Privacy Policy
Last updated: May 23, 2026
What we collect
To run iEat we collect:
- Account info: email address (for sign-in), display name, optional profile photo, optional bio, optional dietary preferences.
- Seller info (if you sell): business name, pickup address, phone number, kitchen photos, social links, cottage food attestation timestamp.
- Order info: what you ordered or sold, pickup time, status, optional buyer note.
- Messages: the content of buyer↔seller chats and your conversations with iEat support.
- Reviews: star ratings and review text you leave on completed orders.
- Technical data: approximate IP address (for security), browser type, app session info.
What we do with it
- Show your listings, profile, and reviews to other users.
- Route orders and messages between buyers and sellers.
- Show approximate seller locations on the map. Exact addresses are only shared with a buyer AFTER the seller accepts their order, and only if the seller has “Share address” turned on.
- Send transactional email about your orders.
- Enforce platform rules, including Florida cottage food law compliance (e.g. the $250K annual cap, the “Organic” word restriction).
- Investigate reports and safety concerns.
Who we share data with
We share data only with the third-party services we need to operate the platform:
- Supabase — hosts our database and authentication.
- Vercel — hosts the web application.
- Mapbox — renders the map view.
- Resend — sends transactional and notification emails.
- Stripe — processes seller subscriptions; we never see your card number.
- Anthropic— powers the AI support agent that triages incoming support requests. Only the support message you send is forwarded; we don't feed personal account data into the model.
We don't sell your data. We don't share it with advertisers. We may disclose data when required by valid legal process.
Seller location privacy
Seller addresses are sensitive — many sellers operate from their homes. We store the exact address in a restricted table that only the seller and accepted-order buyers can read. The map pin shown to the public is deliberately fuzzed by 0.3–0.7 miles. Sellers can disable address-sharing entirely from their profile, in which case pickup is coordinated by message only.
Cookies & local storage
We use cookies and local storage for sign-in sessions and basic app function (e.g. remembering you dismissed the install prompt). We don't use third-party tracking cookies for advertising.
Your choices
- Update your data: edit your profile at /account or, for sellers, at /seller/profile.
- Delete your account: message support@goieat.com with the email tied to your account. We'll remove your personal data within 30 days, retaining only what we're legally required to keep (e.g. transaction records for tax purposes).
- Opt out of marketing email:we don't send marketing email yet. Transactional email about your own orders is mandatory while your account is active.
Data retention
We keep your data as long as your account is active. After account deletion, we retain transaction and audit data for up to 7 years for legal compliance, then delete it.
Children
iEat is not intended for users under 18. We don't knowingly collect data from minors.
Changes to this policy
We'll update the “Last updated” date at the top when this policy changes. Material changes will be announced in-app or by email.
Contact
Questions? Email support@goieat.com.