Privacy Policy
This Privacy Policy explains how Crumb (“Crumb,” “we,” “us,” or “our”) collects, uses, shares, and protects information about you when you use our website (crumb.college), mobile applications, autonomous delivery robots, and related services (collectively, the “Service”).
If you do not agree with this Privacy Policy, please do not use the Service.
1. Information We Collect
Information you provide directly
- Account information when you sign in through Santa Clara University Single Sign-On (SSO): your name, university email address, and SCU-provided identifier.
- Delivery information: your dorm or delivery location on campus, special instructions, and contact phone number if you provide one.
- Payment information: payment card or method details. Card numbers are collected and processed by our payment processor (Stripe, Inc.) and are not stored on Crumb's servers.
- Communications you send us, including support requests, feedback, and survey responses.
Information we collect automatically
- Device and app information: device model, OS version, app version, language settings, time zone, and crash logs.
- Usage information: pages viewed, features used, orders placed, and search queries within the app.
- Location information: when you place an order, we collect the delivery address you select. For real-time order handoff, we may collect coarse location while the order is in progress, with your permission via your device's location settings.
- Identifiers: IP address, advertising identifiers (only if you have not opted out at the OS level), and push notification tokens.
- Cookies and similar technologies on our website (see Section 8).
Information from third parties
- From SCU: basic identity attributes confirmed by SCU SSO at the time you authenticate.
- From restaurants and vendors: order confirmation, fulfillment status, and any communication you initiate through their interfaces within our Service.
- From payment processors: confirmation of payment, the last four digits of your card, and fraud signals.
2. How We Use Information
We use the information we collect to:
- Provide, operate, and improve the Service, including matching orders to restaurants and dispatching robots.
- Authenticate you and secure your account.
- Process payments and prevent fraud.
- Communicate with you about orders, account activity, support requests, and product updates.
- Send push notifications related to your orders (you can disable these in your device settings).
- Conduct analytics, research, and product development to improve safety, reliability, and user experience.
- Comply with legal obligations and enforce our Terms of Service.
We do not sell your personal information.
3. How We Share Information
We share information only as described below.
- With restaurants and vendors who fulfill your order, so they can prepare and hand off your food. This includes your name, order details, and (where relevant) a delivery confirmation.
- With our service providers, including Stripe (payments), cloud infrastructure providers, analytics providers, and customer-support tooling, who process information on our behalf under contractual confidentiality obligations.
- With Santa Clara University, only as required by our institutional agreement and only in aggregate or de-identified form, except where required for safety incidents or compliance with university policy.
- For legal reasons, when we believe in good faith that disclosure is required by law, subpoena, court order, or to protect the rights, property, or safety of Crumb, our users, or others.
- In a business transaction, such as a merger, acquisition, financing, or asset sale, in which case we will provide notice and choices where required by law.
4. Your Choices and Rights
You can:
- Update your account information in the app at any time.
- Disable push notifications and location access in your device's OS settings.
- Delete your account by contacting us at hello@crumb.college.
California residents (CCPA/CPRA):You have the right to know what personal information we collect about you, to request access or a copy, to request deletion, to request correction, to opt out of “sharing” for cross-context behavioral advertising (we do not currently engage in this), and to be free from discrimination for exercising these rights. To exercise these rights, email us at hello@crumb.college. We will verify your identity using the email address associated with your account.
5. Data Retention
We retain your information for as long as your account is active and as needed to provide the Service. After account deletion, we retain limited information necessary for legal compliance, fraud prevention, dispute resolution, and audit purposes, typically not longer than seven (7) years.
6. Children's Privacy
The Service is intended for users 18 years of age or older, or for users 13 or older with verifiable parental consent. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it.
7. Security
We use technical and organizational measures designed to protect personal information, including encryption in transit, restricted access controls, and regular security review. No system is perfectly secure, and we cannot guarantee absolute security.
8. Cookies
Our website uses cookies and similar technologies for authentication, preferences, and analytics. You can manage cookies through your browser settings. Refusing cookies may limit some features of the website.
9. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the Service or by email. The “Last Updated” date at the top reflects the most recent version. Continued use of the Service after changes take effect constitutes acceptance.