Privacy Policy

Scope

This Privacy Policy applies to the Common Grounds at Leakey Drug ordering website, mobile app, account features, loyalty features, and related customer support. It does not replace the privacy notices of Square, Apple, Google, Supabase, Vercel, or other services that operate their own systems.

When you use Square-hosted checkout or app-store platform features, those providers may process information under their own policies in addition to this policy.

Information We Collect

• Account and profile information, including name, email address, phone number, authentication identifiers, profile preferences, notification settings, and account deletion requests.
• Ordering information, including cart items, item modifiers, item notes, pickup timing, order totals, tax, tips, discounts, receipt links, Square order identifiers, and order status.
• Payment-related records returned by Square, such as payment status, receipt URL, Square payment identifiers, amount, tip, currency, and related order details. Common Grounds does not collect or store full card numbers, CVV codes, or full wallet credentials.
• Loyalty information, including Square customer IDs, loyalty account IDs, and points or reward status.
• Favorites and app preferences, including saved menu favorites, cart state, push notification preference, SMS preference, and display preferences.
• Communications information, including SMS verification and order-status messaging, password reset and account emails, support requests, and the contact details you provide when you communicate with us.
• Technical, security, and usage information, including IP address, browser or device details, session cookies, authentication cookies, security logs, rate-limit records, request metadata, and diagnostic information needed to operate and protect the service.

How We Use Information

• Create and secure your account.
• Process pickup orders, show order history, update order status, and coordinate with Square checkout.
• Enroll or maintain loyalty features when you choose to use them.
• Send transactional emails, account messages, SMS verification codes, and order-status notifications.
• Prevent fraud, abuse, unauthorized access, and service misuse.
• Maintain records for receipts, refunds, taxes, chargebacks, customer support, legal obligations, and security investigations.
• Improve reliability, inventory accuracy, and customer experience.

How We Share Information

We share information only as needed to run the ordering service, complete transactions, protect the business, or comply with law. We do not sell personal information for money, and we do not use cross-context behavioral advertising in the ordering app.

• Square receives customer, order, payment, loyalty, pickup, and receipt information needed for checkout and commerce operations.
• Supabase provides authentication, database, edge function, and account-management services.
• Vercel hosts the web app and may process technical logs, firewall data, and deployment traffic data.
• Apple, Google, and OAuth providers process sign-in or app platform information when you use those features.
• SMS, email, app platform, and support providers may process contact information so we can send transactional messages and respond to requests.
• We may share information with professional advisors, authorities, or other parties when reasonably necessary for legal compliance, fraud prevention, security, chargebacks, disputes, business transfers, or protection of rights.

Cookies and Tracking

The web app uses cookies and local storage for essential functions such as authentication sessions, cart persistence, security, routing, and app preferences. We do not currently use advertising pixels or behavioral ad tracking in the ordering app.

Some browsers send Do Not Track signals. Because there is no single industry standard for those signals, the app does not currently respond to them differently. If we adopt advertising or analytics tools in the future, this policy should be updated before launch.

SMS, Push, and Email

If you verify a phone number or request SMS features, you agree to receive transactional messages related to verification, account access, pickup orders, and order status from Common Grounds or Square. Message and data rates may apply. Reply STOP to opt out of SMS where supported.

Marketing texts require separate consent. We should not send promotional SMS unless we have captured a separate opt-in that clearly states the sender, message purpose, frequency, opt-out instructions, and that consent is not a condition of purchase.

Retention and Deletion

We keep information only as long as reasonably needed for the purposes described in this policy, including account operation, order fulfillment, receipts, refunds, tax records, chargebacks, fraud prevention, security, legal compliance, and support.

You can request account deletion from the profile area or through the Data Deletion page. Some transaction, receipt, tax, refund, security, fraud-prevention, and legal records may be retained after account deletion when retention is reasonably necessary or required by law. Square and other providers may also retain records under their own legal and compliance obligations.

Your Choices and Privacy Rights

• You can access many account details in your profile and order history.
• You can request correction, access, export, or deletion by using account tools or contacting us.
• You can opt out of non-essential push notifications in the app settings and opt out of SMS by replying STOP where supported.
• Residents of Texas, California, and other states may have additional rights to access, correct, delete, or appeal decisions about personal data, depending on applicable law and business-size thresholds.
• Because we do not currently sell personal information or use cross-context behavioral advertising in the ordering app, Global Privacy Control and similar signals should not change your experience today.

Children

The ordering app is intended for general audiences and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 provided information, contact us so we can review and delete it where appropriate.

Security

We use administrative, technical, and organizational safeguards designed to protect personal information, including hosted checkout through Square, HTTPS, authentication controls, rate limiting, access controls, and database access controls. No online service can guarantee absolute security.

Changes

We may update this policy as the app, vendors, laws, or business operations change. The updated date at the top of this page shows when this policy was last revised.