Privacy Policy

Last updated: July 22, 2026

This Privacy Policy explains how CornerGrub (“CornerGrub,” “we,” “us,” or “our”) collects, uses, discloses, and protects information when you use our website, mobile app, vendor tools, support channels, and related services (together, the “Service”).

Plain-English summary: CornerGrub helps customers find local food vendors and helps vendors share where they are serving. We collect the information needed to run that service, including account details, vendor listing details, location information when permission is granted, payment status, support messages, and basic security/usage data. We do not sell your personal information.

1. Information we collect

Account and profile information

Name, email address, account role, login provider, profile photo, and account settings.
Authentication information handled by Firebase Authentication. We do not store your password in plain text.
Business profile information for vendors, including business name, category, description, photos, menu items, prices, schedule, service areas, and public contact details you choose to provide.

Location information

Customers: when you allow location access, we use your location to show nearby vendors. You can deny or disable location permission in your browser or device settings.
Vendors: when you go live or publish stops, your service location, address, coordinates, and schedule may be shown to customers so they can find you.

Marketplace activity

Favorites, saved vendors, reviews, ratings, reports, vendor views, shares, and other actions you take in the Service.
Messages or information you send to support.

Payment and subscription information

Subscription status, product/package identifiers, entitlement status, renewal/cancellation status, receipts, and limited billing metadata.
Payment card details are processed by Apple, Google, Stripe, or RevenueCat. CornerGrub does not store full payment card numbers.

Device, security, and technical information

IP address, device type, browser/app version, operating system, crash logs, diagnostic logs, security events, approximate region, and timestamps.
Captcha/security tokens from Cloudflare Turnstile when used to protect signup and login.
Push notification tokens if you opt into notifications.

2. Cookies and similar technologies

CornerGrub uses essential cookies, local storage, and similar browser storage only where needed to operate the website and app, keep sessions secure, remember basic preferences, prevent abuse, and support login/security flows. For example, the web app may use storage for authentication state, CSRF/security tokens, and a privacy notice acknowledgement.

We do not currently use advertising cookies, retargeting pixels, or third-party ad tracking on the CornerGrub website. If that changes, we will update this policy and provide any required notice or choice.

Your browser may let you block or delete cookies. Blocking essential cookies may prevent login, signup, checkout, security checks, or account features from working correctly.

3. How we use information

Provide, operate, secure, and improve the Service.
Show customers vendors, live locations, menus, photos, schedules, reviews, and saved/favorite vendors.
Let vendors create listings, publish stops, go live, manage subscriptions, and view basic performance information.
Process payments, subscription status, renewals, cancellations, refunds, and entitlement access.
Send service messages, support replies, safety notices, account notices, and notifications you request or allow.
Detect, investigate, and prevent fraud, abuse, spam, security incidents, and policy violations.
Comply with legal obligations and enforce our Terms.

4. How we disclose information

We disclose information only as needed to run and protect CornerGrub:

Other users: vendor listings, vendor live locations, vendor schedules, public photos, menus, ratings, and reviews are visible in the Service. Customer reviews may be visible to other users and vendors.
Service providers: Firebase/Google Cloud, Google Maps/Places, Expo, Cloudflare Turnstile, RevenueCat, Stripe, Apple, Google, hosting, email, diagnostics, and support providers process information for us.
Legal and safety: we may disclose information if required by law, legal process, safety, fraud prevention, enforcement of our Terms, or protection of rights.
Business transfers: if CornerGrub is involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction.

We do not sell your personal information for money. We also do not knowingly share personal information for cross-context behavioral advertising.

5. California privacy notice

California privacy laws may give California residents certain rights. Whether all formal CCPA/CPRA obligations apply can depend on business size, revenue, data volume, and data practices. Even so, CornerGrub provides the following notice and request process for California users.

Category	Examples	Purpose
Identifiers	Name, email, user ID, device identifiers, IP address	Account, security, support, operations
Commercial information	Subscription status, purchase/receipt metadata, vendor plan	Payment access, billing support, fraud prevention
Internet or app activity	Log data, clicks, views, saved vendors, shares	Service operation, analytics, security
Geolocation data	Customer location when allowed; vendor live/stop location	Nearby vendor discovery and vendor listing display
Audio/visual/content	Vendor photos, menu photos, profile photos, support attachments	Public listings, profiles, support
Inferences	Saved vendors, preferences, notification choices	Personalization and requested features

California residents may request access, correction, deletion, portability, and information about our data practices. You may also opt out of sale/share if applicable. We currently do not sell personal information or share it for cross-context behavioral advertising.

To make a privacy request, email support@cornergrub.com with the subject “Privacy Request.” We may need to verify your identity before completing the request. You may use an authorized agent where permitted by law.

We will not discriminate against you for exercising privacy rights.

6. Your choices

Location: disable location permission in browser/device settings.
Notifications: change notification permissions in device settings or in CornerGrub settings where available.
Account: edit your profile or request account deletion from the app/profile flow or by contacting support.
Marketing: if we send marketing emails, you can unsubscribe using the link in the email or contact support.
Cookies: use browser settings to block/delete cookies, understanding essential features may stop working.

7. Data retention

We keep information for as long as needed to provide the Service, comply with legal obligations, resolve disputes, enforce agreements, prevent fraud, and maintain business records. Account data is generally kept while your account is active. Vendor listing and transaction records may be retained longer where needed for legal, tax, safety, fraud, or dispute reasons. Public reviews may remain visible after account deletion with identifying account details removed or minimized where appropriate.

8. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information. No system is perfectly secure. You are responsible for keeping your login credentials safe and notifying us if you believe your account has been compromised.

9. Children

CornerGrub is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us.

10. International users

CornerGrub is operated from the United States. If you use the Service from outside the United States, your information may be processed in the United States and other countries where our providers operate.

11. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date shows when this policy was last changed. Material changes may be communicated in the app, on the website, or by email where appropriate.

12. Contact

Questions or privacy requests: support@cornergrub.com.

This policy is a practical baseline for CornerGrub’s current product and should be reviewed by a qualified attorney before large-scale launch, paid ads, enterprise partnerships, or App Store release.