Privacy Policy

This policy explains what Cafe Lineup ("we") collects, how we use it, and your choices, including your rights under California law (CCPA/CPRA).

What we collect

• Account and order details: your email (if you sign in), the name and optional phone you give for an order, what you order, pickup times, tips, messages with the shop and problem reports.
• Payment details: card details go directly to the shop's payment processor (for example, Square) through its secure form. We never see or store your full card number.
• Device and usage: a random visitor ID stored in your browser, pages viewed, and taps such as directions or calls, counted per shop. If you turn on alerts, your device's push subscription.
• Location: only if you tap "Near me". Your exact location stays in your browser to sort shops and is not sent to us.
• Search activity: the words you search for, the filters and cravings you tap, the neighborhood or map area you were browsing, and which shops you then view, save or order from. We log this with your random visitor ID, not with your name, email or phone, so we can count what people look for around each shop.
• Your taste and saved shops: to suggest shops and dishes you might like, the app remembers on your device what you search for, which filters you tap and which shops you look at, plus what you order. Saved shops are also kept in your account so they follow you to other devices. You can clear your browser's site data at any time to reset suggestions.
• Voice search: only if you tap the microphone. Your browser's built-in speech recognition turns your words into text, and your browser maker (such as Google or Apple) may process the audio to do that. We only receive the text, the same as if you had typed it.

How we use it

• To place and fulfill your orders, send order updates and handle refunds and support.
• To share your order (name, phone if given, items, notes) with the shop you ordered from.
• To give shops reports about their own page and orders, and about what people search for and buy nearby (see "Reports for shops" below).
• To keep the Service secure and prevent fraud, and to improve it.
• To send promotions only if you opt in.

Reports for shops

Shops on Cafe Lineup can see reports built from searches and purchases on our platform, for example "62 searches for matcha in North Park this week" or "your busiest pickup hour is 8 a.m." These reports:

• Only contain totals and trends. They never include your name, email, phone, visitor ID or a list of what any one person searched or ordered.
• Hide small numbers. Any count under 10 is shown as "fewer than 10" so no one can be singled out.
• Never show one shop another shop's numbers. Comparisons are neighborhood averages that combine at least five shops.
• May be combined with public information that isn't about you, such as weather, government business and health inspection records, and Census statistics.

Separately, the shop you order from receives your order details so it can make your order, as described above.

Information we use for reports is de-identified. We keep it in de-identified form, we won't try to re-identify anyone from it, and our shop agreement forbids shops from trying to identify customers from reports or selling them to anyone else.

Sharing

We share information with the shop you order from, with service providers that run the Service (hosting, database, payment processing, messaging), and when required by law. Shop reports contain only de-identified totals, as described above. We do not sell your personal information or share it for cross-context behavioral advertising.

Your choices and rights

You can update your details and notification choices in your account. California residents may request to know, correct or delete their personal information, including search activity linked to their visitor ID or account, and won't be discriminated against for doing so. Email [email protected] to make a request; we'll verify it's you before acting.

Retention

We keep order records as long as needed for the shop's and our business, tax and legal purposes, then delete or anonymize them. Search activity is kept for up to [13 months] and then deleted; only the combined totals in reports are kept after that. Visit statistics are kept in aggregate.

Children

The Service isn't directed to children under 13, and we don't knowingly collect their information.

Changes and contact

We'll post updates here and notify you of material changes. Questions: [email protected], [Company legal name], a California limited liability company, [mailing address].