Privacy policy: DropSpot

This policy covers the DropSpot: Food Drops and DropSpot: Drivers apps and this website, all made by Original Function Inc. ("we"). It explains what we collect, why, who can see it, and how to have it deleted.

In short: we collect what's needed to run food drops: your phone number, your name, your orders and your messages. We don't sell your information, show ads, or use third-party analytics or tracking.

What we collect

Information you give us

Account: your phone number, the name you enter, and optional dietary notes.
Groups: the groups you belong to, your role (member, helper or driver), who invited you, and whether you were approved.
Orders: what you order, quantities, notes, the stop you choose, totals, and pickup status, including weights recorded for items sold by weight.
Messages: what you write in group chat, and updates drivers send to their group.
Driver information: the areas you shop and deliver to; the stores, items, prices, photos and menu text you add; the stops and pickup times you set; and your earnings records.

Information created as you use DropSpot

Payments: your order totals and whether your order was paid at pickup. Paying in the app isn't available yet. When it is, we will also keep the amount, status and a reference from our payment processor, and we will never receive or store full card numbers.
Sign-in: session tokens that keep you signed in, stored in a form that can't be read back.
Updates about your orders and drops, shown in the app's Updates list.
Server logs: when the apps or this website contact our servers, we record the IP address, time and address requested. We use these to keep the service secure and to fix problems.

What we don't collect

Location: we don't collect your device's location. The stop locations you see on the map are entered by drivers.
Camera: the Drivers app uses the camera only to scan pickup QR codes. Images are processed on the phone and never uploaded.
Contacts, advertising identifiers, cookies on this website, or third-party analytics: none of these.

How we use it

To sign you in, by texting you a one-time code.
To run drops: showing your order to your driver, building pick lists and stop rosters, and recording handoffs.
To tell you about your orders and drops in the app's Updates list.
To answer support requests, keep the service secure, and prevent abuse.
To meet legal, tax and accounting obligations.

Who can see it

Your driver and their helpers see your name, your orders and notes, your stop, and your pickup status. They don't see your phone number.
Other members of your group see your name and the messages you post in group chat.
Service providers handle specific tasks for us and may use your information only for those tasks:
- Twilio sends sign-in codes and receives your phone number to do so.
- Cloudflare carries traffic between the apps and our servers and protects against attacks.
- A payment processor will handle card payments once paying in the app is available. We will name it here before then.
The law: we disclose information when required by law, or to protect people's safety or our rights.

We don't sell your personal information or share it for targeted advertising.

Where it's kept and for how long

Your information is stored on servers we operate in the United States.

We keep your account information while your account is open.

When you delete your account

Deletion happens right away. At that moment we:

delete your phone number, dietary notes, sign-in sessions and sign-in code records, your Updates list, and group memberships;
replace your name with "Deleted user";
for drivers, delete your driver profile, including payout account details, and turn off the invite links you created.

We keep these records, shown as "Deleted user" and no longer linked to your phone number:

orders, payments and payouts, which drivers need for their earnings and we need for tax and accounting;
messages you wrote in group chat, so the conversation still makes sense to the rest of the group;
for drivers, the groups and drops you ran.

A few things can pause deletion, so that nobody is left without their food or their money. A driver can't delete their account while one of their drops is taking orders, being shopped or being delivered; finish or cancel it first. A member can't delete their account while an order is past its deadline and not yet picked up. Orders you've placed in drops that are still taking orders are cancelled automatically.

Backups and logs

We back up our database every day and keep each backup for 14 days, on our own servers. Deleted information leaves the backups within 14 days.

Server logs (IP address, time and requested address) are kept for a limited time and automatically overwritten as new logs are written.

Twilio and Cloudflare keep the information they handle for us under their own retention policies.

Your choices

See or correct your information: your name and dietary notes are under You in DropSpot: Food Drops. For a copy of everything we hold about you, email us.
Delete your account: in DropSpot: Food Drops, go to You → Delete account; in DropSpot: Drivers, go to Group → Delete account. If you can't sign in, email hello@originalfunction.com with the phone number on the account, and we confirm by text to that number before deleting. What's deleted and what's kept is described above.
Leave a group: ask the driver to remove you. Your past orders stay in their records.

Depending on where you live, you may have other rights over your information, such as the right to know, correct or delete it. Email us to use them; we won't treat you differently for doing so.

Security

Connections to DropSpot are encrypted. Sign-in codes and session tokens are stored in a form that can't be read back, and access to our servers is limited to the people who run them. No system is perfectly secure; if a breach affects your information, we will tell you as the law requires.

Children

DropSpot isn't meant for children under 13, and we don't knowingly collect their information. If you think a child has given us information, email us and we'll delete it.

Changes to this policy

When we change this policy, we update the date at the top. If a change affects how we use information we already have, we tell you in the app before it takes effect.

Contact

Original Function Inc.
hello@originalfunction.com