FoodTruck POS Back to Home
Legal

Privacy Policy

Last updated: June 25, 2026  ·  Effective: June 25, 2026  ·  Jurisdiction: Alberta, Canada (PIPEDA)

Table of Contents
  1. 01 Overview
  2. 02 What We Collect
  3. 03 How We Use Data
  4. 04 Data Storage and Security
  5. 05 Third Party Services
  6. 06 Canadian Privacy Law (PIPEDA)
  7. 07 SMS and Customer Data
  8. 08 Cookies
  9. 09 Data Retention
  10. 10 Children
  11. 11 Privacy Contact
01

Overview

FoodTruck POS is operated by Danish Kumar, Edmonton, Alberta, Canada. This Privacy Policy describes how we collect, use, store, and share your information when you use our Service.

The short version: We collect only the data we need to run your POS business. We do not sell your data. We do not use your data for advertising. You own your business data and can export or delete it at any time.

This Policy applies to all users of the FoodTruck POS Service including the iOS app, Android app, web dashboard, and website. By using the Service, you consent to the practices described in this Policy.

02

What We Collect

2.1 Account Information

When you create an account or update your profile, we collect:

  • Full name (operator name)
  • Email address (used for login and communications)
  • Business name and food truck name
  • Phone number (if provided)
  • Password (stored as a secure one way hash; we cannot read your password) — not applicable if you sign in with Google, Facebook, or Apple

If you choose to sign in with Google, Facebook, or Apple instead of a password, we receive your name and email address from that provider to create or match your account. We verify the token directly with the provider and do not receive your password or access to your account with them.

2.2 Business Data

We store the business data you enter into the Service, including:

  • Orders and order history (items, quantities, totals, timestamps)
  • Menu items, categories, and pricing
  • Customer names and contact information entered during orders
  • Expense records
  • End of day report data and summaries
  • Device registrations (device name and device identifier)

2.3 Payment Information

Payment processing is handled entirely by Stripe, Inc. We do not receive, process, or store your credit card number, card verification codes, or full banking details. We retain only:

  • Your Stripe customer ID (a reference token)
  • Your subscription tier (Starter, Professional, or Enterprise)
  • Subscription status (active, trialing, cancelled, past due)
  • Subscription period end date

2.4 Usage Data

We automatically collect limited technical information to operate and improve the Service:

  • Login timestamps and session information
  • Device type and operating system (e.g. iPad, Android tablet)
  • App version in use
  • Error logs and crash reports (to fix bugs)

We do not use advertising SDKs or analytics platforms that track your behavior across other apps or websites.

2.5 Customer Data You Enter

When you use FoodTruck POS to manage your food truck business, you may enter information about your own customers such as customer names and phone numbers for order management or SMS notifications. This data belongs to you. We process it only to provide the Service functionality you have enabled.

03

How We Use Your Data

We use the data we collect for the following purposes:

3.1 Providing the Service

  • Creating and managing your account
  • Storing and syncing your business data across devices
  • Processing subscription payments through Stripe
  • Generating reports and analytics for your business

3.2 Communications

We send emails to you in the following cases:

  • Account verification and password one time codes (OTP)
  • End of day sales reports (if enabled)
  • Subscription receipts and billing notifications
  • Service announcements and updates that affect your use of the Service
  • Policy updates where required by law or these Terms

We do not send marketing or promotional emails unless you have explicitly opted in. We never send emails on behalf of advertisers or third parties.

3.3 Service Improvement

  • Diagnosing bugs and technical issues
  • Understanding usage patterns to prioritize feature development
  • Maintaining security and preventing fraud

3.4 What We Never Do

  • We never sell your data to third parties
  • We never use your data for advertising
  • We never share your business data with competitors or market research firms
  • We never use aggregate data derived from your account to build advertising profiles
04

Data Storage and Security

4.1 Where Your Data is Stored

Your data is stored on Neon.tech, a serverless PostgreSQL database provider. Our database is hosted in the US East region on Amazon Web Services (AWS) infrastructure. By using FoodTruck POS, you consent to your data being stored and processed in the United States.

4.2 Security Measures

  • All data is encrypted in transit using TLS 1.2 or higher
  • All data is encrypted at rest using AES 256 encryption
  • Passwords are hashed using bcrypt with a unique salt per account; we cannot read your password
  • Authentication uses short lived JWT access tokens plus long lived refresh tokens stored securely
  • API access requires authentication on all endpoints
  • Database access is restricted to application servers only

4.3 Backups

Neon.tech maintains automated database backups retained for 30 days. These backups are used for disaster recovery purposes only. Backup data is subject to the same security and access controls as primary data.

4.4 Data Breach Response

In the event of a data breach that poses a real risk of significant harm, we will notify affected users and the Office of the Privacy Commissioner of Canada within 72 hours of becoming aware of the breach, as required by PIPEDA. Notification will be sent to your registered email address and will include a description of the breach, the information affected, and steps you can take to protect yourself.

05

Third Party Services

FoodTruck POS uses the following third party service providers to deliver the Service. Each provider processes only the data necessary to perform their function and is governed by their own privacy policy.

Stripe
Payment processing and subscription billing
stripe.com/privacy
Resend
Transactional email delivery
resend.com/privacy
Twilio
SMS notifications (Enterprise plan only)
twilio.com/privacy
Google
Sign in with Google (optional login method)
policies.google.com/privacy
Meta (Facebook)
Sign in with Facebook (optional login method)
facebook.com/privacy/policy
Apple
Sign in with Apple (optional login method)
apple.com/legal/privacy
Neon
Cloud database hosting
neon.tech/privacy
Render
Backend API hosting
render.com/privacy
Cloudflare
CDN, DDoS protection, and network tunneling
cloudflare.com/privacy
Vercel
Dashboard and landing page hosting
vercel.com/legal/privacy-policy
UptimeRobot
Service uptime monitoring
uptimerobot.com/privacy

We do not use Google Analytics, Facebook Pixel, or any other advertising or cross site tracking technology. We do not share your data with data brokers, advertising networks, or social media platforms.

If we add new service providers that process personal data, we will update this Policy and notify you in advance for any provider with significant data access.

06

Canadian Privacy Law (PIPEDA)

FoodTruck POS is operated in Canada and complies with the Personal Information Protection and Electronic Documents Act (PIPEDA). Under PIPEDA, you have the following rights regarding your personal information:

6.1 Right to Access

You have the right to request access to the personal information we hold about you. We will provide this within 30 days of a written request. For a data export of your full account data, email foodtruckposapp@outlook.com.

6.2 Right to Correct

If you believe personal information we hold about you is inaccurate or incomplete, you have the right to request a correction. Most account information can be corrected directly in your account Settings. For other corrections, contact us at foodtruckposapp@outlook.com.

6.3 Right to Delete

You have the right to request deletion of your personal information. You may do this by cancelling your account and your data will be permanently deleted 90 days after cancellation. To request immediate deletion, email foodtruckposapp@outlook.com and we will process your request within 14 business days.

6.4 Right to Withdraw Consent

You may withdraw consent to our processing of your personal information at any time by deleting your account. Note that withdrawal of consent may mean we cannot continue providing the Service to you, as data processing is essential to Service delivery.

6.5 Complaints

If you believe your privacy rights have been violated, you may file a complaint with the Office of the Privacy Commissioner of Canada (OPC) at priv.gc.ca. We encourage you to contact us first to try to resolve your concern directly.

6.6 Data Breach Notification

In the event of a breach of security safeguards involving personal information that creates a real risk of significant harm, we will notify affected individuals and report the breach to the OPC within 72 hours of discovery, as required by PIPEDA's breach notification provisions.

07

SMS and Customer Data

Enterprise plan subscribers may use the Twilio SMS integration to send text messages to their own customers. The following applies to how we handle customer phone numbers in this context:

  • Customer phone numbers entered into FoodTruck POS are your data and remain under your ownership and control
  • We process customer phone numbers only to facilitate SMS delivery through Twilio on your behalf
  • We do not use customer phone numbers for any purpose other than delivering the SMS messages you initiate
  • We do not share customer phone numbers with any party other than Twilio for the purpose of message delivery
  • You are solely responsible for obtaining valid consent from your customers before sending them SMS messages, as required by Canada's Anti Spam Legislation (CASL)
  • You are responsible for maintaining consent records and honoring opt out requests from your customers

FoodTruck POS is a data processor with respect to your customers' phone numbers when used in the SMS integration. You are the data controller. Your obligations to your customers under CASL and PIPEDA remain your responsibility.

08

Cookies

FoodTruck POS uses a minimal cookie approach. See our full Cookie Policy for details.

Summary: We use only essential session cookies required to keep you logged in to the web dashboard. We do not use advertising cookies, tracking cookies, analytics cookies, or any third party cookies for behavioral targeting.
  • Session cookies are set when you log in to the web dashboard and expire when your session ends or you log out
  • The iOS and Android apps do not use cookies; they use secure local token storage instead
  • We do not use Google Analytics, Facebook Pixel, or any cross site tracking tools
  • Disabling cookies in your browser will prevent you from using the web dashboard but will not affect the iOS or Android apps
09

Data Retention

9.1 Active Accounts

While your account is active, we retain all your business data indefinitely. This allows you to access historical orders, reports, and analytics for as long as you are a subscriber.

9.2 Cancelled Accounts

After you cancel your subscription, your data is retained in a read only state for 90 days. During this window you may log in to export your data. After 90 days, your account and all associated data are permanently and irreversibly deleted from our production database and backup systems.

9.3 Immediate Deletion

If you wish to have your data deleted immediately upon cancellation, contact foodtruckposapp@outlook.com. We will process the request within 14 business days. Immediate deletion is permanent and cannot be reversed.

9.4 Legal Hold

In limited circumstances, we may be required to retain certain data beyond normal retention periods to comply with a legal obligation, resolve a dispute, or enforce our agreements. In such cases, we retain only the minimum data necessary and for the minimum time required.

9.5 Backup Purge

Automated database backups are retained for 30 days and then automatically purged. Deletion of your account data is reflected in backups within this 30 day window.

10

Children

FoodTruck POS is a business software tool intended for adults operating food truck businesses. The Service is not directed at, and is not designed for use by, anyone under the age of 18.

We do not knowingly collect personal information from anyone under 18. If you are a parent or guardian and believe your child has provided us with personal information, contact us at foodtruckposapp@outlook.com and we will delete that information promptly.

11

Privacy Contact and Requests

For all privacy related inquiries, data access requests, correction requests, deletion requests, or complaints:

FoodTruck POS Privacy
Danish Kumar, Edmonton, Alberta, Canada

Email: foodtruckposapp@outlook.com
Website: foodtruckpos.app

We aim to respond to all privacy requests within 30 days. Complex requests may require additional time, in which case we will notify you of the expected timeline.

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada at priv.gc.ca or call 1 800 282 1376.

Terms of Service Acceptable Use Policy Cookie Policy Home
© 2026 FoodTruck POS  ·  Danish Kumar, Edmonton, Alberta