Privacy Policy
This Privacy Policy explains how CornerGrub (“CornerGrub,” “we,” “us,” or “our”) collects, uses, discloses, and protects information when you use our website, mobile app, vendor tools, support channels, and related services (together, the “Service”).
1. Information we collect
Account and profile information
- Name, email address, account role, login provider, profile photo, and account settings.
- Authentication information handled by Firebase Authentication. We do not store your password in plain text.
- Business profile information for vendors, including business name, category, description, photos, menu items, prices, schedule, service areas, and public contact details you choose to provide.
Location information
- Customers: when you allow location access, we use your location to show nearby vendors. You can deny or disable location permission in your browser or device settings.
- Vendors: when you go live or publish stops, your service location, address, coordinates, and schedule may be shown to customers so they can find you.
Marketplace activity
- Favorites, saved vendors, reviews, ratings, reports, vendor views, shares, and other actions you take in the Service.
- Messages or information you send to support.
Payment and subscription information
- Subscription status, product/package identifiers, entitlement status, renewal/cancellation status, receipts, and limited billing metadata.
- Payment card details are processed by Apple, Google, Stripe, or RevenueCat. CornerGrub does not store full payment card numbers.
Device, security, and technical information
- IP address, device type, browser/app version, operating system, crash logs, diagnostic logs, security events, approximate region, and timestamps.
- Captcha/security tokens from Cloudflare Turnstile when used to protect signup and login.
- Push notification tokens if you opt into notifications.
2. Cookies and similar technologies
CornerGrub uses essential cookies, local storage, and similar browser storage only where needed to operate the website and app, keep sessions secure, remember basic preferences, prevent abuse, and support login/security flows. For example, the web app may use storage for authentication state, CSRF/security tokens, and a privacy notice acknowledgement.
We do not currently use advertising cookies, retargeting pixels, or third-party ad tracking on the CornerGrub website. If that changes, we will update this policy and provide any required notice or choice.
Your browser may let you block or delete cookies. Blocking essential cookies may prevent login, signup, checkout, security checks, or account features from working correctly.
3. How we use information
- Provide, operate, secure, and improve the Service.
- Show customers vendors, live locations, menus, photos, schedules, reviews, and saved/favorite vendors.
- Let vendors create listings, publish stops, go live, manage subscriptions, and view basic performance information.
- Process payments, subscription status, renewals, cancellations, refunds, and entitlement access.
- Send service messages, support replies, safety notices, account notices, and notifications you request or allow.
- Detect, investigate, and prevent fraud, abuse, spam, security incidents, and policy violations.
- Comply with legal obligations and enforce our Terms.
4. How we disclose information
We disclose information only as needed to run and protect CornerGrub:
- Other users: vendor listings, vendor live locations, vendor schedules, public photos, menus, ratings, and reviews are visible in the Service. Customer reviews may be visible to other users and vendors.
- Service providers: Firebase/Google Cloud, Google Maps/Places, Expo, Cloudflare Turnstile, RevenueCat, Stripe, Apple, Google, hosting, email, diagnostics, and support providers process information for us.
- Legal and safety: we may disclose information if required by law, legal process, safety, fraud prevention, enforcement of our Terms, or protection of rights.
- Business transfers: if CornerGrub is involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction.
We do not sell your personal information for money. We also do not knowingly share personal information for cross-context behavioral advertising.
5. California privacy notice
California privacy laws may give California residents certain rights. Whether all formal CCPA/CPRA obligations apply can depend on business size, revenue, data volume, and data practices. Even so, CornerGrub provides the following notice and request process for California users.
| Category | Examples | Purpose |
|---|---|---|
| Identifiers | Name, email, user ID, device identifiers, IP address | Account, security, support, operations |
| Commercial information | Subscription status, purchase/receipt metadata, vendor plan | Payment access, billing support, fraud prevention |
| Internet or app activity | Log data, clicks, views, saved vendors, shares | Service operation, analytics, security |
| Geolocation data | Customer location when allowed; vendor live/stop location | Nearby vendor discovery and vendor listing display |
| Audio/visual/content | Vendor photos, menu photos, profile photos, support attachments | Public listings, profiles, support |
| Inferences | Saved vendors, preferences, notification choices | Personalization and requested features |
California residents may request access, correction, deletion, portability, and information about our data practices. You may also opt out of sale/share if applicable. We currently do not sell personal information or share it for cross-context behavioral advertising.
To make a privacy request, email support@cornergrub.com with the subject “Privacy Request.” We may need to verify your identity before completing the request. You may use an authorized agent where permitted by law.
We will not discriminate against you for exercising privacy rights.
6. Your choices
- Location: disable location permission in browser/device settings.
- Notifications: change notification permissions in device settings or in CornerGrub settings where available.
- Account: edit your profile or request account deletion from the app/profile flow or by contacting support.
- Marketing: if we send marketing emails, you can unsubscribe using the link in the email or contact support.
- Cookies: use browser settings to block/delete cookies, understanding essential features may stop working.
7. Data retention
We keep information for as long as needed to provide the Service, comply with legal obligations, resolve disputes, enforce agreements, prevent fraud, and maintain business records. Account data is generally kept while your account is active. Vendor listing and transaction records may be retained longer where needed for legal, tax, safety, fraud, or dispute reasons. Public reviews may remain visible after account deletion with identifying account details removed or minimized where appropriate.
8. Security
We use reasonable administrative, technical, and organizational safeguards designed to protect information. No system is perfectly secure. You are responsible for keeping your login credentials safe and notifying us if you believe your account has been compromised.
9. Children
CornerGrub is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us.
10. International users
CornerGrub is operated from the United States. If you use the Service from outside the United States, your information may be processed in the United States and other countries where our providers operate.
11. Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date shows when this policy was last changed. Material changes may be communicated in the app, on the website, or by email where appropriate.
12. Contact
Questions or privacy requests: support@cornergrub.com.
This policy is a practical baseline for CornerGrub’s current product and should be reviewed by a qualified attorney before large-scale launch, paid ads, enterprise partnerships, or App Store release.