Privacy Policy

Last updated: April 3, 2026

1. Information We Collect

Account Information: When you create an account, we collect your email address, password (stored securely as a hash), business name (vendors), and display name (consumers).

Location Data: We collect your device location when you use the app. For vendors, this is used to show your truck on the map when you ring the bell. For consumers, this is used to find nearby food trucks. Location is only collected while the app is in use.

Camera and Photos: Our vendor app accesses your camera and photo library to let you take photos of food, upload menu images, and scan menus. Photos are uploaded to our content delivery network and associated with your truck profile. We do not access your camera or photos without your action.

Push Notification Tokens: If you enable notifications, we store your device push token to send you alerts when nearby trucks go live.

Usage Data: We collect basic usage information such as which trucks you view, follow, rate, and like to improve the service.

2. How We Use Your Information

To operate the platform and connect food truck vendors with nearby consumers
To send push notifications about nearby food trucks going live
To display vendor profiles, menus, and posts to consumers
To process truck claims and verify ownership
To send transactional emails (verification codes, password resets)
To improve the service and fix bugs

3. Information Sharing

We do not sell your personal information. We share information only in these cases:

Public truck profiles: Vendor truck names, cuisines, menus, photos, and approximate locations are publicly visible when a truck is live.
Service providers: We use third-party services for email delivery, content hosting, and push notifications. These providers only receive the minimum data needed to perform their function.
Legal requirements: We may disclose information if required by law or to protect rights and safety.

4. Data Storage and Security

Your data is stored on secure servers. Passwords are hashed using bcrypt. We use HTTPS for all data transmission. Verification codes expire after 10 minutes. We retain your data as long as your account is active.

5. Your Rights

Access: You can view your account data through the app.
Correction: You can update your profile information at any time.
Deletion: You can request account deletion by contacting us at hello@yumtruk.com. We will delete your account and associated data within 30 days.
Location: You can revoke location permissions through your device settings at any time.
Notifications: You can disable push notifications through your device settings or the app.

6. Children's Privacy

YumTruk is not intended for children under 13. We do not knowingly collect information from children under 13.

7. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via email or in-app notification.

8. Contact Us

If you have questions about this privacy policy, contact us at:

Email: hello@yumtruk.com

YumTruk — Albany, Oregon