Privacy Policy

1. Information We Collect

Information you provide directly:

• Account information — email address and, for vendor accounts, your business name and truck details.
• Waitlist submissions — email address and the role you select (customer or vendor).
• Communications — any messages or feedback you send us.

Information collected automatically:

• Location data — with your permission, we collect your precise GPS location to show nearby trucks and, for vendors, to display your truck's live position on the map.
• Device information — device type, operating system version, unique device identifiers, and mobile network information.
• Usage data — pages or screens viewed, features used, time spent, search queries, and interactions with other users' content.
• FCM token — a Firebase Cloud Messaging token used to deliver push notifications to your device.
• Log data — IP address, browser type, referring URLs, and crash reports.

Information from third parties:

• Authentication providers — if you sign in through Google or Apple, we receive your name and email address from that provider.

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account and authenticate your identity.
• Display food trucks on the live map and show their real-time location to customers.
• Send push notifications about nearby truck arrivals, specials, and blast alerts from vendors.
• Operate the waitlist and notify you when NomTruck launches in your city.
• Respond to your questions, support requests, and feedback.
• Monitor and improve the performance, reliability, and security of the Service.
• Detect, investigate, and prevent fraud, abuse, and violations of our Terms of Service.
• Comply with applicable legal obligations.

We do not use your information to serve third-party advertising or sell your data to data brokers.

3. How We Share Your Information

We do not sell your personal information. We may share it in the following limited circumstances:

• Other users — vendor profile information (truck name, location, menu) is visible to all customers using the Service. Customer identities are not disclosed to vendors.
• Service providers — we share data with trusted vendors who help us operate the Service, including Google Firebase (authentication, database, cloud functions, and push notifications). These providers are contractually bound to use your data only on our behalf.
• Legal requirements — we may disclose information if required to do so by law, court order, or governmental authority, or to protect the rights, property, or safety of NomTruck, our users, or the public.
• Business transfers — if NomTruck is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

4. Push Notifications

NomTruck uses Firebase Cloud Messaging to send push notifications to your device. These include:

• Live arrival alerts — sent when a vendor parks near your location.
• Pre-arrival alerts — sent when a vendor is heading to an area you follow.
• Daily specials — sent when a vendor broadcasts a menu highlight.

You can manage notification preferences at any time in your device's system settings or within the NomTruck app. Disabling notifications does not delete your account or FCM token, but you will stop receiving alerts. We may retain your FCM token for up to 90 days after it becomes inactive, after which it is removed.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:

• Account data — retained until you delete your account.
• Location data — vendor live-location data is not persisted beyond the active session; it is removed from the map when the vendor goes offline.
• Blast and notification logs — retained for up to 12 months for rate-limiting, abuse detection, and support purposes.
• Waitlist data — retained until the waitlist program ends or you request removal.

When you delete your account, we delete or anonymize your personal information within 30 days, except where retention is required by law or for legitimate business purposes such as fraud prevention.

6. Security

We take reasonable technical and organizational measures to protect your information against unauthorized access, loss, or disclosure. These include encryption in transit (TLS), Firebase Security Rules to restrict database access, and server-side role verification before sensitive operations are performed.

No method of transmission over the internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security. If you become aware of a security vulnerability or incident involving NomTruck, please contact us immediately at the address below.

7. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will delete that information promptly.

Users between the ages of 13 and 18 may use the Service only with the consent and supervision of a parent or legal guardian.

8. Your Rights and Choices

Depending on where you live, you may have the following rights regarding your personal information:

• Access — request a copy of the personal information we hold about you.
• Correction — ask us to correct inaccurate or incomplete information.
• Deletion — request that we delete your personal information, subject to certain legal exceptions.
• Portability — receive your data in a structured, machine-readable format.
• Opt-out of notifications — disable push notifications through your device settings or the in-app notification preferences.
• Location — revoke location permissions at any time through your device settings. Note that revoking location access will prevent vendor live-map features from functioning.

To exercise any of these rights, contact us using the information in the Contact Us section. We will respond within 30 days. We will not discriminate against you for exercising your privacy rights.

9. Third-Party Links

The Service may contain links to third-party websites, social media platforms, or other services not operated by NomTruck. This Privacy Policy applies only to our Service. We have no control over and assume no responsibility for the privacy practices of any third-party sites or services. We encourage you to review the privacy policy of any third party you interact with.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the effective date at the top of this page and, where appropriate, notify you via email or an in-app notice.

Your continued use of the Service after the revised policy takes effect constitutes your acceptance of the updated terms. If you do not agree with the updated policy, you should discontinue use of the Service and delete your account.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out to us: