Privacy Policy

CravePost ("we", "our", "us") operates the CravePost platform, including the website at cravepost.com and the CravePost mobile application. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

By using CravePost, you agree to the collection and use of information in accordance with this policy.

For Restaurant Owners

• Phone number (for account authentication)
• Restaurant name, description, and branding details
• Menu items including names, descriptions, prices, and dietary information
• Photos and videos uploaded for menu items and stories
• Operating hours and theme preferences

For Customers (Menu Viewers)

• Name (required for personalized experience)
• Phone number (optional — only if you choose to provide it)
• Visit history (which restaurants you've visited and when)

Automatically Collected

• Menu scan data (when a QR code is scanned)
• Item view data (which menu items are viewed)
• Device type and browser information (for optimization)

• To provide and maintain our platform
• To display restaurant menus to customers
• To provide restaurant owners with analytics (visitor counts, popular items)
• To recognize returning customers for a better experience
• To communicate with you about your account or our services
• To improve and optimize our platform
• To detect and prevent fraud or abuse

• With restaurant owners: Customer name and visit frequency only
• With third-party services: We use trusted providers for hosting (Vercel), database (Supabase), and mobile delivery (Expo). These providers process data on our behalf and are bound by their own privacy policies
• We do NOT sell your data to advertisers, data brokers, or any third parties
• Legal requirements: We may disclose information if required by law or to protect rights, safety, or property

• Your data is stored securely on cloud servers managed by Supabase
• We use industry-standard encryption for data in transit (SSL/TLS)
• Access to personal data is restricted to authorized personnel only
• Row-level security policies ensure users can only access their own data

CravePost does not use tracking cookies. We use browser localStorage to:

• Store your customer ID for recognizing return visits
• Remember your display preferences (light/dark mode, dietary filters)

This data stays on your device and is not transmitted to third-party trackers.

You have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your account and associated data
• Opt-out: Decline to provide optional information (like phone number)
• Data portability: Request your data in a machine-readable format

To exercise any of these rights, contact us at hello@cravepost.com. We will respond within 30 days.

CravePost is not intended for use by children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of CravePost after changes constitutes acceptance of the updated policy.

If you have questions or concerns about this Privacy Policy, please contact us:

• Email: hello@cravepost.com
• Website: cravepost.com