Effective date: April 29, 2026 · Last updated: May 12, 2026
This Privacy Policy describes how GrubTrucks ("we", "us", or "our") collects, uses, and shares information about you when you use the GrubTrucks mobile application and related services (collectively, the "Service").
By using the Service, you agree to the collection and use of information as described in this policy. If you do not agree, do not use the Service.
When you sign in with Apple or Google, we receive:
sub claim from Apple's or Google's verified ID token).We use this information to create and maintain your GrubTrucks account.
When you grant location permission, the app uses your precise location to show food trucks and restaurants nearby, compute distances and drive times, and drive the map view.
Your location is never transmitted to or stored on our servers. It is used only on your device and as a search parameter sent to third-party APIs (Yelp, Google Places) to fetch the businesses near you.
If you configure a cryptocurrency receive address in GrubTrucks (currently XRP only), we store on your device:
r).This information is held in Apple Keychain with ThisDeviceOnly access — it does not sync to iCloud Keychain, is not transmitted to our servers, and is not migrated via backup. Signing out wipes it.
The address is public information by design. We never store, transmit, or have access to private keys or seed phrases, and we never custody, transmit, or process cryptocurrency funds.
These choices are also declared in our PrivacyInfo.xcprivacy manifest file.
We do not use your information for advertising, profiling, or automated decision-making. We do not train AI/ML models on your data.
| Service | What we send | Purpose |
|---|---|---|
| Yelp Fusion API | Your location and search terms | Fetch nearby food trucks and restaurants, business detail, reviews |
| Google Places API | Your location and search terms | Fetch nearby places, photos, hours |
| Apple ID Service | Identity-token request | Verify Sign in with Apple |
| Google Identity Service | Identity-token request | Verify Sign in with Google |
When you tap "Get Directions" or "Open in Uber"/"Open in Lyft", the app opens a deep-link URL with the destination coordinates. After that point, the third party handles the interaction under their own privacy policy, not this one.
We may disclose information if required by law, valid legal process, or to protect the rights, property, or safety of GrubTrucks, our users, or the public.
| Category | Retention |
|---|---|
| Account record (id, provider, email, name, role) | Until you delete your account or 24 months of inactivity, whichever comes first |
| Favorites | Until you remove them or delete your account |
| Yelp business records cached in our backend | 24 hours maximum, per Yelp's API terms |
| Google Place data | Not retained — only the place_id is cached, per Google's API terms |
| In-memory caches on your device | Cleared on app termination, sign-out, or cache invalidation |
| Local preferences (UserDefaults) | Until you uninstall the app |
| Wallet address + destination tag (Apple Keychain, ThisDeviceOnly) | Until you remove it from Settings, sign out, or uninstall |
| iCloud Key-Value Store mirror of favorites | Until you sign out of iCloud or remove from cross-device sync |
Depending on where you live, you may have the following rights:
You can sign out of GrubTrucks at any time from within the app, which clears your session token from your device. To delete your account and all associated data, email hello@grubtruck.app with the subject line "Account deletion request" from the email address associated with your account. We will confirm and complete the deletion within 30 days.
If you are in the European Economic Area, United Kingdom, or Switzerland, the legal basis for our processing is your consent (which you can withdraw at any time) or our legitimate interests in operating the Service. You have the right to lodge a complaint with your local data protection authority.
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and the right to opt out of the "sale" of personal information. GrubTrucks does not sell personal information.
We protect your information using:
No security system is impenetrable. We cannot guarantee absolute security of your information, only that we follow current industry-standard practices.
GrubTrucks is not intended for use by children under 13 (or 16 in jurisdictions where that is the applicable age of digital consent). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, contact us at hello@grubtruck.app and we will delete it.
GrubTrucks is operated from the United States. If you use the Service from another country, you understand that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country.
This section applies only when you choose to enable the optional cryptocurrency QR feature in Settings.
GrubTrucks operates as a non-custodial display layer. We do not, at any point in any flow:
When someone scans your QR code with their own wallet app and elects to send a payment, the transaction is a direct peer-to-peer transfer over the XRP Ledger between the sender's wallet and the receive address you configured. GrubTrucks is not a party to that transaction.
You bear sole responsibility for the accuracy of the receive address you enter, the destination tag (if any), tax reporting and compliance, and securing your wallet outside of GrubTrucks.
GrubTrucks is not a financial advisor, exchange, broker, or custodian. Information in the app related to cryptocurrency is not financial advice.
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top and, for material changes, notify you in-app or by email. Your continued use of the Service after the changes take effect constitutes acceptance of the updated policy.
Questions or requests about this Privacy Policy:
Magpie Studios LLC (operator of GrubTrucks)
Email: hello@grubtruck.app
Address: Arizona, USA