Privacy Policy
Last updated: July 9, 2026
1. Information We Collect
We collect information you provide directly, including your name, email address, and truck information when you create an account. For customer accounts, we optionally collect birthday (month and day only) and zip code to enable birthday offers. We also collect location data when a truck owner or worker taps "Go Live" — this is a single GPS point captured at that moment, not continuous tracking.
2. How We Use Your Information
We use your information to operate the Service, including displaying truck locations and menus to customers, sending push notifications about trucks you follow, and matching birthday offers to eligible customers. We do not sell your personal information to third parties.
3. Location Data
For truck owners and workers: location is captured only when you explicitly tap "Go Live." We do not track your location continuously or in the background. For customers: we use your approximate location (based on zip code or device location when you grant permission) to show nearby trucks. We do not share your precise location with truck owners.
4. Birthday Data
If you provide your birthday, we store only the month and day — never the year. This information is used exclusively by XLeats to deliver birthday offers from trucks near you. Food truck owners never see your birthday, name, or any identifying information. They receive only aggregate counts (e.g., "6 birthday offers redeemed this week").
5. Data Sharing
We do not share your personal information with food truck owners beyond what you explicitly choose to share (such as information submitted through a catering request form). We may share data with service providers who help us operate the platform (such as Supabase for database hosting and Expo for push notifications) under strict confidentiality agreements.
6. Push Notifications
If you opt in to push notifications, we use your device token to send alerts about trucks you follow (such as when they go live or post an update). You can opt out of notifications at any time through your device settings.
7. Data Retention
We retain your account information for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us at support@xleats.com. Location data from live sessions is retained for 90 days for operational purposes, then deleted.
8. Security
We use industry-standard security practices including encrypted connections (HTTPS), row-level security on our database (so truck owners cannot access customer data), and secure authentication via Supabase Auth. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
9. Children's Privacy
XLeats is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. Continued use of the Service after changes constitutes acceptance of the updated policy.
11. Contact
Questions about this Privacy Policy may be directed to support@xleats.com.