Privacy Policy

Information We Collect

We collect information you provide directly, such as your name, email address, phone number, and payment details when you create an account or place an order. We also automatically collect device information (device type, operating system, unique device identifiers), usage data (pages visited, features used, interactions), and location data when you use our platform to find nearby food trucks.

How We Use Your Information

We use your information to provide and improve our services, process orders and payments, send push notifications and alerts about food trucks you follow, communicate with you about your account and orders, verify your identity via SMS, and personalize your experience. We may also use aggregated, anonymized data for analytics and platform improvements.

Location Data

With your permission, we collect your device location to show nearby food trucks, display them on a map, and enable location-based features. On our iOS app, location access is requested at runtime and can be changed at any time in your device Settings. On the web, your browser will prompt for location permission. Some features may be limited without location access.

Push Notifications & Device Tokens

If you turn on notifications, your device gives us a push token. A push token is an identifier for one app installation on one device, and it is what lets us deliver a message to your phone. We store it against your account so we can send order updates and alerts from trucks you follow, along with the platform (iOS or Android) and when the device was last active. On iOS we also store a second short-lived token for Live Activities, which is tied to a single order and removed when that order is done. These tokens are linked to your account. We do not use them to track you across apps or websites, we do not use them for advertising, and we do not share them with data brokers. Turn notifications off for BiteRoutes in your device settings and we stop sending them. Delete your account and the stored tokens are deleted along with it.

Text Messages

We text you only if you ask us to, and only to US mobile numbers. We use your phone number for two things: sending a verification code when you add or confirm a number on your account, and sending an alert that a truck you favorited has opened, which you switch on per truck. Reply STOP to any BiteRoutes text to stop receiving them, or reply HELP for help. Message and data rates may apply. Texts are sent through AWS End User Messaging. We do not sell your phone number and we do not share it for anyone else marketing to you.

Seller Onboarding & Payout Data

This section applies if you sign up to get paid as a food truck operator. Stripe collects your identity and banking information directly. That includes your legal name, date of birth, a government identification number such as a Social Security number, and your bank account details, entered into Stripe's own forms displayed inside your BiteRoutes dashboard. That information goes to Stripe. BiteRoutes never receives it and never stores it. What we store is limited to your Stripe account ID, whether the account is cleared to receive transfers, whether Stripe is still waiting on something from you and what that is, and when we last checked. Stripe's use of your information is covered by its own privacy policy, and your payout account is governed by the Stripe Connected Account Agreement.

Stripe Privacy PolicyStripe Connected Account Agreement

Sharing Your Information

We share your information with food truck operators so they can make and hand over your order. We also use third-party services: Stripe (payment processing and seller payouts), AWS Cognito (authentication), Amazon SES (email), AWS End User Messaging (text messages), Amazon SNS with Apple Push Notification service and Expo (push notifications), Amazon S3 (image storage), and Mapbox (maps). These providers process data on our behalf under their own privacy policies. We do not sell your personal information to third parties, and we do not run advertising or cross-site tracking on our platform.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. Order history and transaction records are retained for legal and accounting purposes. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law.

Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS/SSL) and at rest, secure authentication via AWS Cognito, and regular security reviews. Card details are processed directly by Stripe and are never stored on our servers. The same is true of seller identity and bank details collected during payout onboarding: they go to Stripe and never touch our systems. However, no method of transmission over the internet is 100% secure.

Your Rights

You may access, update, or delete your personal information at any time through your account settings. You can also opt out of marketing communications and push notifications. To request a copy of your data or request deletion, contact us at support@biteroutes.com.

California Privacy Rights

If you are a California resident, you have the right to know what personal information we collect, request deletion of your data, and opt out of the sale of personal information (we do not sell your data). To exercise these rights, contact us at support@biteroutes.com.

Children's Privacy

BiteRoutes is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected data from a child under 13, we will delete it promptly. If you believe a child has provided us with personal information, please contact us.

Cookies & Tracking

BiteRoutes does not set its own cookies. We keep your login session, your cart, and your display preferences in your browser's local storage instead. We do not use analytics or advertising cookies and we do not track you across other sites. Some third-party components we embed, such as Stripe's payment and seller onboarding forms, run in their own frames and may set their own cookies. See our Cookie Policy for the full list.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by posting a notice on our platform or sending you an email. Your continued use of BiteRoutes after changes are posted constitutes acceptance of the updated policy.