Privacy Policy

Last Updated:

Welcome to The Common Loaf ("we," "our," or "us"). We are committed to protecting your privacy and ensuring you have a positive experience when using our mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App.

Please read this Privacy Policy carefully. By using our App, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our App.

1. Information We Collect

1.1 Information You Provide to Us

When you create an account or use our App, we collect the following information:

• Account Information: First name, last name, email address, and phone number
• Authentication Information: Phone number for SMS-based verification and password (stored securely)
• Gathering Participation: Information about gatherings you create or attend, including reservations and waitlist status

1.2 Information Automatically Collected

• Device Information: Device identifiers and operating system information
• Usage Data: Information about how you interact with the App, including features you use and actions you take
• App Data: Your account creation date and activity timestamps

1.3 Contacts Information (With Your Permission)

If you grant us permission to access your device's contacts, we may collect and use the following information:

• Contact names (first name and last name)
• Phone numbers
• Email addresses
• Contact photos (when available)

We use this information solely to:

• Help you identify friends who are attending gatherings
• Display contact photos and names for attendees when they match your contacts
• Enhance your experience by showing familiar faces at gatherings

Important: We only access your contacts after you explicitly grant permission. You can revoke this permission at any time through your device settings. Contact information is processed locally on your device and is not uploaded to our servers except when used to match phone numbers for displaying attendee information.

2. How We Use Your Information

We use the information we collect to:

• Create and manage your user account
• Authenticate your identity using phone number verification
• Provide, maintain, and improve our services
• Enable you to create, view, and participate in gatherings
• Display gathering details, menus, recipes, and attendee information
• Manage reservations, waitlists, and attendance tracking
• Send you important service-related notifications
• Respond to your inquiries and provide customer support
• Ensure the security and integrity of our App
• Comply with legal obligations

3. How We Share Your Information

3.1 Information Shared with Other Users

When you register for or create a gathering, certain information may be visible to other users:

• Your first name and last name initial (or full name if you match someone's contacts)
• Your contact photo (if you match someone's contacts and they have granted contact permissions)
• Your status as an attendee or waitlist member

3.2 Service Providers

We use third-party service providers to help us operate our App and provide services to you:

• Firebase (Google): We use Firebase Authentication for user authentication and Firebase Firestore for data storage. Firebase is subject to Google's Privacy Policy. Your data is stored securely on Firebase's servers.
• SMS Providers: We use SMS services to send verification codes for phone number authentication.

3.3 Legal Requirements

We may disclose your information if required by law or in response to valid requests by public authorities (e.g., a court or government agency).

3.4 Business Transfers

If we are involved in a merger, acquisition, or asset sale, your information may be transferred. We will provide notice before your information is transferred and becomes subject to a different Privacy Policy.

4. Data Storage and Security

We implement appropriate technical and organizational measures to protect your personal information:

• All data is encrypted in transit using industry-standard protocols
• User passwords are hashed and stored securely
• Access to your data is restricted to authorized personnel only
• We use Firebase's secure infrastructure, which includes data encryption and regular security audits

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

5. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce our agreements

If you delete your account, we will delete or anonymize your personal information in accordance with our data retention policies, except where we are required to retain it by law.

6. Your Rights and Choices

6.1 Account Information

You can update or correct your account information at any time through the App's profile settings.

6.2 Contacts Permission

You can grant or revoke permission to access your contacts at any time through your device's settings. Revoking this permission will not affect your ability to use the App, but you may not see contact-matched information for attendees.

6.3 Account Deletion

You can request to delete your account by contacting us at the email address provided below. Upon account deletion, we will remove your personal information from our systems, subject to any legal retention requirements.

6.4 Location of Your Data

Your data is stored on Firebase servers, which may be located outside of your country of residence. By using our App, you consent to the transfer of your data to these servers.

7. Children's Privacy

Our App is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly.

8. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

9. Third-Party Links

Our App may contain links to third-party websites or services that are not owned or controlled by us. We have no control over, and assume no responsibility for, the privacy policies or practices of any third-party websites or services. We encourage you to read the privacy policies of any third-party websites or services that you visit.

10. California Privacy Rights

If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA), including:

• The right to know what personal information we collect, use, disclose, and sell
• The right to request deletion of your personal information
• The right to opt-out of the sale of your personal information (we do not sell your personal information)
• The right to non-discrimination for exercising your privacy rights

To exercise these rights, please contact us using the information provided below.

11. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have certain data protection rights, including:

• The right to access your personal data
• The right to rectify inaccurate personal data
• The right to erasure (right to be forgotten)
• The right to restrict processing of your personal data
• The right to data portability
• The right to object to processing of your personal data

To exercise these rights, please contact us using the information provided below.

12. Contact Us

13. Consent

By using The Common Loaf App, you consent to our Privacy Policy and agree to its terms.