Privacy Policy
Last updated 23 September 2026
Who we are
NexaCart is operated by SoftKarrot. This policy covers the NexaCart Android app and the NexaCart website. When this page says “we”, it means SoftKarrot; when it says “you”, it means the person using NexaCart.
If you want anything on this page explained, or you want a copy of what we hold about you, email support@nexacart.app.
What we collect, and why
You can browse products, search, and fill a cart and a wishlist without an account. While you do, your cart and wishlist are kept on your own device, not on our servers. You can also message our support team without an account, and if you do, we store those messages — see using NexaCart without signing in. Placing an order always signs you in, because we first confirm your phone number with a one-time code. Apart from guest support messages, everything in the table below starts only once you sign in.
| Data | Needed? | What it is for |
|---|---|---|
| Phone number | Required | It is your sign-in identity. We send a one-time code to it and use it to reach you about an order. |
| Name | Required to order | Shown to the courier as the recipient of your delivery. |
| Email address | Optional | Only if you add one. Used to send you order updates by email. |
| Delivery address | Required to order | To deliver what you buy, and to work out the delivery charge. |
| WhatsApp number | Optional | Only if you add one. An extra way for us to reach you about an order. |
| User ID | Required | The internal account number that ties your cart, orders and messages together. |
| Purchase history | Required | To show you your orders, handle returns, and keep the shop’s accounting records. |
| Support chat messages | Optional | Only if you message us, signed in or not. So our staff can answer, and so the conversation is still there when you come back. |
| Guest chat token | Optional | Only if you message us without signing in. A random code, kept on your device, that lets it open your own conversation. It is not linked to your name or phone number unless you later sign in. |
| Photos | Optional | Your profile picture and photos you attach to a review or to a chat. A photo you use to search for a product is only processed to find matching products and is not kept. |
| Files you attach in chat | Optional | Only if you send one while signed in (guests can send text only), so our staff can see what you sent. |
| In-app activity and searches | Required | Recorded for signed-in users only, to understand which parts of the app get used and to improve search results. |
| Reviews and ratings you write | Optional | Published publicly on the product you reviewed, next to your display name and picture. |
| Push notification token | Optional | Only if you allow notifications. It identifies your device so a delivery update reaches it. |
Using NexaCart without signing in
If you use NexaCart without an account, this is everything we keep:
- Nothing while you browse, search, or add to your cart or wishlist. Your cart and wishlist are stored only on your device. When you place an order, the items in your cart are sent to us with it.
- Support chat messages, if you write to us.We store the text of each message you send, our staff’s replies, and when each was sent and read. Guests can send text only, not photos or files. We do not ask for your name or phone number to do this.
- A guest chat token.The first time you message us, our server creates a random code and your device keeps it — in your browser’s local storage on the website, and in the app’s secure storage in the app. It is how your device finds your conversation again. Anyone holding that code can read the conversation, which is why it stays on your device and is not tied to your name. If you clear the app’s data or your browser storage, your device loses the code and can no longer open that conversation; the messages themselves stay with us.
- If you sign in later on the same device, we link that conversation to your account, and our staff see your name and phone number next to it. From then on it is part of your account data, and it is deleted when you delete your account.
- Your IP address, briefly.We use it to limit how many messages or photo searches can come from one place in a short time, which stops abuse. For that purpose it is held only in our server’s memory, and it is never saved in our database or with your messages. Like any web service, our servers also write routine technical logs for troubleshooting, and a log entry for a request can include the address it came from.
A guest conversation that is never linked to an account is kept until it is deleted. To have one deleted, ask us in the conversation itself or email support@nexacart.app.
What we do not collect
- Your location, precise or approximate
- Your contacts, calendar, SMS messages or call logs
- Audio or video recordings
- Health or fitness data
- Your browsing history outside the app
- Card numbers or bank details — NexaCart takes payment in cash on delivery, so we never see them
- The list of other apps installed on your device
- Crash logs or diagnostics (the app ships no analytics or crash-reporting SDK)
Who else sees it
We do not sell your data, and we do not share it with anyone for their own purposes. Three kinds of people see parts of it, and only these three:
- Our staff — to pack and dispatch your order, answer your messages, and moderate reviews.
- The courier delivering your order — your name, phone number and delivery address, because a parcel cannot arrive without them.
- The companies that run our infrastructure — Amazon Web Services stores the data, and Google Firebase Cloud Messaging delivers push notifications to your phone. They process it on our instructions and for no purpose of their own.
Anything you post publicly — a review, its star rating and any photos on it — is visible to everyone, alongside your display name and profile picture. Please do not put anything in a review you would not want to be public.
How it is protected
Everything travelling between your device and our servers is encrypted in transit (HTTPS and WSS). Data is stored on Amazon Web Services in the Asia Pacific (Singapore) region. Access to the admin tools is restricted to our staff accounts.
We sign you in with a one-time code sent by SMS, so there is no password of yours for anyone to steal or reuse.
Deleting your account
You can delete your account yourself, at any time, from inside the app: open Profile, scroll to the bottom and tap Delete account. If you no longer have the app installed, use our account deletion page.
Deleting removes your profile, cart, wishlist, saved items, saved addresses, support chat history (including a conversation you started as a guest and then linked by signing in), notifications, push tokens, your reviews, and the photos and files you uploaded. This happens immediately and cannot be undone.
One thing is kept: the record of orders you have already placed. We remove the personal details from them — your name, phone number, WhatsApp number, email address and street address are erased and replaced with a placeholder — but the order itself, its items and its totals remain, because we are required to keep accurate sales records for accounting and tax purposes. What is left cannot be traced back to you.
How long we keep things
While your account is open, we keep your data for as long as you keep using NexaCart. When you delete your account, everything listed above goes at once, apart from the anonymised order records. Sign-in sessions expire on their own. A guest support conversation that was never linked to an account is kept until you ask us to delete it, as described above.
Children
NexaCart is intended for people aged 18 and over. We do not knowingly collect data from children. If you believe a child has created an account, email us and we will delete it.
Changes to this policy
If we change what we collect or what we do with it, we will update this page and change the date at the top. Significant changes will also be announced in the app.
Questions about this page? Email support@nexacart.app.