Instacart Privacy Policy

This Privacy Policy, last updated January 15, 2026, governs the collection, use, and disclosure of Personal Information by Maplebear Inc. d/b/a Instacart and Maplebear Canada Inc. across Instacart websites, mobile apps, APIs, and white-label retailer platforms where the policy is linked. The policy states that Instacart collects contact information, account credentials, purchase history, device identifiers, precise geolocation, browsing and search activity, communications content, and inferred demographic and behavioral data; the terms authorize use of this information for service delivery, personalized advertising, cross-context behavioral advertising, and sharing with retail partners, advertising networks, analytics providers, and data brokers. The policy discloses that Instacart sells and shares Personal Information as defined under the California Consumer Privacy Act, including sharing precise geolocation and purchase data with advertising partners; it separately discloses a Retail Data program under which aggregated and de-identified purchase data may be licensed to consumer packaged goods brands, a practice operationally distinct from standard consumer app data practices. The policy engages the California Consumer Privacy Act and California Privacy Rights Act, Canada's Personal Information Protection and Electronic Documents Act and provincial equivalents, Nevada's online privacy law, and U.S. Federal Trade Commission jurisdiction over unfair or deceptive data practices; California residents are granted opt-out rights regarding sale and sharing of Personal Information, the right to limit use of sensitive personal information, and the right to know and delete. The policy also contains specific provisions governing prescription delivery data and restaurant order data, each with distinct handling disclosures that may engage HIPAA-adjacent considerations and sector-specific regulatory scrutiny.