Effective: September 22, 2026 · Last updated: October 9, 2026
Pickup Supper LLC (“Pickup Supper,” “we,” “us”) built this app so you can order food ahead from a local restaurant and go get it. This policy explains what we collect, why, who sees it, and how to get rid of it.
It is written to be read, not to be skimmed past. If something here is unclear, email privacy@pickupsupper.com and ask.
This policy covers customers who use the Pickup Supper mobile apps and website. It is part of our Terms of Service.
Restaurants and food trucks that sell through Pickup Supper are covered by their own written agreement with us. This policy does not describe how any restaurant handles information it collects on its own — for example, if you also sign up for a restaurant’s own email list in person. That is between you and them.
| Information | Why we need it |
|---|---|
| First and last name | Your account, and your first name on the bag label so the restaurant hands the right food to the right person |
| Mobile phone number | Verifying your account at sign-in, and order notifications by text when push is unavailable |
| Email address | Sending your itemized receipt and account notices |
| Payment method | Passed straight to Stripe. We keep only a token and the card brand and last four digits so you can recognize it |
| Order contents and notes | Sending your order to the restaurant, and showing you your history so reordering is fast |
| Vehicle make, model, color | Curbside orders only, so staff can find you. Optional |
| Favorites and saved restaurants | Showing you the places you actually order from first |
| Star ratings | Helping other customers and letting us see which restaurants are doing well |
| Support messages | Answering you, and tracking problems with a restaurant |
We use your information only for these purposes:
We do not use your personal information to build advertising profiles, and we do not share it with advertising networks or data brokers.
Our full messaging terms, including the required consent language, message frequency, and opt-out instructions, are in Section 12 of the Terms of Service. The privacy points are these:
Your mobile phone number and your text-message consent are used only to send you messages from Pickup Supper.
Marketing texts are separate. We send promotional messages such as Today’s Specials only to people who separately opted in to that program. Agreeing to order notifications is not agreeing to marketing, and we do not treat it that way. Opting out of marketing does not stop your order notifications.
Push notifications are delivered through Apple’s and Google’s push services using a device token, not your phone number. You can turn them off in your phone’s settings at any time.
This is the part people ask about most, so here it is exactly.
| The restaurant sees | The restaurant never sees |
|---|---|
|
Your first name (for the bag label) Your order — items, options, quantities, notes Your order number and the time it came in Whether you paid, and the total Your vehicle details, on a curbside order only Your star rating of their orders, and how often you order from them |
Your phone number Your email address Your last name Your card details of any kind Your home address or your location Your orders from any other restaurant |
We designed it this way on purpose. It means a restaurant cannot text you a promotion because you bought a sandwich, and it means your ordering history is not passed around. We also do not let restaurants export customer lists from Pickup Supper.
If you want a restaurant to have your contact information, give it to them yourself. That is your call, not ours.
We share personal information only in these situations.
| Provider | What it handles |
|---|---|
| Google Cloud / Firebase | Our database and app backend. Holds your account, orders, favorites, ratings, sign-in records, and error reports from the website and the kitchen tablet |
| Stripe | All payment processing. Holds your card details; we do not |
| Twilio | Sends text messages. Receives your phone number and the message content |
| Apple & Google push services | Deliver push notifications using a device token |
| Google Maps | Shows restaurant locations and directions. Stores nothing about you for us |
| Google Firebase Crashlytics | Crash reporting for the phone apps, so we can fix bugs |
Each of these is bound to use your information only to provide its service to us, and not for its own purposes. Our providers may change; we will keep this list current.
We do not sell personal information, and we do not share it for cross-context behavioral advertising. We have never done either, and this policy does not reserve the right to.
All payments run through Stripe. When you add a card, the card details go from your device to Stripe directly. Pickup Supper’s systems never receive, process, or store your full card number, expiration date, or security code. We hold only a Stripe token, plus the card brand and last four digits so you can tell your cards apart.
Because the restaurant is the merchant of record for your purchase, your card statement shows the restaurant’s name. Stripe handles your payment information under its own privacy policy, and it is a separate controller of that information.
At checkout we place an authorization hold and charge your card only when the restaurant marks your food ready. If no one accepts your order, the hold is released and no charge is made.
Location is optional. If you allow it, we use your approximate location only while the app is open, to sort restaurants by distance, show you what is nearby, and tell a restaurant you have arrived for curbside pickup.
Star ratings. Ratings can only be left on orders you actually placed and picked up. A restaurant sees its own ratings and its average. We may display average ratings publicly in the app. We do not publish your name with a rating.
Requesting a restaurant. The “request a restaurant” board is public. The restaurant names submitted and their vote counts are visible to anyone using the app. Do not put personal information in a request. We may remove or edit any submission.
| What | How long |
|---|---|
| Account information | While your account is open. Deleted when you delete your account, except as noted below |
| Order and transaction records | Retained in a form tied to the transaction, not to your profile, for as long as tax, accounting, and audit rules require — currently at least four years under North Carolina and federal record-keeping rules |
| Text-message consent and opt-out records | At least four years after the consent or opt-out, because we have to be able to prove it |
| Payment records | Held by Stripe under its own retention schedule |
| Support messages | Two years |
| Crash and diagnostic logs | Up to 90 days |
| Ratings | Kept, but unlinked from your account when you delete it |
You can do all of these from inside the app, or by emailing privacy@pickupsupper.com:
We respond to requests within 30 days. We may need to verify your identity — usually by confirming control of the phone number or email on the account — before acting on a request. We will not deny you service, charge you a different price, or give you a lesser experience for exercising any of these rights.
Some U.S. state privacy laws give residents additional rights, including the right to know, delete, correct, obtain a portable copy, opt out of sale or targeted advertising, and appeal a denial. We extend the rights listed above to everyone who uses Pickup Supper, wherever you live, rather than sorting people by state. If we deny a request, you may appeal by replying to our decision, and we will respond within 45 days.
In the app: Account → Settings → Delete account. We ask you to confirm once, and then we do it.
By email: privacy@pickupsupper.com from the address on your account.
What deletion does: removes your name, phone number, email address, vehicle details, favorites, saved payment tokens, order history from your profile, and device tokens. All notifications stop. Your star ratings stay in a restaurant’s average but are unlinked from you.
What survives deletion, and why: transaction records we must keep for sales tax and accounting, and a record of your text-message consent and opt-out. Both are retained in the narrowest form that satisfies the law — a transaction and a consent record, not a customer profile — and are not used to market to you or to rebuild your account. Stripe keeps its own payment records under its own policy.
Deletion is permanent. We cannot restore a deleted account or its order history. You are welcome to sign up again from scratch.
We protect your information with measures appropriate to its sensitivity: encryption in transit and at rest, access controls so only the people who need data can reach it, tokenized payments so card numbers are never ours to lose, separate production and test environments, logging and monitoring, and periodic review of who has access to what.
No system is perfectly secure, and we will not pretend otherwise. If a breach affects your personal information, we will notify you and the appropriate authorities as required by North Carolina law, including the Identity Theft Protection Act, and we will tell you what happened and what to do about it.
You help by keeping your phone locked, keeping your email account secure, and telling us at support@pickupsupper.com if something looks wrong on your account.
Pickup Supper is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you are a parent or guardian and believe your child under 13 has given us information, email privacy@pickupsupper.com and we will delete the account and the information promptly.
Anyone between 13 and 17 may use Pickup Supper only with a parent or guardian’s permission and involvement. We do not knowingly send marketing messages to anyone under 18.
Pickup Supper operates in the United States, and your information is stored and processed on servers in the United States. We do not currently offer the Service outside the United States. If you use the app from outside the country, you are sending your information to the United States, where privacy law differs from the law where you live.
We do not run third-party advertising in the app, and we do not allow advertising networks or data brokers to collect information through it. We do not participate in cross-app tracking and we do not ask for permission to track you across other companies’ apps and websites.
Our website uses only cookies necessary to make the site function and to measure basic traffic in aggregate. Because we do not track you across other sites, there is nothing for a browser “Do Not Track” or Global Privacy Control signal to turn off — but we honor them as an opt-out of any future analytics or sale, and we treat them as a valid opt-out request.
We may update this policy. When a change is material, we will post the new version with a new effective date and tell you in the app, by email, or both, at least 14 days before it takes effect where practicable. If we ever want to use your information in a materially different way than this policy describes — including any change to how we handle your phone number — we will ask for your consent first. Older versions are available on request.
| Privacy questions and requests | privacy@pickupsupper.com |
|---|---|
| Everything else | support@pickupsupper.com |
| Legal notices | legal@pickupsupper.com |
| Text messages | Reply HELP for help, STOP to stop |
| Mailing address | Pickup Supper LLC 4030 Wake Forest Road, Ste 349 Raleigh, NC 27609 |
Pickup Supper LLC is the controller of the personal information described in this policy.