Policy covers Instacart sites, apps, devices, APIs and white-label sites where linked
The policy is issued by Maplebear Inc. (doing business as Instacart) and Maplebear Canada Inc. It describes how they collect, use and share your Personal Information through the "Services", which the policy defines as Instacart websites, mobile apps, devices and APIs, plus white-label retailer websites or apps ("Instacart White Labels") where this Privacy Policy is linked. "Personal Information" is defined broadly as any information Instacart can reasonably use to identify you.
Supporting quotations
This Privacy Policy explains how Maplebear Inc. d/b/a Instacart and Maplebear Canada Inc. (“Instacart,” “we,” or “us”) collect, use, and share your Personal Information in providing services, including any Instacart websites, mobile apps, devices, APIs, white-label retailer websites or apps (“Instacart White Labels”) where this Privacy Policy is linked (the “Services”).
“Personal Information” is any information that we can reasonably use to identify you.
Qualifications & exceptions
White-label retailer sites and apps are covered only where this Privacy Policy is linked on them.
Personal Information is defined by what Instacart can reasonably use to identify you, not by a fixed list.
Not stated here
The policy does not list which retailer white-label sites or apps link to it.
Other privacy notices that may apply to specific Instacart products are not part of the supplied text.
Data Access & Collection · Context
Summary notice signposts where collection, uses, disclosures, choices and the table are explained
A short summary notice tells you where to find what Instacart collects, its business and commercial purposes, who receives the information and why, your choices and rights (including how it sells or shares certain categories of Personal Information and how to opt out), and a summary table. It is a guide to later sections and the policy does not say it replaces them.
Supporting quotations
We collect Personal Information as described
We describe the business and commercial purposes
We describe our disclosures of Personal Information
how we sell or share certain categories of Personal Information
we have provided a table format that summarizes
Qualifications & exceptions
The notice points to the sections for detail; the operative descriptions are in those sections.
Not stated here
The summary notice says Instacart sells or shares certain categories of Personal Information without naming them; the Summary Table and Section 4 carry the detail.
Data Access & Collection · Restriction or exception
Prescription deliveries and restaurant orders are not available on white-label sites
The contents list and section headings mark two features as not available to Instacart White Labels: prescription deliveries and restaurant orders. The policy's prescription and restaurant sections therefore describe practices for the main Instacart Services, not the retailer white-label sites or apps.
Supporting quotations
Prescription Deliveries (Not Available on Instacart White Labels)
Restaurant Orders (Not Available on Instacart White Label Sites)
6. Prescription Deliveries (Not Available on Instacart White Labels)
7. Restaurant Orders (Not Available on Instacart White Label Sites)
Qualifications & exceptions
The two headings use slightly different wording (White Labels and White Label Sites).
Data Access & Collection · Company practice
Contact, account and order details you give are collected
Instacart collects directly from you the contact details you provide (name, telephone number, email address), account information when you set up an account (username, password and other information it asks for), and order information needed to fulfil an order (delivery address, date and time, items ordered and any special instructions).
Supporting quotations
We collect the following Personal Information directly from you:
including your name, telephone number and email address.
we collect your username and password, and other relevant information we request.
we collect information necessary to fulfill the order, including your delivery address, the date and time of the order, the items you ordered and any special instructions.
Qualifications & exceptions
Order information is collected only if you place an order through the Services.
Account information is collected when you set up an Instacart account.
Not stated here
Account information includes "other relevant information we request", which the policy does not list.
Data Access & Collection · Company practice
Government ID details collected for age- or amount-restricted orders
If you order alcohol, prescriptions or other age- or dollar-amount-restricted orders, Instacart collects information from your government ID to verify your age or identity: the ID number and state or country, and, when legally required, a copy of the full state ID card.
Supporting quotations
If you order alcohol, prescriptions, or other age- or dollar amount restricted orders, we collect information from your government ID to verify your age or your identity, including the government ID number and state or country, and, when legally required, a copy of the full state ID card.
Qualifications & exceptions
Applies to orders for alcohol, prescriptions or other age- or dollar-amount-restricted orders.
A copy of the full state ID card is collected only when legally required.
Not stated here
The policy does not say which orders count as dollar-amount restricted or when a full ID copy is legally required.
Retention of ID information is not described separately; Information Retention is general.
Data Access & Collection · Company practice
License plate may be collected for curbside pickup
For curbside pickup orders, Instacart may collect your vehicle license plate number or numbers.
Supporting quotations
For curbside pickup orders, we may collect your vehicle license plate number(s).
Qualifications & exceptions
Applies to curbside pickup orders; the policy says "may", not that it always collects it.
Data Access & Collection · Company practice
Fresh Funds program details are collected
If you take part in a Fresh Funds program and enter a Fresh Funds code to redeem credits, Instacart collects the information it needs to run the program: the name of the Fresh Funds partner, your Fresh Funds balance and the products you bought with it.
Supporting quotations
If you participate in a Fresh Funds program and enter a Fresh Funds code to redeem your Fresh Funds credits, we collect information necessary for us to administer the program, including the name of the Fresh Funds partner in whose program you participate, your Fresh Funds balance, and the products you purchased with your Fresh Funds.
Qualifications & exceptions
Applies only if you participate in a Fresh Funds program and enter a code.
Data Access & Collection · Company practice
Messages with shoppers and customer service are collected
Instacart collects the content of your communications with your personal shopper through the Services about replacements and other order questions, and the information you give when you interact or communicate with customer service representatives.
Supporting quotations
you may communicate with your personal shopper via the Services about product replacements and other questions you or your personal shopper may have regarding the order. We collect the information contained in those communications.
we collect the information you provide during such interactions.
Qualifications & exceptions
Shopper messages apply when you place an order for delivery.
Data Access & Collection · Company practice
Information you make public is collected; others may access it
If you post in a public space on the Services or choose to make Personal Information public (for example, sharing a recipe publicly), Instacart collects it. The policy warns that Instacart cannot control what third parties who access or collect that public information do with it.
Supporting quotations
If you post in a public space on the Services or otherwise choose to make your Personal Information public on the Services (e.g., by sharing a recipe publicly on the Services), we collect such information. If you choose to share Personal Information publicly through the Services, please understand that we cannot control the actions of third parties who may access or collect this information.
Qualifications & exceptions
Applies when you post publicly or choose to make Personal Information public.
Data Access & Collection · Company practice
Other information you choose to provide, including survey and retailer-experience responses, is collected
Instacart collects any other information you choose to provide in your interactions with the Services, including survey responses (such as customer satisfaction surveys) and information you give directly about an experience with one of its retailers.
Supporting quotations
We collect any other information that you choose to provide during your interactions with our Services, including your responses to surveys that you choose to participate in (for example customer satisfaction surveys) or information that you provide directly to us regarding an experience with one of our retailers.
Qualifications & exceptions
Covers information you choose to provide.
Data Access & Collection · Restriction or exception
Details about other people are collected; you must have permission and may not provide children's data
If you provide information about other people, such as the name, email and delivery address of a friend you refer or a recipient of a gift delivery or gift card, Instacart collects it. It also collects information about your association with another customer if you take part in Family Accounts. You are responsible for having permission to share the other person's information, and you may not provide Personal Information about children under 18.
Supporting quotations
In some cases, you may provide information to us about other people. For example, you may refer a friend to Instacart or send an Instacart gift delivery or gift card to someone.
you are responsible for ensuring that you have permission to share their information with Instacart.
You may not provide Personal Information about children under the age of 18.
Qualifications & exceptions
Recipient details are collected "as applicable" to the referral, gift delivery or gift card.
The permission requirement is placed on you, not on Instacart.
Data Access & Collection · Company practice
Browsing, cart and marketing-interaction activity is collected automatically
When you browse the website or use the app, Instacart automatically collects information about your device, browser and activity, including products you engage with or add to your cart, order information, pages visited, and how often and how long you use the Services. It also collects how you interact with its chat bots, emails, texts, notifications and other marketing, such as whether you opened or clicked.
Supporting quotations
we automatically collect certain information about your device, browser, and activity:
we collect information about your activity and interactions with the Services. This includes the products with which you engage or place in your cart, information related to your orders, the pages that you navigate to, and the frequency and duration of your use of the Services.
We also collect information regarding your interactions with our chat bots, emails, texts, notifications, or other marketing from us (e.g., whether you opened or clicked
Data Access & Collection · Company practice
Third-party session replays can record clicks, scrolls and keystrokes
Instacart may use third-party services whose software code records how users interact with the Services. The policy says session replays include clicks, mouse movements, scrolls and keystrokes or key touches, and that they are used to diagnose usability problems and find areas for improvement.
Supporting quotations
We also may use third party services that employ software code to record users’ interactions with the Services.
Session replays include users’ clicks, mouse movements, scrolls, and keystrokes/key touches during those sessions.
Qualifications & exceptions
Stated purpose is diagnosing usability problems and identifying areas for improvement.
Not stated here
The policy does not say whether any fields, such as password or payment fields, are excluded from keystroke recording.
The third-party providers are not named.
Data Access & Collection · Company practice
Device, browser, network and identifier information is recorded
Instacart's servers record information about the device you use, including IP address, device type, browser type and settings, internet service provider, mobile carrier, mobile country code, operating system and unique device identifiers. It may also generate new unique identifiers from existing device information.
Supporting quotations
Our servers will record information about the computer, phone, or other device you use to connect to the Services.
We may also generate new unique identifiers using existing user device information.
Data Access & Collection · Context
Device location may be collected in different ways
When you access the Services, Instacart may collect information about your device's location in different ways. The following entries distinguish general location from precise geolocation.
Supporting quotations
When you access the Services, we may collect information about your device’s location in different ways:
Not stated here
Details are given in the next two entries, covered separately.
Data Access & Collection · Company practice
General location is inferred, for example from IP address
Instacart infers your general location (country, region or city), for example from your device's IP address. It says it relies on that to maintain security and prevent fraud, present localized experiences such as content availability, comply with regional laws and obligations (for example consent and opt-out prompts), and measure and improve its services through aggregated analytics. It warns IP-based location may be approximate and can reflect your internet provider's or a VPN's location.
Supporting quotations
We infer your general location (such as country, region, or city), for example by using your device’s IP address.
We rely on this general location to maintain security and prevent fraud (for example, detect suspicious or unusual access patterns), present localized experiences (such as content availability), comply with regional laws and obligations (for example, consent/opt-out prompts and notices), and to measure and improve our services through aggregated analytics.
IP-based geolocation may be approximate and can reflect the location of your internet service provider or a VPN endpoint.
Qualifications & exceptions
Analytics use is described as aggregated.
IP-based location may be approximate.
Data Access & Collection · Company practice
Precise location is collected only if you allow it through your device or browser
If you choose to allow the Services to use location services through your device's operating system or browser permission system, Instacart may collect your device's precise location. It says it uses location to hand off pickup orders, improve delivery accuracy and help you find nearby stores for pickup or delivery, and for other similar purposes. It may also use it for analytics and to understand how to improve the Services. You can control sharing through device or browser settings or when the app prompts you.
Supporting quotations
If you choose to allow the Services to access location services through the permission system used by your device’s operating system or browser, we may collect the precise location of your device.
We use your location information to facilitate the prompt hand-off of pickup orders (where available), to improve the accuracy of deliveries, to assist you in finding nearby stores for which pickup or delivery are available, and for other similar purposes.
We may also use such information for our analytics purposes and to better understand how we can improve the Services.
You can choose whether or not your device’s location information is shared with us by adjusting the settings on your device or browser, or when prompted by the Instacart application.
Qualifications & exceptions
Collected only if you allow location access through your device or browser permission system.
Pickup hand-off is described as applying where pickup is available.
Not stated here
"Other similar purposes" is not defined.
How long precise location is kept is not stated; the retention section is general.
Data Access & Collection · Company practice
Cookies, pixels and SDKs collect information for Instacart and its advertising partners
When you visit or use the Services, Instacart, along with its partners, advertisers and third-party advertising networks, may automatically collect information about you using device identifiers, cookies, pixels, tags, APIs, SDKs and similar technologies. Instacart says it uses this information to make the Services work, understand how you use them, personalize your experience, and measure, monitor, manage, display and customize the advertisements you see.
Supporting quotations
we (and our partners, advertisers, and third-party advertising networks) may automatically collect information about you using device identifiers, cookies, pixels, tags, application programming interfaces (“APIs”), software development kits (“SDKs”) and similar technologies.
We use this information for various purposes, including to make the Services function properly, understand how you use the Services, personalize your experience, and measure, monitor, manage, display, and customize the advertisements you see.
Qualifications & exceptions
Collection is described as something that may happen automatically.
Partners, advertisers and ad networks are named as collectors alongside Instacart.
Not stated here
The partners, advertisers and ad networks are not named.
Data Access & Collection · Context
Instacart may also receive information about you from other sources and parties
Besides collecting directly from you and automatically, Instacart says it may receive Personal Information about you from other sources or parties, including vendors and business partners that send contact, account, order, payment and activity information. The entries below name the specific sources.
Supporting quotations
We may receive Personal Information about you from other sources or parties.
We may also receive information, including contact, account, order, payment, and activity information, from our vendors and business partners
Qualifications & exceptions
Described as what Instacart "may" receive; the examples are introduced by "for example".
Data Access & Collection · Company practice
Third-party sign-in can give Instacart your name, email and identifiers
If you log in using a third-party platform such as Facebook or Google, Instacart may receive some information about you from that platform, depending on your settings there, including your name, email address, device identifier and other identifiers.
Supporting quotations
Certain of our Services allow you to login using your credentials from a third-party platform, for example, using your Facebook or Google logins. If you log in to the Services through these third-party platforms, then depending on your settings on these platforms, we may receive some information about you from them, including your name, email address, device identifier and other identifiers.
Qualifications & exceptions
Applies only to Services that offer third-party login and only if you use it.
What is received depends on your settings on the third-party platform.
Data Access & Collection · Company practice
Retailers may send loyalty-program membership status
Instacart may receive Personal Information from retail partners whose loyalty programs you participate in, such as confirmation of your loyalty member status, so you can receive loyalty benefits, discounts and promotions.
Supporting quotations
We may receive Personal Information from our retail partners in whose loyalty programs you participate, such as a confirmation of your loyalty member status, to enable you to receive your loyalty benefits, discounts, and special promotions.
Qualifications & exceptions
Applies to retailers whose loyalty programs you participate in.
Data Access & Collection · Company practice
Pharmacies send prescription-delivery details; Section 6 governs health information
If you use the Services for prescription delivery, the pharmacy processing your prescription sends Instacart your name, delivery address, email, birth date and phone number, the amount charged, the prescription numbers, in some cases refill totals and counts, and whether the drug needs temperature control. If a delivered drug is recalled, the pharmacy shares your name, email, order date and refund amount. The policy's prescription section says it governs how Instacart uses and discloses the health-related part of this information.
Supporting quotations
If you use the Services for prescription delivery, the pharmacy processing your prescription will provide us with your name, delivery address, email address, birth date, telephone number, the total amount (including sales tax, where applicable) being charged to you for the prescription drug product(s) purchased, the prescription number(s) and in some case the total number of refills and your refill count (if you select to have refills fulfilled through Instacart).
if a prescription drug product delivered to you through the Services has been recalled, the pharmacy will share your name, email address, the date of the prescription drug product order, and the total amount to be refunded to you with us.
This Section governs our use and disclosure of your Personal Health Information.
6. Prescription Deliveries (Not Available on Instacart White Labels)
Qualifications & exceptions
Applies only if you use the Services for prescription delivery, which is not available on Instacart White Labels.
In a conflict, the prescription section governs over the rest of the policy for Personal Health Information.
Not stated here
Which parts of this information count as Personal Health Information is defined in the prescription section, covered separately.
Data Access & Collection · Company practice
Service providers and vendors send information, including restaurant-order data
Instacart receives Personal Information from service providers and vendors that do work for it, including those that provide market research, delivery, map, email or SMS platforms, or help run parts of the Services. This also includes the vendor that processes and fulfils restaurant orders linked to your Instacart account.
Supporting quotations
We receive Personal Information from our service providers and other vendors that we engage to perform services for us, including those that provide market research, delivery services, map services, email, or SMS communication platforms, or who assist us with providing, operating, or maintaining parts of our Services.
This also includes our vendor who processes and fulfills your restaurant orders that are linked to your Instacart account.
Not stated here
The vendors and the specific information they send are not named.
Data Access & Collection · Company practice
Partners that integrate Instacart can send information about your use of their sites and apps
Partners that have integrated Instacart services into their websites or apps may let Instacart collect, or may share with it, information about your use of their sites or apps. This includes sites that use Instacart's APIs for account creation or access and Instacart experiences embedded in a partner app. For example, if you use an Instacart Shoppable Recipe button on another site, Instacart receives information about your use of that button and the third-party site or app.
Supporting quotations
Partners who have implemented or integrated certain Instacart services on their websites or applications may also let us collect information about your use of their sites or applications or share such information with us.
For example, if you use an Instacart Shoppable Recipe button on another site, we will receive information about your use of that button and of the third-party website or application.
Partners with whom we operate co-branded businesses, offer co-branded products.
Not stated here
The co-branded partners entry does not state what information is received from them.
Partner sites and apps are not named.
Data Access & Collection · Company practice
Advertising and marketing partners send identifiers, contact and browsing data
Instacart receives Personal Information about you from other parties, including advertising identifiers, contact information and browsing activity, to supplement what it collects. It also receives data from partners it works with for advertising measurement, analytics and attribution.
Supporting quotations
We receive Personal Information about you, including advertising identifiers, contact information, browsing activity and related data about you from other parties, to supplement the information we collect, and from partners with whom we work for advertising measurement, analytics, and attribution.
Not stated here
The partners are not named.
Data Access & Collection · Company practice
Fraud and dispute partners may send information about you
Instacart may receive Personal Information about you from partners that help it prevent fraud or that are involved in claims or disputes.
Supporting quotations
We may receive Personal Information about you from partners who assist us in fraud prevention or in connection with claims or disputes.
Not stated here
The partners and the types of information are not named.
Data Access & Collection · Company practice
Personal shoppers send delivery details and addresses
Instacart may receive Personal Information about you from its personal shoppers in connection with your delivery, including information about your address and delivery details.
Supporting quotations
We may receive Personal Information about you from Instacart personal shoppers in connection with your delivery, including information about your address and delivery details.
Data Access & Collection · Company practice
Account owners and other customers can cause information about you to be collected
If another Instacart account owner invites you to order through their account, such as a Family Account or Instacart Business Account, Instacart collects information about your activities on those accounts. If another customer refers you or sends you a gift or delivery through the Services, Instacart also receives personal information about you from that customer; related entries say it collects a referred or gift recipient's name, email and delivery address.
Supporting quotations
We also may collect or receive Personal Information relating to you from:
If other Instacart Services account owners invite you to place orders or request other services through their accounts, such as Family Accounts or Instacart Business Accounts, we collect information about your activities on those accounts.
Other Instacart customers, if they refer you to our Services, send you a gift or other order delivery through our Services.
you may refer a friend to Instacart or send an Instacart gift delivery or gift card to someone
Qualifications & exceptions
Applies when another account owner invites you or another customer refers you or sends you a gift or delivery.
Data Access & Collection · Company practice
Government authorities and publicly available sources may supply information
Instacart may collect or receive Personal Information relating to you from law enforcement, public health and other governmental authorities, and from publicly available sources.
Supporting quotations
Law enforcement, public health, and other governmental authorities.
Publicly available sources.
Not stated here
The policy does not say what information is received from these sources or for what purpose.
The sources are listed without conditions.
Data Access & Collection · Company practice
Identifiers: from you, automated means and third parties; sold or shared with advertising and analytics categories
Row: Identifiers (name, email, phone number, physical address, IP address and device identifiers, loyalty program numbers). Sources: directly from individuals, through automated means and third-party sources. Recipients listed in the sale, sharing or targeted-advertising column: advertising and marketing partners and analytics providers. Third-party sources, as described earlier, include third-party sign-in platforms that can supply a name, email and identifiers.
Supporting quotations
Identifiers
Example: Name, Email address, Phone number, Physical address, IP address and device identifiers, Loyalty program numbers
Directly from individuals
Through automated means
Third-party sources
Advertising and marketing partners
Analytics providers
we may receive some information about you from them, including your name, email address, device identifier and other identifiers.
Qualifications & exceptions
Recipients are given at category level for sale, sharing or targeted-advertising disclosures.
Data Access & Collection · Company practice
Customer-records categories (phone, payment information): advertising and marketing partners listed, not analytics
Row: Personal Information categories listed in the California Customer Records statute, with examples of telephone numbers and payment information (credit card information). Sources: directly from individuals, through automated means and third-party sources. Recipient listed in the sale, sharing or targeted-advertising column: advertising and marketing partners only. This row sits beside the payment processors section, which says card details are collected and processed by payment processors and Instacart may receive certain card details such as the last four digits and expiry.
Supporting quotations
Personal Information categories listed in the California Customer Records statute
Example: Telephone numbers, Payment information (credit card information)
Directly from individuals
Through automated means
Third-party sources
Advertising and marketing partners
your credit card or other payment information is collected and processed by our third-party payment processors.
Qualifications & exceptions
Recipients are given per category row, so the table does not say whether card details themselves are among what advertising partners receive.
Not stated here
The table does not say which items under this category reach advertising and marketing partners, or whether card details do.
Data Access & Collection · Company practice
Protected-classification characteristics (gender): from you only; advertising and analytics categories listed
Row: Characteristics of protected classifications under California or federal law, with the example of gender. Source: directly from individuals only. Recipients listed in the sale, sharing or targeted-advertising column: advertising and marketing partners and analytics providers. The collection section does not separately describe collecting gender.
Supporting quotations
Characteristics of protected classifications under California or federal law
Example: Gender
Directly from individuals
Advertising and marketing partners
Analytics providers
Qualifications & exceptions
Recipients are given per category row.
Not stated here
The body of the policy does not describe how or when gender is collected.
Data Access & Collection · Company practice
Commercial information, incl. payment and gift-card details: three sources; advertising and analytics listed
Row: Commercial information (products purchased or considered, purchase history, preferences and interest profiles, consuming tendencies, reviews), which the row says also includes payment information such as card details, digital wallet information, gift card numbers, account status and transaction details. Sources: directly from individuals, through automated means and third-party sources. Recipients listed in the sale, sharing or targeted-advertising column: advertising and marketing partners and analytics providers.
Supporting quotations
Commercial Information
Products you purchased or considered, Purchase history, Preferences and interest profiles, Consuming tendencies, Reviews
This also includes Payment information, including Payment card details, Digital wallet information, Gift card numbers, Account status and transaction details
Directly from individuals
Through automated means
Third-party sources
Advertising and marketing partners
Analytics providers
Qualifications & exceptions
Recipients are given per category row, so which of the listed items go to which recipient is not itemized.
Not stated here
The row does not say whether payment card details or gift card numbers are among what advertising partners or analytics providers receive.
Data Access & Collection · Company practice
Internet and network activity, incl. session replay: automated and third-party sources; advertising and analytics listed
Row: Internet/network activity (browsing and search history, clickstream data, app usage, interactions with the Services, emails, chatbots and advertisements, session replay and similar information). Sources: through automated means and third-party sources; "directly from individuals" is not listed for this row. Recipients listed in the sale, sharing or targeted-advertising column: advertising and marketing partners and analytics providers.
Supporting quotations
Internet/Network Activity
Your browsing and search history, Clickstream data, App usage, Interactions with the Services, emails, chatbots and advertisements, Session replay, and similar information
Row: Geolocation data, described as approximate location data. Sources: directly from individuals and through automated means. Recipients listed in the sale, sharing or targeted-advertising column: advertising and marketing partners and analytics providers. Precise geolocation appears separately under the sensitive row.
Supporting quotations
Geolocation Data
Approximate location data
Directly from individuals
Through automated means
Advertising and marketing partners
Analytics providers
Qualifications & exceptions
The row names approximate location data; precise geolocation is listed under Sensitive Personal Information.
Data Access & Collection · Company practice
Audio, electronic and visual information: from you and automated means; recipients column says N/A
Row: Audio, electronic, visual or similar information (customer service call recordings, chat transcripts, training recordings, customer-uploaded information). Sources: directly from individuals and through automated means. The sale, sharing or targeted-advertising column says N/A. Elsewhere the policy describes collecting customer service interactions and shopper messages but does not separately describe call recordings or training recordings.
Supporting quotations
Audio, electronic, visual, or similar information Customer service call recordings, Chat transcripts, Training recordings, Customer-uploaded information
Directly from individuals
Through automated means
N/A
Qualifications & exceptions
N/A is in the column for sale, sharing and targeted-advertising recipients; it does not on its own say the category is never disclosed for other business purposes.
Not stated here
Call recordings and training recordings are not described outside the table, including how long they are kept.
Data Access & Collection · Company practice
Sensitive Personal Information (IDs, passwords, precise location, race/ethnicity, medical): recipients column N/A
Row: Sensitive Personal Information. Depending on your interaction with the Services, Instacart collects government-issued IDs, log-in information combined with passwords that gives account access, precise geolocation, race or ethnicity, and medical information. Sources: directly from individuals and through automated means. The sale, sharing or targeted-advertising column says N/A. The collection section separately describes precise geolocation that you allow through device permissions, and pharmacy-supplied prescription data.
Supporting quotations
Sensitive Personal Information
Depending on your interaction with the Services, we collect government-issued IDs, Log-in information for accounts in combination with passwords allowing access to the accounts, Precise geolocation, Race/ethnicity, and Medical information
Directly from individuals
Through automated means
N/A
we may collect the precise location of your device.
Qualifications & exceptions
Collected "depending on your interaction with the Services".
N/A is in the column for sale, sharing and targeted-advertising recipients and is not a statement that the data is never disclosed for business purposes, such as precise location to shoppers or ID details to retailers for alcohol orders.
Not stated here
Race or ethnicity is not described outside the table.
The policy does not say which interactions lead to which sensitive categories.
Data Access & Collection · Company commitment
Services are not for children under 18; Instacart says it will take reasonable steps to remove their data
The Services are not designed for or intentionally directed to children under 18. If Instacart becomes aware it received Personal Information from someone under 18, it says it will take reasonable steps to remove it from its records. Separately, the collection section says you may not provide Personal Information about children under 18.
Supporting quotations
8. Children’s Privacy
The Services are not designed for or intentionally directed to children under the age of 18.
If we become aware that we have received Personal Information from an individual under the age of 18, we will take reasonable steps to remove the individual’s Personal Information from our records.
You may not provide Personal Information about children under the age of 18.
Qualifications & exceptions
The removal commitment applies once Instacart becomes aware, and is limited to reasonable steps.
Not stated here
The policy does not describe any age check beyond the ID verification for restricted orders.
Instacart does not respond to Do Not Track signals
Do Not Track is a developing browser standard that tells websites you do not want your activity collected over time and across third-party websites. Although Instacart says it tries to honor users' privacy preferences, it does not interpret or respond to DNT or similar browser signals at this time. This sits beside the policy's statement that it honors Global Privacy Control signals as required under applicable laws, and its description of advertising partners that may track activity across websites over time.
Supporting quotations
Do Not Track
we do not interpret or respond to DNT or other similar signals from your browser at this time.
“Do Not Track” (“DNT”) is a developing standard for web browsers that aims to inform the websites you visit that you do not want information about your online activity collected over time and across third-party websites or online services.
Some of our advertising partners may use cookies, SDKs, or other trackers to collect information about your online activity over time and across different websites or online services.
Qualifications & exceptions
The statement is limited to DNT and similar browser signals "at this time".
Not stated here
Whether any signals other than GPC are honored is not stated beyond "other similar signals".
Cross-references
contrast (model-proposed): Right to opt out of sale, sharing and targeted advertising, including through GPC browser signals — contrast: Instacart says it does not respond to Do Not Track or similar signals, while it says it listens for and honors Global Privacy Control signals as required under applicable laws. The two statements treat different browser signals differently, and the policy does not explain the basis for the distinction beyond the legal requirement.