Privacy Policy

§1 Information We Collect

1.1 Information You Provide Directly

When you create an account or use the Service, you may provide:

• Name and email address (via account registration);
• Profile photo (optional);
• Reviews, ratings, and comments you submit;
• Vendor listing information, including business name, description, photos, menu items, and operating hours (vendors only); and
• Communications you send to us, including support requests.

1.2 Information Collected Automatically

When you use the Service, we automatically collect:

• Device information, including device type, operating system, and unique device identifiers;
• Log data, including IP address, browser type, pages visited, and timestamps;
• Usage data, including features used, searches performed, and listings viewed;
• Crash reports and performance data; and
• App interaction data such as taps, scrolls, and session duration.

1.3 Location Information

We collect location information as follows:

• Precise GPS location: With your permission, we collect your device's real-time GPS coordinates. You may grant or deny this permission through your device settings.
• Approximate location: If you deny precise location access, we may use your IP address to determine an approximate location for general service functionality.
• Vendor location data: Vendors who enable location sharing transmit their real-time GPS coordinates, which are displayed publicly to all users.
• Location history: We may retain a history of your location interactions with the Service for service improvement purposes.

You may disable location access at any time in your device settings. Disabling location access will limit your ability to discover nearby vendors.

1.4 Authentication Information

We use Google Firebase Authentication to manage user accounts. Firebase may collect authentication-related data including email address, user ID, and sign-in timestamps. When you sign in using a third-party provider (Google, Facebook, or Apple), those providers share basic profile information with us in accordance with their own privacy policies. We do not store your third-party passwords.

1.5 Information from Third Parties

We may receive information about you from third-party services, including social login providers (Google, Facebook, Apple), analytics providers, and map and geolocation service providers used to power our mapping features.

§2 How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service;
• Display food vendor locations and listings to users;
• Create and manage your user account;
• Personalize your experience, such as showing vendors near your location;
• Process and display vendor listings and real-time location data;
• Send you service-related notifications, such as account updates or changes to this Policy;
• Respond to your support requests and communications;
• Monitor and analyze usage patterns to improve the Service;
• Detect, prevent, and address fraud, abuse, and security incidents;
• Enforce our Terms of Service and Vendor Agreement; and
• Comply with applicable legal obligations.

We do not use your information to serve third-party advertisements within the Service.

§3 How We Share Your Information

3.1 Public Information

Certain information is visible to all users of the platform by design:

• Vendor listings, including business name, description, photos, menu, hours, and ratings;
• Vendor real-time location (when enabled by the vendor); and
• User-submitted reviews and ratings (associated with your display name or username).

3.2 Service Providers

We share information with trusted third-party service providers who help us operate the Service, including:

• Firebase (Google LLC) — authentication, hosting, and database services;
• Fly.io — backend infrastructure and API hosting;
• MapTiler / MapLibre — map rendering and geolocation services;
• Cloudflare — content delivery, security, and storage (R2);
• Email service providers — transactional email delivery; and
• Analytics providers — anonymized usage analytics.

These providers are contractually obligated to use your information only to perform services on our behalf and in accordance with this Privacy Policy.

3.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid legal process, including subpoenas, court orders, or government requests. We may also disclose information where we believe disclosure is necessary to protect the rights, property, or safety of TrackBite, our users, or the public.

3.4 Business Transfers

If TrackBite is involved in a merger, acquisition, financing, or sale of all or a portion of its assets, your information may be transferred as part of that transaction. We will notify you via in-app notice or email before your information is transferred and becomes subject to a different privacy policy.

3.5 With Your Consent

We may share your information with third parties when you have given us explicit consent to do so.

3.6 We Do Not Sell Your Data

§4 Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:

• Account data is retained until you delete your account;
• Location data associated with your session is retained for up to 90 days for service improvement purposes;
• Vendor listing information may remain publicly visible until removed by the vendor, removed by TrackBite, or the relevant account is deleted or terminated, subject to legal, archival, fraud prevention, or operational retention needs;
• Log and usage data is typically retained for up to 12 months;
• We may retain certain information longer where required by law or for legitimate business purposes such as fraud prevention; and
• We may use aggregated or de-identified usage, interaction, and listing performance data to improve the Service, develop analytics features, benchmark activity, and support product operations, provided such data does not identify you personally.

To request deletion of your account and associated data, contact us at support@trackbite.io.

§5 Your Privacy Rights

5.1 California Residents — CCPA / CPRA

If you are a California resident, you have the following rights:

To exercise these rights, contact us at support@trackbite.io. We will respond to verified requests within 45 days as required by law.

5.2 All Users

Regardless of location, all users may:

• Access and update their account information through the app settings;
• Disable location permissions at any time through device settings;
• Delete their account by contacting support@trackbite.io; and
• Opt out of non-essential communications by following unsubscribe instructions in emails.

§6 Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete that information promptly. If you believe a child under 13 has submitted information to us, please contact us at support@trackbite.io.

§7 Data Security

We implement industry-standard technical and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encrypted data transmission using HTTPS/TLS;
• Firebase Authentication for secure account management;
• Access controls limiting employee access to personal data;
• Regular security assessments of our infrastructure; and
• Automated database backups with encrypted storage.

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

§8 Third-Party Services and Links

The Service may contain links to third-party websites or integrate with third-party services. This Privacy Policy does not apply to those third parties. We encourage you to review their privacy policies:

§9 International Users

TrackBite is operated in the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States. By using the Service, you consent to the transfer of your information to the United States, which may have different data protection laws than your country of residence.

§10 Push Notifications

We may send push notifications relating to your use of the Service, including but not limited to account activity, security notices, service updates, nearby businesses, followed businesses going live, catering or hire request updates, and similar product functionality. You may opt out of push notifications at any time through your device settings. Disabling notifications will not affect your core use of the Service.

§11 Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the Effective Date at the top of this page and, where appropriate, by sending an in-app notification or email. Your continued use of the Service after changes become effective constitutes your acceptance of the updated Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

§12 Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: