Privacy policy

The short version

Curbfare helps you find street food and earn rewards at the carts you love. We collect the minimum needed to run that: an email, a nickname, and your points. We do not sell your data, we do not run ads, and we do not track you across the internet.

What we collect from customers

• Your email address and a nickname, when you create an account.
• Your points activity: which businesses you earn and redeem with, and the point amounts. Purchase subtotals are entered by the vendor's staff, never by you.

Two things deliberately never leave your phone. When you search the map, your location is used for that one search and never stored. When you scan a QR code, the camera runs entirely on your device; no image or video is ever uploaded.

What we collect from vendors

• Business details: legal and display name, cart info, city.
• License and permit numbers from your application. These are seen only during application review and are never shown publicly.
• The locations and schedules you choose to publish.

Who helps us run the site

A few service providers process data on our behalf, under their own privacy policies: Vercel (hosting), Supabase (database and sign-in), Resend (transactional email), Google Maps (maps and place search), and Cloudflare (domain and email routing). They receive only what is needed to do their job, such as your IP address when a page loads.

How we protect it

Everything travels encrypted. Every database row is protected by access rules that are enforced by the database itself and tested adversarially. Sensitive vendor actions require two-factor authentication. Points can only be granted by a vendor's staff confirming a purchase, and every change is audited. No system on the internet can promise it is unbreakable, so we design for the minimum data worth holding in the first place.

Deleting your data

Vendors can permanently delete their entire business, including all its data, from Edit business details. For account deletion, email us at vendors@curbfare.app and we will remove your account and its data.

Changes and contact

If this policy changes, the date at the top changes with it, and meaningful changes will be called out plainly. Questions: vendors@curbfare.app. See also our Terms of Service.