Privacy Policy & Terms

Privacy Policy & Terms

Last updated: September 2026

1. Our Purpose

Upstate CF Meals is a tool for coordinating group meal orders for our team. No one is tracked, monitored, or profiled for any purpose other than facilitating food ordering. We do not use your data for advertising, analytics, marketing, or any secondary purpose.

2. Information We Collect

When you tap a meal link, we ask for your first name, last name, and phone number so we can record who ordered what. If you create an account, we also collect your email address for login.

To keep ordering fair and prevent duplicate or fraudulent orders, each link tap also records:

  • A lightweight device fingerprint derived from your browser's screen size, timezone, and language — it does not reveal personal data and cannot track you across other websites.
  • A persistent visitor ID stored on your device so we can recognize returning users.
  • Your IP address, captured automatically when you tap a link.

3. How We Use This Information

Your name and phone number are used solely to attribute meal orders to the right person. The device fingerprint, visitor ID, and IP address are used only to detect duplicate orders or suspicious activity — never to monitor your behavior, build a profile of you, or contact you for any reason other than your order.

Our system automatically cross-references devices, phone numbers, and IP addresses to flag potentially suspicious clicks with a risk rating (low, medium, or high). These flags are reviewed internally by administrators and do not block or restrict your access — they exist only to keep ordering fair for everyone.

4. What We Do Not Do

  • We do not sell, rent, or share your data with third parties.
  • We do not use your data for advertising or marketing.
  • We do not track your location, browsing history, or activity outside this app.
  • We do not use your information to contact you for anything other than your meal order.

5. Data Storage & Retention

Your data is stored securely on our platform. Order and click records are retained for operational record-keeping and fraud review. Device, phone, and IP registries are maintained only to recognize returning users and prevent abuse.

6. Admin Activity Logging

Actions taken by administrators (such as adding, updating, or removing meal links) are logged with the admin's name and a timestamp. This internal audit trail is used only for accountability and is not shared externally.

7. Your Rights

You may request deletion or correction of your personal data at any time by contacting an administrator. You may also clear the visitor ID stored on your device by clearing your browser's site data.

8. Contact

If you have questions about this policy or your data, please reach out to the app administrator directly.