Privacy Policy

Effective Date: March 18, 2026

1. Introduction

FoodTrucker, LLC ("FoodTrucker," "we," "our," or "us") operates the FoodTrucker mobile application and website (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you access or use our Service.

By using the Service, you consent to the data practices described in this Privacy Policy. If you do not agree with any part of this Privacy Policy, please do not use the Service.

2. Information We Collect

We collect information in the following ways:

2.1 Information You Provide Directly

• Account Information: First name, last name, email address, and phone number when you create an account. Customers verify their phone number via SMS verification code during signup. Food truck operators verify their email address via a 6-digit verification code sent to their email during signup
• Profile Information: Any additional information you choose to add to your profile, including profile photos
• Order Information: Details about orders you place, including items selected, customizations, special instructions, and order history
• Payment Information: All orders are paid through the app. Payment card details are processed securely by our third-party payment processor (Stripe). We do not store complete payment card numbers on our servers. We retain transaction records including order amounts, dates, and payment confirmation for accounting and dispute resolution purposes
• Communications: Information you provide when you contact us for support or feedback, including questions and reviews you submit on truck profiles
• Food Truck Operator Information: If you register as a food truck operator, we collect business name, business address, tax identification information, and banking information for payment processing
• Images and Photos: If you upload photos (such as truck profile images or menu item photos), those images are stored on our cloud hosting provider. Uploaded images may be processed using third-party AI services for background removal

2.2 Information Collected Automatically

• Device Information: Device type, operating system and version, unique device identifiers, mobile network information
• Log Information: Access times, pages viewed, IP address, referring URL, and the page visited before navigating to our Service
• Location Information: With your consent, we collect precise geolocation data from your mobile device to show nearby food trucks and calculate distances. You may disable location services through your device settings, though this will limit certain features
• Usage Information: Features used, actions taken, time and frequency of use, search queries

2.3 Information from Third Parties

• Authentication Services: If you sign in using Google OAuth, we receive your name, email address, and profile photo as permitted by your Google account settings. We use this information solely to create and maintain your FoodTrucker account
• Analytics Providers: We receive aggregated analytics data about how users interact with our Service

3. How We Use Your Information

We use the information we collect for the following purposes:

• Provide the Service: Create and manage your account, process orders, facilitate communication between customers and food truck operators
• Location-Based Features: Display nearby food trucks, calculate distances, provide navigation assistance
• Communications: Send order confirmations, status updates via SMS text messages and push notifications (with your consent), respond to inquiries, and provide customer support. We may also send you notifications when food trucks you follow go live or post updates. If you verify your phone number, we may send you text messages about your order status (e.g., order confirmed, ready for pickup). Message and data rates may apply. You can opt out of SMS notifications at any time by replying STOP
• Improvements: Analyze usage patterns, troubleshoot issues, develop new features, and improve the Service
• Personalization: Remember your preferences, show relevant food trucks and menu items based on your history
• Safety and Security: Detect, investigate, and prevent fraudulent transactions, abuse, and other harmful activities; protect the rights and safety of users and third parties
• Legal Compliance: Comply with applicable laws, regulations, legal processes, or governmental requests

4. How We Share Your Information

We may share your information in the following circumstances:

• With Food Truck Operators: When you place an order, we share your name, phone number, order details, and any special instructions with the food truck fulfilling your order so they can prepare and provide your food
• Service Providers: We share information with third-party vendors who perform services on our behalf, including cloud hosting (Vercel), image storage and processing (Cloudinary), AI image processing (Replicate), payment processing (Stripe and Stripe Connect), SMS delivery (Twilio), email delivery (SendGrid), point-of-sale integration (Square), mapping services (Google Maps), analytics, and customer support. These providers are contractually obligated to use your information only to provide services to us
• Business Transfers: If we are involved in a merger, acquisition, financing, or sale of business assets, your information may be transferred as part of that transaction
• Legal Requirements: We may disclose information if required by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others, investigate fraud, or respond to a government request
• With Your Consent: We may share information for other purposes with your explicit consent

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

5. Third-Party Services

Our Service integrates with third-party services that have their own privacy policies:

• Google Maps & Street View: We use Google Maps and Google Street View to display food truck locations and provide location previews. Google's privacy policy applies to their services
• Stripe & Stripe Connect: Payment processing is handled by Stripe. Food truck operators connect their Stripe Express accounts via Stripe Connect to receive payouts. When you place an order, payment data is shared with both Stripe and the operator's connected Stripe Express account to facilitate the destination charge and direct payout. Stripe's privacy policy governs payment data
• Square POS: Food truck operators may optionally connect their Square POS account. When connected, menu items, photos, and inventory/sold-out status are synced bidirectionally between FoodTrucker and Square. Orders placed through FoodTrucker are sent to the operator's Square POS. Square's privacy policy governs their handling of this data
• Cloudinary: Images you upload (truck photos, menu items) are stored and served through Cloudinary's cloud infrastructure
• Replicate: We use Replicate's AI services for image background removal when processing truck profile photos
• Twilio: SMS text messages for order status notifications and phone number verification are delivered through Twilio. Twilio's privacy policy governs their handling of message data
• SendGrid: Transactional emails (order receipts, password resets, email verification codes, order notifications) are delivered through SendGrid
• Sentry: We use Sentry for error monitoring and crash reporting. Sentry may collect device information, operating system version, and diagnostic data such as stack traces when errors occur. This data is used solely to identify and fix bugs. Sentry's privacy policy governs their handling of this data
• Push Notification Services: Apple Push Notification Service (APNs) and Firebase Cloud Messaging (FCM) are used to deliver push notifications for order updates and truck activity

We encourage you to review the privacy policies of these third-party services.

6. Data Retention

We retain your personal information for as long as necessary to:

• Provide the Service and maintain your account
• Comply with legal obligations (e.g., tax records, transaction history)
• Resolve disputes and enforce our agreements

When you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law or for legitimate business purposes (such as maintaining transaction records for tax compliance).

7. Data Security

We implement appropriate technical and organizational security measures to protect your information, including:

• Encryption of data in transit using TLS/SSL (HTTPS)
• Secure password hashing using bcrypt
• Access controls limiting who can access personal data
• Regular security assessments and monitoring
• Secure cloud infrastructure with industry-standard protections

However, no method of transmission over the Internet or electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee absolute security.

8. Your Rights and Choices

8.1 All Users

• Access and Update: You can access and update your account information through the app's profile settings
• Delete Account: You can request deletion of your account by contacting us at contact@foodtrucker.co
• Location Services: You can disable location access through your device settings
• Push Notifications: You can manage notification preferences in the app or through your device settings
• Marketing Communications: You can opt out of promotional emails by clicking "unsubscribe" in any marketing email

8.2 California Residents (CCPA/CPRA Rights)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: You may request information about the categories and specific pieces of personal information we have collected about you, the sources of that information, the purposes for collecting it, and the categories of third parties with whom we share it
• Right to Delete: You may request that we delete personal information we have collected from you, subject to certain exceptions
• Right to Correct: You may request that we correct inaccurate personal information
• Right to Opt-Out of Sale/Sharing: We do not sell or share your personal information for cross-context behavioral advertising
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

To exercise these rights, contact us at contact@foodtrucker.co. We will verify your identity before processing your request.

8.3 European Economic Area, UK, and Switzerland Residents (GDPR Rights)

If you are in the EEA, UK, or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR):

• Access: Request access to your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Request restriction of processing
• Portability: Request a copy of your data in a structured, machine-readable format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time where processing is based on consent

Our legal bases for processing include: contract performance (to provide the Service), legitimate interests (to improve and secure the Service), consent (for location data and notifications), and legal compliance.

9. Children's Privacy

The Service is not directed to children under 13 years of age (or 16 in certain jurisdictions). We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us at contact@foodtrucker.co. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly.

10. International Data Transfers

Your information may be transferred to and processed in the United States and other countries where our service providers operate. These countries may have data protection laws that differ from your jurisdiction. By using the Service, you consent to the transfer of your information to the United States and other countries. We take steps to ensure that your data receives adequate protection in accordance with this Privacy Policy and applicable law.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Effective Date" at the top of this policy
• Notify you through the app or by email (for material changes)
• Where required by law, obtain your consent to the changes

We encourage you to review this Privacy Policy periodically. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: