reach people, on our marketing website only; not used inside the app.

What other people can see

Photos and videos you post to your public store are visible to anyone with the link, along with your username and profile photo. Your comments are visible to anyone who can see the post. Your username can appear on public pages such as the creator leaderboard. Your email address, your earnings, and the shelter you chose are never shown to other members.

How long we keep it

• Posts — until you delete them or delete your account, which removes them from Manifest Cart. The underlying image and video files are removed from our storage on request; email us and we'll do it.
• Account and profile — until you delete your account, at which point your name, email and contact details are scrubbed.
• Payment, purchase and tax records — kept in de-identified form for seven years after the transaction, because tax and financial-record law requires it. These survive account deletion.
• Push tokens — kept while your account is open; removed on request.
• Diagnostics — up to 90 days, then discarded by our error-monitoring provider.
• Moderation, safety and fraud records — up to two years, so a repeat problem can be recognised as one.

Your choices and how to withdraw consent

Delete your account from the app's settings or at manifestcart.com/delete-account. This removes your posts from Manifest Cart and de-identifies your profile, subject to the retention periods above.

Withdraw a permission at any timewithout deleting your account. Camera and photo-library access can be revoked in your device's Settings app — Manifest Cartkeeps working, you just can't post new media until you grant it again. Push notifications can be turned off in your device settings or in the app's notification settings. You can stop the AI product-matching described above by not uploading media. You can edit your username and change or clear the shelter you support at any time. To disconnect a Stripe payout account, email us and we'll unlink it.

To ask what we hold, correct it, get a copy, or have it deleted, email contact@manifestcart.com. We respond within 30 days.

Children

Manifest Cartis for adults 18 and older, and we ask you to confirm your age when you create an account. We don't knowingly collect data from children. If we learn that an account belongs to someone under 18 we delete it. Illegal content involving minors is removed and reported to the authorities as the law requires.

Contact

Questions about this policy? Email contact@manifestcart.com.