Privacy Policy

Stackrace Inc. (“Stackrace”, “we”, “our”, or “us”) operates the Let's Eat mobile application and the stackrace.io website. This Privacy Policy explains what information we collect, why we collect it, how we use it, and your rights regarding your data. By using our services you agree to this policy.

1. Information We Collect

Information you provide

When you create an account we collect your name, email address, and a password (stored as a secure hash). Brand users also provide their brand name, address, and payment information (processed by Stripe — we do not store full card numbers).

Information collected automatically

When you use Let's Eat we collect usage data such as the items you swipe on, your in-app interactions, device type, operating system version, and approximate location (if you grant permission). This data powers our recommendation engine and helps us improve the app.

Location data

We request access to your device location to show you nearby restaurants and menu items. You can revoke location permission at any time in your device settings. Without location access some features will not work correctly.

2. How We Use Your Information

• To provide, operate, and improve the Let's Eat service
• To personalise food recommendations based on your taste preferences
• To process payments and manage subscriptions for brand users
• To send you transactional emails (account confirmations, password resets)
• To send optional product updates and marketing emails (you can unsubscribe at any time)
• To detect and prevent fraud, abuse, or violations of our Terms of Service
• To comply with legal obligations

We do not sell your personal information to third parties. We do not use your data to serve you targeted advertising on third-party platforms.

3. Cookies

Our website uses essential cookies to maintain your session and remember your preferences. We do not use advertising or tracking cookies. You can configure your browser to refuse cookies, but this may affect your ability to use certain features of the site.

4. Third-Party Services

We use the following third-party services that may process your data on our behalf:

• Google Cloud Platform / Firebase — authentication, database, and hosting.
• Stripe — payment processing.
• Foursquare — place discovery data.
• Google Places API — brand data enrichment.
• Anthropic (Claude API) — AI product classification.
• Resend — transactional email.
• Expo — push notifications.
• Instagram / Meta — brand social media integration.
• Cloudflare — content delivery and security.

All processors are based in the United States. Each of these providers has their own privacy policy governing the data they process. We encourage you to review them.

5. Cross-Border Data Transfer

Stackrace Inc. is headquartered in Toronto, Ontario, Canada. All personal data collected through Let's Eat is stored and processed in the United States, specifically in Google Cloud's us-central1 region (Iowa).

Your personal information may be accessible to US law enforcement under applicable US laws, including the CLOUD Act. We rely on Google Cloud's contractual safeguards (Data Processing Addendum) and security certifications (SOC 2, ISO 27001) to ensure comparable protection of your data.

By using Let's Eat, you acknowledge and consent to this cross-border transfer of your personal information.

6. Your Rights by Jurisdiction

Canadian Users (PIPEDA)

• Right to access your personal information
• Right to correction of inaccurate information
• Right to withdraw consent (which may affect service availability)
• Right to file a complaint with the Office of the Privacy Commissioner of Canada
• Contact: privacy@stackrace.io

Quebec Users (Law 25)

• All Canadian rights above, plus:
• Right to data portability in a structured format
• Right to be informed of any automated decision-making
• Breach notification within 72 hours via the Commission d'acces a l'information du Quebec
• Privacy Officer: Brent Godsoe, privacy@stackrace.io

California Users (CCPA)

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of the sale of personal information (note: we do not sell personal information)
• Right to non-discrimination for exercising privacy rights

7. Data Retention

We retain your account information for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it by law (for example, payment records which we may retain for up to 7 years for tax purposes). Anonymised, aggregated data derived from your usage may be retained indefinitely.

Swipe history: Raw swipe events are automatically deleted after 90 days. Your aggregated taste profile (food preference scores) is retained but contains no personally identifiable information — no name, email, or other identifying details.

8. AI & Recommendations

Let's Eat uses AI to generate personalised food recommendations. We are committed to handling this responsibly:

• We do not use your personal information to train AI models.
• Your taste profile is processed anonymously — it contains only food preference scores, not your name, email, or other identifying information.
• AI recommendations are generated using anonymous taste profiles. Your identity is never shared with AI providers.
• Swipe history is automatically deleted after 90 days. Your aggregated taste profile is retained but contains no personally identifiable information.

When the Anthropic Claude API is used to process menu content uploaded by brand users, only the menu text itself is sent — no consumer profile data or personal information is included in those requests.

9. Your Rights

Depending on your location you may have the following rights with respect to your personal data:

• Access — request a copy of the data we hold about you
• Correction — ask us to correct inaccurate or incomplete data
• Deletion — ask us to delete your personal data
• Portability — request your data in a machine-readable format
• Objection — object to certain types of processing (e.g. marketing emails)

To exercise any of these rights, email us at privacy@stackrace.io. We will respond within 30 days.

10. Security

We use industry-standard security measures including HTTPS/TLS encryption in transit, hashed passwords, and access controls on our databases. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security. If you believe your account has been compromised, contact us immediately.

11. Children's Privacy

Let's Eat is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes we will notify you by email or by posting a prominent notice in the app. Continued use of our services after changes take effect constitutes your acceptance of the revised policy.

13. Privacy Officer

Our designated Privacy Officer is Brent Godsoe. For privacy inquiries, data access requests, or complaints:

Email: privacy@stackrace.io

Address: Stackrace Inc., Toronto, Ontario, Canada

14. Contact

For privacy-related questions or data requests, contact us at privacy@stackrace.io or by post at Stackrace Inc., Toronto, Ontario, Canada.