Curbivore Privacy Policy
Pilot Program Notice. Curbivore is operating as a pilot service. During the pilot period, features, workflows, and data models may change quickly. We may delete, reset, or migrate data as part of pilot operations, and we cannot guarantee uninterrupted service or data continuity.
1. Scope and Controller Information
Odyssey XXII ("Odyssey XXII," "Company," "we," "us," or "our") operates Curbivore (the "Service"). This Privacy Policy explains how we collect, use, disclose, and retain personal information when you use our websites, mobile applications, and related services.
This Privacy Policy applies to customer users and merchant users of the Service. It does not govern third-party services that integrate with Curbivore and maintain their own privacy notices.
2. Information We Collect
| Category | Examples | Typical Sources |
|---|---|---|
| Account and Profile Data | Name, email address, phone number, profile image, authentication metadata | You, Firebase Authentication, Apple Sign-In, Google Sign-In |
| Order and Transaction Data | Items ordered, order history, order timing, merchant details, payment confirmation metadata | You, merchants, Square |
| Location Data | Current GPS coordinates used for discovery and merchant location workflows | Your device with permission |
| Device and Usage Data | Device type, operating system, app version, IP address, session and feature usage logs, crash diagnostics | Your device, service infrastructure, Sentry |
| Communications and Feedback | Support requests, feedback submissions, survey responses, message contents and metadata | You |
| Merchant Business Data | Business name, menu details, pricing, operating status, location details, catalog sync data | Merchants, Square |
3. How We Use Information
We use personal information for business and operational purposes, including to:
- Provide, maintain, and improve the Service;
- Authenticate users and secure accounts;
- Enable merchant discovery, ordering, and order status communications;
- Process and reconcile transactions through integrated payment providers;
- Send service-related notifications, including order and pickup updates;
- Respond to support and feedback submissions;
- Monitor performance, diagnose errors, and prevent abuse or fraud;
- Comply with legal obligations and enforce our agreements.
4. How We Disclose Information
We do not sell personal information for money. We disclose information in the following ways:
- Merchants: When you place an order, we share relevant order information so the merchant can fulfill the order.
- Service Providers and Infrastructure Partners: We use vendors such as Firebase/Google Cloud, Square, Expo, Apple/Google authentication services, Sentry, and email service providers to operate core product functions.
- Legal and Safety Disclosures: We may disclose information when required by law or when reasonably necessary to protect rights, safety, or the integrity of the Service.
- Corporate Transactions: Information may be transferred as part of a merger, financing, acquisition, bankruptcy, or sale of assets.
5. Sale, Sharing, and Targeted Advertising
We do not sell personal information for monetary consideration. We also do not currently use personal information for cross-context behavioral advertising.
6. Data Retention
We retain personal information for as long as reasonably necessary to provide the Service, meet legal requirements, resolve disputes, enforce agreements, and operate our business. Retention periods may vary by data type and context.
| Data Type | Retention Approach |
|---|---|
| Profile and account records | Retained while account is active; deleted or anonymized after validated deletion request, subject to legal exceptions |
| Order records in Curbivore systems | Retained for service operation and then deleted or anonymized per operational and legal needs; merchants may retain their own records independently |
| Location and usage telemetry | Retained based on operational necessity; may be aggregated or de-identified and retained longer |
| Support and feedback submissions | May be retained after account deletion for product quality, security, legal, and audit purposes unless we determine retention is no longer necessary |
7. Security
We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, and monitoring. No security method is perfect, and we cannot guarantee absolute security.
8. Your Rights and Choices
8.1 In-App Controls
- You can access and update core profile data in-app.
- You can request account deletion in-app.
- You can manage location and push notification permissions through device and app settings.
8.2 U.S. State Privacy Rights
Depending on where you live and applicable law, you may have rights to access, correct, delete, or receive a copy of personal information, and to opt out of certain processing activities.
To submit a privacy request, email ydarar@odysseyxxii.com with the subject line "Privacy Request." We may need to verify your identity before completing a request.
If your request is denied in whole or in part and your state law provides an appeal right, you may appeal by emailing ydarar@odysseyxxii.com with the subject line "Privacy Appeal" within 60 days of the decision.
8.3 California-Specific Notice
For California residents, during the previous 12 months we collected and disclosed for business purposes categories of personal information consistent with Sections 2 and 4 of this policy (for example, identifiers, commercial information, internet/network activity, geolocation data, and customer service communications). We do not sell personal information for monetary consideration.
9. Children
The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 provided personal information, contact us and we will take reasonable steps to delete it.
10. International Users
The Service is operated from the United States. If you access the Service from outside the United States, your information may be transferred to and processed in the United States.
11. Changes to This Privacy Policy
We may revise this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date and may provide additional notice through the Service or by other means where appropriate.
12. Contact
If you have questions about this Privacy Policy or our privacy practices, contact:
Odyssey XXII (operating Curbivore)
Email: ydarar@odysseyxxii.com