Last Updated: October 8, 2026

Carrot Group, Inc. (“Carrot,” “we,” “our,” and/or “us”) values the privacy of individuals who use our application, website, and related services (collectively, our “Services”). This privacy policy (the “Privacy Policy”) explains how we collect, use, and share information from users of our Services (“Users”). By using our Services, you agree to the collection, use, disclosure, and procedures this Privacy Policy describes. Beyond the Privacy Policy, your use of our Services is also subject to our Terms and Conditions (digcarrot.com/terms-of-service).

Information We Collect

We collect information about you from various sources, as described below.

A. Information You Provide to Us.

Registration and Profile Information. When you sign up for an account, we ask you for your name, phone number, username, and date of birth. We will send a verification code to the phone number you provide when you sign up for an account. If you choose to upload them, we will collect your profile picture and profile banner. We will also collect any other profile information you choose to provide, such as a bio and your school or other affiliation.

Your Content. If you submit information through our Services, such as sending questions and images to other users, posting questions, responding to the Daily Dig or to other users’ questions, commenting, or chatting in direct messages and group chats, we receive that information.

Communications. If you contact us directly, we may receive additional information about you. For example, when you contact our Customer Support Team, we will receive your name, email address, phone number, the contents of a message or attachments that you may send to us, and other information you choose to provide. When we send you emails, we may track whether you open them to learn how to deliver a better customer experience and improve our Services.

Payment Information. Subscriptions and in-app purchases are processed by Apple through the App Store. We receive confirmation of your purchase, but not your full payment card details. When you link your cryptocurrency wallet to your account (e.g., to withdraw your carrot coins), we will receive your public wallet address.

Shipping Information. If you redeem a physical item from the Carrot Store, we collect the recipient name and shipping address you provide, and share them with our shipping providers to deliver your item.

B. Information We Collect When You Use Our Services.

Device Information. We receive information about the device and software you use to access our Services, including IP address (which may tell us your general location), web browser type, operating system version, phone carrier and manufacturer, application installations, device identifiers, and push notification tokens.

Usage Information. We automatically receive information about your interactions with our Services, like the pages or other content you view, the searches you conduct, people you follow, purchases you make, content you “thumbs up,” and the dates and times of your visits.

Your Contacts. If you permit us to access the address book on your device, you can use Find Friends to see which of your contacts already use Carrot. To do this, your device sends the phone numbers in your address book to us, and we match them against registered accounts. We do not store your contacts’ phone numbers after the match, and we never show other users which phone number belongs to which account. We also receive your friends’ phone numbers if you directly invite them through our Services.

Your Messages. When you exchange messages with other users through our Services, we receive those messages.

Information from Cookies and Similar Technologies. We and our third-party partners collect information using cookies, pixel tags, or similar technologies. Our third-party partners, such as analytics partners, may use these technologies to collect information about your online activities over time and across different services. Cookies are small text files containing a string of alphanumeric characters. We may use both session cookies and persistent cookies. A session cookie disappears after you close your browser. A persistent cookie remains after you close your browser and may be used by your browser on subsequent visits to our Services.

Please review your web browser’s “Help” file to learn the proper way to modify your cookie settings. Please note that if you delete or choose not to accept cookies from the Service, you may not be able to utilize the features of the Service to their fullest potential.

C. Information We Infer.

Interest Profiles. We may use automated tools, including AI models, to analyze content you post, such as your Daily Dig answers and your answers to other users’ posted questions, to infer your interests (for example, favorite shows, hobbies, or seasons). We use these interest profiles to suggest people you may want to connect with, and to suggest you to others, as described in “Make Friends” below. Interest profiles are limited to interests and tastes. We do not use them to infer sensitive characteristics such as health, religion, sexual orientation, political views, or racial or ethnic origin. We do not build interest profiles from your direct messages or for users who have turned off Make Friends.

D. Information We Receive from Third Parties.

Information from third-party services. If you choose to link our Services to a third-party account, we may receive information about you. If you wish to limit the information available to us, you should visit the privacy settings of your third-party accounts to learn about your options.

How We Use the Information We Collect

We use the information we collect:

• To provide, maintain, improve, and enhance our Services;
• To personalize your experience on our Services such as by providing tailored content and recommendations;
• To suggest people you may want to connect with, and to suggest you to other users, based on shared interests, answers you have in common, your school, and people you both follow;
• To understand and analyze how you use our Services and develop new products, services, features, and functionality;
• To communicate with you, provide you with updates and other information relating to our Services, provide information that you request, respond to comments and questions, and otherwise provide customer support;
• For marketing and advertising purposes, such as developing and providing promotional and advertising materials that may be relevant, valuable or otherwise of interest to you;
• To generate anonymized, aggregate data containing only de-identified, non-personal information that we may use to publish reports;
• To send you text messages and push notifications;
• To facilitate transactions and payments;
• To find and prevent fraud, and respond to trust and safety issues that may arise;
• To moderate content and keep the Services safe, including by using automated tools to detect content that violates our Terms, such as graphic images or abusive behavior;
• To operate automated Carrot accounts that post questions and replies generated with AI;
• For compliance purposes, including enforcing our Terms and Conditions or other legal rights, or as may be required by applicable laws and regulations or requested by any judicial process or governmental agency; and
• For other purposes for which we provide specific notice at the time the information is collected.

Automated Processing and Artificial Intelligence

We use artificial intelligence (AI) services provided by our service providers, such as OpenAI, to help operate certain features: suggesting connections in Make Friends, writing the short reason shown with a suggestion, moderating content, and generating posts and replies from automated Carrot accounts. When we send content to these providers, we send only what the feature needs, and we identify users by internal codes rather than by name or username. Our providers process this content on our behalf and are not permitted to use it to train their models.

Some accounts on Carrot are operated by Carrot and post questions and replies generated with AI.

Make Friends. Make Friends suggests other users you may enjoy connecting with. Suggestions are based on your interest profile, answers you have in common, your school, and people you both follow. Each suggestion shows the other user’s public profile and a short reason, which may quote public answers you both gave. Users under 18 are only suggested to other users under 18 who are within about a year of their age, and are never suggested to adults. Adults are only suggested to other adults. You can turn off Make Friends in Settings. When you do, we stop suggesting you to others and delete your interest profile.

How We Share the Information We Collect

Affiliates. We may share any information we receive with our current or future affiliates for any of the purposes described in this Privacy Policy.

Vendors and Service Providers. We may share any information we receive with vendors and service providers retained in connection with the provision of our Services. These include providers of cloud hosting and storage (such as Amazon Web Services and Google Firebase), account verification and SMS, analytics, logging and monitoring (such as Better Stack), AI services (such as OpenAI), image moderation, link sharing, payments (Apple), shipping and gift card fulfillment, and customer support.

Your Content. Our Services are social services in which you can find, enjoy, and share content. Your username, profile picture, and other profile information will always be viewable and searchable by other users. The content you post to the Services, such as responses to the Daily Dig and content you “thumbs up” will be viewable by other users. Your friends will also be able to see your name associated with your content. If Make Friends is on, we may suggest your profile to other users and show them public answers you have in common. Unless you turn off “Let Contacts Find Me,” users who have your phone number in their contacts can find your account through Find Friends. Your answers to questions, including questions sent to you directly, are visible to other users. Messages you send in direct chats are visible only to the people in that chat. We are not responsible for the other users’ use of available information, so you should carefully consider whether and what to post or how you identify yourself on the Services.

Public Blockchains. If you convert carrot coins to CRTC tokens or withdraw them to a wallet, the transaction is recorded on a public blockchain (Polygon), where your wallet address and the transaction are publicly and permanently visible. We cannot change or delete blockchain records.

Analytics Partners. We use analytics services such as Google Analytics for Firebase to collect and process certain analytics data. These services may also collect information about your use of other websites, apps, and online resources. You can learn more about Google’s practices by visiting https://www.google.com/policies/privacy/partners/.

No Advertising or Sale of Information. We do not show ads, and we do not sell your personal information or share it with third parties for cross-context behavioral advertising.

As Required By Law and Similar Disclosures. We may access, preserve, and disclose your information if we believe doing so is required or appropriate to: (a) comply with law enforcement requests and legal process, such as a court order or subpoena; (b) respond to your requests; or (c) protect your, our, or others’ rights, property, or safety. For the avoidance of doubt, the disclosure of your information may occur if you post any objectionable content on or through the Services.

Merger, Sale, or Other Asset Transfers. We may transfer your information to service providers, advisors, potential transactional partners, or other third parties in connection with the consideration, negotiation, or completion of a corporate transaction in which we are acquired by or merged with another company or we sell, liquidate, or transfer all or a portion of our assets. The use of your information following any of these events will be governed by the provisions of this Privacy Policy in effect at the time the applicable information was collected.

Consent. We may also disclose your information with your permission.

Your Choices

Contacts. If you have given us access to your contacts, you may disable our access through your mobile operating system settings. You can also stop other users from finding you through their contacts by turning off “Let Contacts Find Me” in Settings.

Make Friends. You can turn off Make Friends in Settings at any time. When you do, we stop suggesting you to other users and delete your interest profile.

Marketing Communications. If we send you promotional emails, you can unsubscribe via the link provided in them.

Blocking Users. You may block friends or other contacts, in which case the user cannot send you digs, chats, or see your Daily Dig responses. Blocked users are never suggested to you, or you to them, in Make Friends.

Do Not Track. Some browsers send “Do Not Track” signals. Because there is no common standard for responding to them, our Services do not currently respond to Do Not Track signals.

If you choose not to provide us with information we collect, some features of our Services may not work as intended.

Third Parties

Our Services may contain links to other websites, products, or services that we do not own or operate. We are not responsible for the privacy practices of these third parties. Please be aware that this Privacy Policy does not apply to your activities on these third-party services or any information you disclose to these third parties. We encourage you to read their privacy policies before providing any information to them.

Security

We make reasonable efforts to protect your information by using physical and electronic safeguards designed to improve the security of the information we maintain. However, as no electronic transmission or storage of information can be entirely secure, we can make no guarantees as to the security or privacy of your information.

Data Retention

We keep your information for as long as your account is active and as needed to provide the Services. When you delete your account, we delete or de-identify your personal information within 30 days, except where we need to keep it to comply with law, resolve disputes, prevent fraud, or enforce our agreements, such as records of coin transactions. Interest profiles are deleted when you turn off Make Friends or delete your account, and are rebuilt rather than kept as a history. Content that others have already copied or shared, and records on public blockchains, may persist.

Children’s Privacy

We do not knowingly collect, maintain, or use personal information from children under 13 years of age, and no part of our Services is directed to children. If you learn that a child has provided us with personal information in violation of this Privacy Policy, then you may alert us at support@digcarrot.com. If you are a California resident under the age of 18 and you wish to remove content that you publicly posted, you may submit a request by contacting us at support@digcarrot.com. Removing the public content does not ensure complete or comprehensive removal of the content or information.

Users Under 18. Users aged 13 to 17 may use Carrot. In Make Friends, they are only suggested to other users under 18 within about a year of their age, and never to adults. Like all users, they can turn off Make Friends in Settings at any time.

International Visitors

Our Services are hosted in the United States and intended for visitors located within the United States. If you choose to use the Services from the European Union or other regions of the world with laws governing data collection and use that may differ from U.S. law, then please note that you are transferring your personal information outside of those regions to the United States for storage and processing. Also, we may transfer your data from the U.S. to other countries or regions in connection with storage and processing of data, fulfilling your requests, and operating the Services. By providing any information, including personal information, on or to the Services, you consent to such transfer, storage, and processing.

Access, Update, and Delete Your Information

You can update your account and profile information through your profile settings, and delete your account at any time in the app’s settings. To request a copy of your information or make another privacy request, contact us at support@digcarrot.com.

Changes to this Privacy Policy

We will post any adjustments to the Privacy Policy on this page, and the revised version will be effective when it is posted. If we materially change the ways in which we use or share personal information previously collected from you through the Services, we will notify you through the Services, by email, or other communication.

Contact Information

If you have any questions, comments, or concerns about our processing activities, please email us at support@digcarrot.com.

Messaging Terms & Conditions

General
When you opt-in to the service, we will send you a message to confirm your signup.

By opting into messages, you agree to receive recurring automated marketing and informational text messages from Carrot for Carrot SMS Messaging. Automated messages may be sent using an automatic telephone dialing system to the mobile telephone number you provided when signing up or any other number that you designate.

Message frequency varies, and additional mobile messages may be sent periodically based on your interaction with Carrot. Carrot Group Inc. reserves the right to alter the frequency of messages sent at any time to increase or decrease the total number of sent messages. Carrot Group Inc. also reserves the right to change the short code or phone number where messages are sent.

Message and data rates may apply. If you have any questions about your text plan or data plan, it is best to contact your wireless provider. Your wireless provider is not liable for delayed or undelivered messages.

Your consent to receive marketing messages is not a condition of purchase.

Carriers
Carriers are not liable for delayed or undelivered messages.

Cancellation
You can cancel any time by texting “STOP”. After you send the SMS message “STOP”, we will send you a message to confirm that you have been unsubscribed and no more messages will be sent. If you would like to receive messages from Carrot again, just sign up as you did the first time and Carrot will start sending messages to you again.

Info
Text “HELP” at any time and we will respond with instructions on how to unsubscribe. For support regarding our services, email us at support@digcarrot.com.

Transfer of Number
You agree that before changing your mobile number or transferring your mobile number to another individual, you will either reply “STOP” from the original number or notify us of your old number at support@digcarrot.com. The duty to inform us based on the above events is a condition of using this service to receive messages.

Privacy
If you have any questions about your data or our privacy practices, please visit our Privacy Policy or contact support@digcarrot.com.

Messaging Terms Changes
We reserve the right to change or terminate our messaging program at any time. We also reserve the right to update these Messaging Terms at any time. Such changes will be effective immediately upon posting. Your continued enrollment following such changes shall constitute your acceptance of such changes.