Carry

Privacy Policy

Effective date: June 13, 2026

This Privacy Policy explains what personal data Carry collects, why we collect it, how we use and share it, and the choices and rights you have. It applies to the Carry app at https://carry.booktomethod.com and the reading guide at /guide, and this policy lives at /privacy. Carry is a calm, minimalist notebook for dumping what is in your head with zero friction, and we try to handle your data with the same calm and honesty.

Please read this together with our Terms of Service (/terms-and-conditions) and our Refund Policy (/refund). In this policy, "Carry", "we", "us" and "our" mean the operator described below, and "you" means the person using Carry.

1. Who we are (the data controller)

Carry is an independent, founder-run ("indie") product. There is no large company behind it. The operator and data controller responsible for your personal data is Ancapit S.R.L, based in Argentina. As an Argentina-based operator, we handle personal data in line with applicable Argentine data-protection law, alongside the other privacy laws described in this policy.

Our contact details as controller are: Ancapit S.R.L, Argentina, email support@booktomethod.com. You can reach us by email at support@booktomethod.com for any question about this policy, your data, or your privacy rights. This is also the address to use for support, data requests, and refund requests.

We are established outside the European Economic Area (EEA) and the United Kingdom. Because we offer Carry to users who may be in the EEA or the UK, the GDPR and UK GDPR may apply to our handling of your data. You can contact us about any privacy matter, including matters arising under the GDPR or UK GDPR, by email at support@booktomethod.com.

2. A plain-language summary

Here is the short version, in plain words. The longer sections below give the full detail.

  • Carry keeps a local copy of your notes and entries in your browser (IndexedDB) so the app is instant and works offline, including when you are signed out. When you are signed in, the authoritative copy of your data lives in your account on our backend.
  • The free typed/local notebook works with no account at all. Until you choose to sign in, we do not receive any Google profile data about you.
  • When you sign in, your entries sync to our backend so they are backed up and available across your devices. That backend runs on Amazon Web Services in the United States.
  • You sign in with Google. From Google we receive only basic profile info: your email address and your given name.
  • Typed note capture is free forever. The paid features are voice capture and AI "shaping" of your text.
  • Voice and AI shaping are optional features you turn on and pay for. If you use voice, your audio is sent to a transcription provider (Groq) to turn speech into text. If you use AI shaping, your entry text is sent to an AI provider (Anthropic) to suggest a task, event or note and tidy the wording. We process your audio and text only to deliver the feature you asked for, and you can choose not to use these features at all.
  • We do NOT sell your personal data, and we show no third-party advertising.
  • We do NOT let our AI or voice providers use your content to train their models, and we do not train models on your content either.
  • Analytics (Google Analytics) only loads after you accept it in our consent banner. The default is no analytics.
  • You can export your data and delete your account at any time. Deleting your account removes your synced data from our servers.

3. What we collect

We try to collect as little as possible. Here is what we collect and where it comes from. For readers in California, we have also noted the CCPA/CPRA category each item falls under.

Account information (CCPA category: identifiers). You sign in with "Sign in with Google", which we implement using Amazon Cognito. From Google we receive basic profile information: your email address and your given name. We use this to create and identify your account. If you only use the free typed/local notebook without signing in, we do not receive this information.

The content you create (CCPA category: user-generated content / other information you provide). This is the heart of Carry: the notes and entries you write or capture. It also includes voice recordings you choose to make when you use voice capture. Your content lives in your browser first, and syncs to our backend when you are signed in.

Technical, usage and device data (CCPA category: internet or other electronic network activity, and device/identifier information). Like most web services, we and our infrastructure providers process basic technical information needed to run the app securely and reliably, such as your IP address, browser and device type, and timestamps and logs of requests to our backend. We use this to keep the service working and secure, not to profile you.

Analytics data (only with your consent; CCPA category: internet or other electronic network activity). If, and only if, you accept analytics in our in-app consent banner, Google Analytics loads and collects standard usage analytics (such as which pages or features are used and basic device/browser information). Until you accept, no analytics is loaded. You can reject it, and you can revoke your consent later.

Push notification subscription (only if you opt in; CCPA category: identifiers / device information). If you choose to turn on web push notifications, your browser provides a push subscription that we store so we can send the notifications you asked for. This is optional.

Payment and subscription information (CCPA category: commercial information). When you choose to subscribe, payment is handled by Paddle (see Section 6). Carry does not collect or store your full card details. Paddle collects your payment details directly as the seller of record, and shares with us only the limited information we need to manage your subscription (for example, that a subscription is active, and basic billing identifiers).

Note on the free trial: the 7-day free trial does not require a credit card. The trial is granted in-app at first sign-in, and no payment details are collected during the trial. Payment details are collected only if and when you choose to subscribe. Paid subscriptions cost USD $8.99 per month or USD $59 per year and auto-renew until you cancel; see Section 4 and our Terms of Service (/terms-and-conditions) and Refund Policy (/refund) for the full billing terms.

4. How and why we use your data

We use the data described above for the following purposes:

  • To provide the notebook and sync your entries. We store your synced entries on our backend so they are backed up and available across your devices when you are signed in.
  • To authenticate you. We use "Sign in with Google" via Amazon Cognito to sign you in and keep your account secure.
  • To transcribe voice (paid feature, used only when you turn it on). When you use voice capture, your audio recording is sent to our transcription provider (Groq) to turn speech into text. The audio is processed transiently to produce the transcript, because that processing is necessary to deliver the voice feature you asked for.
  • To AI-shape your text (paid feature, used only when you turn it on). When you use AI shaping, your entry text is sent to our AI provider (Anthropic) to suggest a task, event or note and tidy the wording, because that processing is necessary to deliver the AI-shaping feature you asked for.
  • To support you. We use your email and the details you give us to answer your questions and handle requests, including refund requests.
  • To run, secure and improve the service. We use technical and log data to operate the app, prevent fraud and abuse, debug problems, and keep your data safe.
  • To handle payments and subscriptions. We work with Paddle to take payment and manage your subscription. Paid subscriptions auto-renew (monthly or yearly) until you cancel; you can cancel at any time, and we and Paddle process renewals, cancellations and refunds. See our Terms of Service (/terms-and-conditions) and Refund Policy (/refund) for the full billing terms.
  • To measure usage with analytics, but only if you consent. Google Analytics is loaded only after you accept it.
  • To send push notifications, only if you opted in.
  • To comply with the law and protect rights. We may use or disclose data where we are legally required to, or to establish, exercise or defend legal claims.

Carry does not use your content to train AI models, and does not permit its providers to use your content to train their models. We do not sell your personal data, and we do not show third-party advertising.

5. Legal bases for processing (GDPR / UK GDPR)

If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases under the GDPR and UK GDPR:

  • Performance of a contract. To provide the core notebook, sync your entries, authenticate you, and deliver and manage your subscription, we process your data because it is necessary to provide the service you have asked for under our Terms of Service. This also covers the optional paid features when you choose to use them: when you turn on voice capture, sending your audio to Groq to produce a transcript is necessary to deliver that feature; and when you turn on AI shaping, sending your entry text to Anthropic to suggest a task, event or note and tidy the wording is necessary to deliver that feature. These features are optional — you can choose not to use them, and the free typed notebook never requires them — but where you do use them, the processing is part of delivering the paid service you requested.
  • Consent. We rely on your consent for loading Google Analytics and for sending you web push notifications. You give this consent in the app — for analytics, through the consent banner; for push, by opting in — and you can withdraw it at any time. Withdrawing consent does not affect processing that already happened, and it never affects the free typed notebook, which keeps working without these features.
  • Legitimate interests. To keep the service secure and reliable, prevent fraud and abuse, debug problems, and protect our rights and yours, we rely on our legitimate interests, balanced against your rights and freedoms. You have the right to object to processing based on our legitimate interests, on grounds relating to your particular situation, by emailing us at support@booktomethod.com.
  • Legal obligation. Where the law requires it (for example, tax or accounting rules connected to payments, which Paddle largely handles as merchant of record), we process data to comply with that obligation.

Voice and AI shaping are optional paid features. You decide whether to turn them on, and you can stop using them at any time. Because they are part of the paid service you request, the lawful basis for processing your audio and text when you use them is performance of our contract with you (delivering the feature), not a separate consent that you would "withdraw" — so choosing to stop simply means you stop using an optional paid feature. The free typed notebook never requires voice or AI shaping and keeps working exactly the same if you do not use them.

6. Who we share your data with (sub-processors)

We do not sell your personal data and we do not show third-party advertising. We share data only with the service providers ("sub-processors") we need to run Carry, and only to the extent needed for them to do their job. Those providers are:

  • Google — "Sign in with Google". We receive your email address and given name to create and identify your account.
  • Amazon Web Services (AWS), including Amazon Cognito — hosting, storage and authentication. Your synced entries are stored in DynamoDB on AWS in the United States (region us-east-1), and Cognito handles sign-in.
  • Groq — voice transcription. When you use voice, your audio is sent to Groq to produce a text transcript, transiently.
  • Anthropic — AI text shaping. When you use AI shaping, your entry text is sent to Anthropic to suggest a task, event or note and tidy the wording.
  • Paddle — payments and Merchant of Record. Paddle runs checkout, takes payment, issues invoices and receipts, collects and remits sales tax / VAT, and processes refunds.
  • Google Analytics — analytics, consent-gated. Loaded only with your consent, after you accept analytics in the consent banner. We do not sell your personal data, and we do not use your personal data for third-party advertising or ad targeting.

We keep this sub-processor list up to date in this section, and it is the authoritative list of who we share your data with. If we add, remove or replace a sub-processor (for example, change our transcription or AI provider), we will update this list and handle notice of that change under Section 14 (Changes to this policy).

About Paddle specifically: all payments are processed by Paddle.com ("Paddle") acting as Carry's Merchant of Record and authorized reseller. This means Paddle is the seller of record for each transaction. Paddle's own buyer terms also apply to your purchase, and Paddle acts as a controller for the payment data it collects directly; you can review how Paddle handles that data in Paddle's own privacy policy at https://www.paddle.com/legal/privacy. Refunds are processed through Paddle in line with our Refund Policy (/refund).

We may also disclose data if required by law, to respond to lawful requests from public authorities, or to protect the rights, safety and property of Carry, our users, or others. If Carry is ever transferred to a new operator, your data may transfer too, subject to this policy.

7. International data transfers

Carry is operated from Argentina, and our customers are global. Your synced personal data is processed and stored in the United States, on Amazon Web Services (region us-east-1). Some of our other providers may also process data in the United States or other countries.

This means your data may be transferred to, and processed in, countries whose data-protection laws differ from those in your own country. Where personal data of users in the EEA, the UK, or other regions with transfer restrictions is transferred to the United States or other countries, we work to ensure that appropriate safeguards are in place. For transfers to the United States, we rely on appropriate safeguards with our processors — namely the European Commission's Standard Contractual Clauses (and, for the UK, the UK International Data Transfer Addendum / IDTA) — together with technical and organizational measures to protect your data. This applies across our providers that process data internationally, including Amazon Web Services, Google, Anthropic, Groq and Paddle. You can ask us for more detail about these safeguards by emailing support@booktomethod.com.

8. Voice and AI: how your content is handled

Voice and AI shaping are optional paid features. They only run when you choose to use them, and when you do, we process your content to deliver the feature you asked for as part of our contract with you (see Section 5). You are always free not to use them; the free typed notebook never requires them.

Voice. When you record with voice capture, your audio recording is sent to our transcription provider, Groq, to convert speech into text. This processing is transient: it exists to produce your transcript, not to build a profile of you.

AI shaping. When you use AI shaping, the text of the entry you are shaping is sent to our AI provider, Anthropic, which suggests whether it is best as a task, event or note and tidies the wording.

In both cases, Carry does not use your content to train AI models, and we do not permit Groq or Anthropic to use your content to train their models. These providers process your content only to deliver the feature you asked for.

9. Data retention

We keep your synced entries for as long as your account exists, so your notebook is there when you come back. There are two different situations to keep in mind, and they do not conflict:

  • If your subscription is cancelled or a payment fails: Carry archives and never deletes your content. The paid features (voice and AI) pause, your free text notebook keeps working, and nothing you wrote is deleted because of the subscription lapse. (Paid subscriptions auto-renew monthly or yearly until you cancel; you can cancel at any time.) This "archive, never delete" guarantee is specifically about losing access to paid features — it is not a rule that overrides your own choices.
  • If you choose to delete your data or your account: that is your decision, and we act on it. When you delete your account, we remove your synced data from our active systems, as described in Section 11 (Your privacy rights). In other words, we will never silently delete your content when a subscription lapses, but you remain fully in control and can have your data deleted whenever you want.

The local copy of your notes lives in your browser (IndexedDB) until you clear it or delete the data through the app. When you delete your account, we remove your synced data from our active systems without undue delay, and it is purged from routine backups within a reasonable period (typically up to 90 days). You can also export your data before deleting it.

We keep limited records for longer where we have to, such as basic transaction and tax records connected to payments (largely held by Paddle as merchant of record), and security or log data needed to protect the service or comply with legal obligations. Server and diagnostic logs are kept only as long as reasonably necessary for those purposes (up to 90 days) and are not kept open-ended.

10. How we protect your data

We use reasonable technical and organizational measures to protect your data, including encryption in transit and at rest, access controls, and running on established cloud infrastructure (AWS). Sign-in is handled through Amazon Cognito and Google rather than by us storing passwords.

No method of transmission or storage is ever 100% secure, so we cannot promise absolute security. We do, however, take security seriously and work to keep your data safe. If you believe your account or data has been compromised, please contact us at support@booktomethod.com.

11. Your privacy rights

Depending on where you live, you have rights over your personal data. We honor these rights for our users wherever we reasonably can, and in particular:

  • Access — ask what personal data we hold about you.
  • Rectification — ask us to correct data that is wrong or incomplete.
  • Deletion — ask us to delete your data; deleting your account removes your synced data from our servers.
  • Export / portability — export your data in a usable form.
  • Object / restrict — object to or ask us to restrict certain processing, including processing based on our legitimate interests.
  • Withdraw consent — turn off analytics or push notifications at any time; withdrawing consent does not affect processing that already happened. (Voice and AI shaping are optional paid features you can simply stop using at any time, as described in Sections 5 and 8.)
  • Limit the use of sensitive personal information (California) — see the dedicated paragraph below; in short, we do not use or disclose sensitive information in any way that would require us to offer this option.
  • Complain to a supervisory authority — if you are in the EEA or UK, you can lodge a complaint with your local data-protection authority. We would appreciate the chance to address your concern first.

If you are in Argentina, you also have rights under applicable Argentine data-protection law, and you may contact the Agencia de Acceso a la Información Pública (AAIP), Argentina's data protection authority, as the supervisory authority. If you are in the EEA or the UK, you may instead lodge a complaint with your local supervisory authority.

If you are a California resident, the CCPA/CPRA gives you the right to know what personal information we collect, including the categories of personal information we collect, the sources we collect it from, the business or commercial purpose for collecting it, and the categories of third parties with whom we share or disclose it. The categories we collect are described in Section 3: identifiers (such as your email address and given name), internet or other electronic network activity and device information (such as IP address, browser/device type, and logs), commercial information (such as your subscription status and billing identifiers), and the content you create (your notes, entries and any voice recordings). We collect this information from you directly, from your device/browser, and from Google when you sign in. The third parties with whom we share or disclose it are the sub-processors listed in Section 6 (Google, Amazon Web Services / Amazon Cognito, Groq, Anthropic, Paddle, and consent-gated Google Analytics).

You also have the right to request deletion of your personal information, the right to correct it, and the right to opt out of the "sale" or "sharing" of personal information. Carry does not sell or share your personal information for cross-context behavioral advertising, so there is nothing to opt out of. We will not discriminate against you for exercising your rights. You may use an authorized agent to submit a request on your behalf, and we may ask the agent for proof of authorization and may still need to verify your identity directly.

About sensitive information: we do not intentionally collect sensitive personal information. Because Carry is a free-form notebook, the notes and voice recordings you create could contain such information if you choose to include it. We process your content only to provide the service to you, and we do not use or disclose any sensitive personal information that may appear in your content for any purpose that would require us to offer a "Limit the Use of My Sensitive Personal Information" option.

How to exercise your rights: you can export and delete much of your data directly in the app, or you can email us at support@booktomethod.com. We may need to verify your identity (for example, that you control the account email) before acting on a request. We will respond within the timeframes required by applicable law.

12. Cookies and local storage

Carry is designed to store only what is needed to sync your content to your account across your devices, and to avoid unnecessary tracking. We do not use third-party advertising cookies.

  • localStorage — used for small, functional preferences such as your session, your language choice, and your consent choices.
  • IndexedDB — used to store your actual content (notes and entries) locally in your browser so it works offline.
  • Consent banner — analytics (Google Analytics) is loaded only with your consent, after you accept it. The default is no analytics, and you can reject or later revoke consent. We do not use your personal data for third-party advertising or ad targeting.

If you reject or revoke analytics, the core notebook keeps working exactly the same.

13. Children

Carry is not directed to children. The service is intended for users who are at least 13 years old, or at least 16 where the law in your country requires that age for consent to online services. Creating an account also requires "Sign in with Google", which has its own age requirements. If you believe a child has provided us with personal data without the proper consent, please contact us at support@booktomethod.com and we will take appropriate steps to remove it.

14. Changes to this policy

We may update this Privacy Policy from time to time, for example if we add a feature or change a provider (including adding or replacing a sub-processor in Section 6). When we do, we will update the effective date at the top, and for material changes we will give you reasonable notice (for example, an in-app notice or a message to your account email). Your continued use of Carry after a change takes effect means you accept the updated policy.

15. Governing law

This Privacy Policy is governed by the laws of Argentina. This does not take away any mandatory data-protection rights you have under the laws of your own country.

16. Contact us

If you have any questions, requests, or concerns about your privacy or this policy, please email us at support@booktomethod.com. The operator and data controller responsible for Carry is Ancapit S.R.L, based in Argentina, contactable at support@booktomethod.com. You can also read our Terms of Service (/terms-and-conditions) and Refund Policy (/refund), and this Privacy Policy lives at /privacy. This policy is effective as of the effective date shown at the top (June 13, 2026), which we update whenever the policy changes.