Privacy Policy
Effective date: July 17, 2026
YumScout ("YumScout," "we," "us") is a live map that connects hungry people with street food vendors — trucks, carts, and stands — and lets you order ahead for pickup. This policy explains what data we collect through the YumScout mobile app and yumscout.app, why we collect it, who we share it with, and how you can delete it.
The short version: we collect what the product needs to work and nothing else. We show ads to no one, we sell data to no one, and we do not track you across other companies' apps or websites.
What we collect
Account information
When you create an account we collect your email address and a display name. You can optionally add a phone number and a profile photo. Browsing the map does not require an account — we only ask you to sign in for things that need one, like ordering, following a vendor, or leaving a review.
Location
Location works very differently for customers and vendors, on purpose:
- Customers: with your permission, we use your device's precise location while you are using the appto center the map and show vendors near you. We never track customers in the background, and your location is never shown to vendors or other users. To power "a vendor you follow just went live near you" notifications, we store only a coarse (roughly 1 km) center point of the last area you looked at — not your precise position.
- Vendors: broadcasting your location is the product. When you go live, your truck or cart's position is published on the public map — that is the point, and you control it with the Go Live and End Shift buttons. Background location is used only if you turn on On-the-Move mode, so your pin can follow your truck while you drive; ending your shift stops it. The raw GPS trail from a live session is kept for 48 hours for debugging and then automatically deleted. The map only ever shows your latest position.
Orders and payments
When you place an order we keep the order details: the items, prices, tip, pickup code, order status history, and any note you add. Payments are processed by Stripe. Your card number goes directly to Stripe and never touches our servers — we never see or store full card numbers. Stripe handles card data under its own privacy policy.
Vendor business information
If you apply to sell on YumScout, we collect your application answers (food type, city, how you sell, photos, social links) and any permit or license documents you choose to upload. Uploaded documents are stored privately and are visible only to our review team. To receive payouts, vendors onboard with Stripe Connect — Stripe collects identity and bank details directly for its "know your customer" checks; we do not store them.
Content you post
Reviews, star ratings, review photos, and vendor replies are public — they appear on vendor profiles along with your display name. Don't post anything in a review you wouldn't want public.
Notifications and device data
If you enable push notifications, we store a push token for your device along with your notification preferences (which types you want, your go-live radius, quiet hours). We use it to send the notifications you asked for — vendor go-live alerts, order status updates, review replies — and nothing else.
Vendor view analytics
So vendors can see how their live sessions perform, we count map pin taps and profile views per session. These are aggregate counters — a number per vendor session, not a record of who viewed what. We do not build browsing profiles of customers, and we use no third-party advertising or analytics trackers.
How we use your data
- Run the live map and show vendors near you.
- Process orders, payments, tips, and refunds.
- Send the notifications you opt into, and transactional messages like order receipts and vendor application decisions.
- Display public content — vendor profiles, menus, reviews.
- Give vendors aggregate stats about their own sessions.
- Keep the platform safe: verify vendors, handle reports of abusive content, prevent fraud, and enforce our Terms of Service.
- Comply with legal obligations.
We do not use your data for advertising, and we do not sell or rent it to anyone.
Who we share data with
We share data only with the service providers that make YumScout work, and only what each one needs:
- Stripe — payment processing, vendor subscriptions, vendor payouts, and vendor identity verification.
- Supabase — our hosting provider; it stores our database, uploaded photos and documents, and handles sign-in.
- Expo, Apple, and Google — push notification delivery (Expo's push service relays notifications through Apple's and Google's systems to your device).
Beyond that: vendors see the order details they need to fulfill your order (items, your display name, pickup code — never your location or payment details); anything you post publicly is public; and we will disclose data if the law genuinely requires it. If YumScout is ever acquired or merged, data would transfer with the company and this policy would continue to apply until changed with notice.
We have no advertising partners, no data brokers, and no analytics resellers. There is no one to sell your data to, and we wouldn't anyway.
Retention and deletion
We keep your data while your account is active. Some data has shorter clocks: raw vendor GPS trails are deleted after 48 hours, and abandoned unpaid orders are cleaned up after 30 minutes.
You can delete your account any time, right in the app: Profile → Delete account. When you do, your account, profile, push tokens, follows, and uploaded photos are deleted. Your past orders and reviews are anonymized — the records survive (vendors need their sales history and other diners rely on reviews), but they are permanently detached from you and no longer contain your identity.
For vendor owners, deletion works the same way with one difference: your business's transaction records are retained (financial records have to add up), but your personal information is scrubbed from them, your sign-in is destroyed, and your listing comes off the map. This is explained on the deletion screen itself before you confirm. You can also email privacy@yumscout.app and we'll process the deletion for you.
Your rights
Wherever you live, we extend the same rights to everyone: you can ask us for a copy of the data we hold about you, ask us to correct it, ask us to delete it (or just use the in-app deletion), and object to a use of your data. Email privacy@yumscout.app from your account email and we'll respond within 30 days. We will never treat you worse for exercising a privacy right.
California residents (CCPA/CPRA): you have the right to know what personal information we collect (this page is the full list), to delete it, to correct it, and to opt out of sale or sharing. We do not sell personal information and we do not share it for cross-context behavioral advertising, so there is nothing to opt out of. We also do not use or disclose sensitive personal information beyond what is necessary to provide the service — precise location is used only as described above.
European Economic Area / UK (GDPR): YumScout currently operates in the United States, but if GDPR applies to you, our legal bases are performance of a contract (running your account and orders), legitimate interests (safety, fraud prevention, aggregate analytics), and consent (location access and push notifications — both revocable in your device settings). You additionally have rights to data portability, to restrict processing, and to lodge a complaint with your local supervisory authority.
Children
YumScout is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has created an account, email privacy@yumscout.app and we will delete it.
Security
All traffic to YumScout is encrypted in transit. Access to data is restricted by per-row database security rules, vendor documents live in private storage readable only by our review team, and card data never reaches our systems at all. No service can promise perfect security, but if a breach ever affects your data we will notify you as required by law.
Changes to this policy
If we change this policy, we'll update the effective date at the top of this page. For meaningful changes — anything that expands what we collect or who we share it with — we'll tell you in the app or by email before the change takes effect.
Contact
Privacy questions or requests: privacy@yumscout.app. Anything else: support@yumscout.app or the support page.