Privacy Policy

Last updated: July 8, 2026

This Privacy Policy explains how RouteRally (“RouteRally,” “we,” “us,” “our”) collects, uses, and shares information when you use the RouteRally website, app, and services (the “Service”).

1. Information we collect

• Account info: your name, email address, phone number, username, and password.
• Order info: the items you order, add-on products you buy, your drop-off address, delivery times, and order history.
• Payment info: your payment is processed by our payment processor (Stripe). RouteRally does not store your full card number. We keep limited details such as confirmation of payment and the last digits, as provided by the processor.
• Feedback: ratings, comments, and reviews you submit, including about product samples.
• Friends and social info: the friends you connect with, deals you share, and pickup requests you send or accept.
• Communications: messages you send us and your text-message preferences.
• Usage and device info: basic information about how you use the Service and the device or browser you use, which helps us keep the Service working and secure. See Section 5 on local storage.

2. How we use information

• To create and manage your account.
• To process your orders and payments and arrange delivery.
• To provide product samples and add-on products, and to handle related feedback.
• To send you order-related texts and notifications (for example, when a pool closes or your order is on the way).
• To operate the friends and pickup features you choose to use.
• To provide support, prevent fraud and abuse, keep the Service secure, and comply with the law.
• To understand and improve the Service.

3. How we share information

• With the restaurant, to prepare and fulfill your order.
• With delivery personnel, to deliver your order.
• With our service providers, so they can perform services for us. These include our payment processor (Stripe), our text-message provider (Twilio), our database and authentication provider (Supabase), and our website host (Netlify). These providers may process your information only to provide services to us.
• With brand partners, as described in Section 4.
• With other users, through the friends and pickup features. For example, friends you connect with can see your name and that you are in a pool.
• When required by law, or to protect the rights, safety, and property of RouteRally, our users, or others.
• In connection with a business transfer, such as a merger or sale.

We do not sell your personal information.

4. Brands and partners

Some orders include a free product sample from a partner brand. The brand pays RouteRally to place that sample in delivery bags. You are never charged for it, and you do not have to try it or say anything about it.

After a sample is delivered we may ask you to rate it. Rating is entirely optional. If you do rate it, here is exactly what the brand can see, and what they cannot.

What a brand sees

• The star rating you gave, from one to five.
• Any written comment you chose to leave, word for word.
• Which flavour or variety you received.
• Which of our drop-off points the delivery went to, for example a residence hall or an office building. This is one of our own collection points, not your address.
• Whether you told us you are an undergraduate, a graduate student, faculty or staff, or not a student.
• The date.
• Counts and averages across all of the above, such as how many samples went to a location and its average rating.

What a brand never sees

• Your name, in any form, including a first name or initials.
• Your email address, phone number, or any address. We do not hold a home address for you at all.
• What food you ordered, what you paid, or anything about your payment method.
• Your order history, how often you order, or anything you have said to us elsewhere.
• Any way to contact you or to reply to your comment directly.

About drop-off points

We do not collect your home address. RouteRally sets up a small number of collection points and drives there; you choose which one is convenient for you and meet the delivery. Where you collect from says nothing about where you live.

Because we plan the route, we already know how many samples went to each point. That is how the count is produced: it comes from our own delivery, not from anything you tell us. A brand is told how many of their samples went to each point and how those were rated. Nothing links a particular comment to a particular person.

Comments reach a brand without a name attached. If very few people have rated a sample at one point, a comment could in principle be easier to attribute; if that concerns you, the simplest step is not to leave a written comment.

Each brand can only ever see results for their own sample. They cannot see other brands' results, and they cannot see anything about customers who did not receive their sample.

We do not sell your personal information to brands or to anyone else. We do not share your contact details with a brand unless you ask us to, for example if you want them to follow up with you.

About the samples themselves

Samples are supplied by the brand, not by the restaurant preparing your food. Ingredient and allergy information shown in the app comes from the brand. If you have a food allergy, check the packaging before consuming anything, and contact us if information appears to be wrong or missing.

5. Cookies and local storage

The Service uses your device’s local storage (and similar browser technologies) to make the app work. For example, we store your cart, your preferences, and certain feature states (such as review history or driver tools) on your device so the app functions smoothly. This information stays on your device and is used to operate the Service. You can clear it through your browser or device settings, though doing so may reset parts of the app. We do not use third-party advertising cookies to track you across other websites.

6. Text messages

If you give us your phone number, you agree we may send you texts related to your orders and the Service. Message and data rates may apply. You can opt out of non-essential texts at any time by replying STOP. We will not send you promotional texts without your consent.

7. Your choices and rights

• Access and update: you can view and update your account information in the app.
• Delete: you can ask us to delete your account and associated personal information by contacting groupdealdelivery@gmail.com. We may keep limited information where the law requires (for example, records of transactions).
• Texts: you can opt out of non-essential texts by replying STOP.
• Friends features: you control these by choosing who to connect with.
• Marketing: where we offer marketing messages, you can opt out at any time.

To make a request, contact groupdealdelivery@gmail.com. We will respond as required by applicable law and will not discriminate against you for exercising your rights.

8. State privacy rights

Depending on where you live, you may have rights to know what personal information we hold about you, to request access or a copy, to request correction or deletion, and to opt out of the sale or sharing of personal information. RouteRally does not sell personal information and does not share it for cross-context behavioral advertising. To exercise any right, contact groupdealdelivery@gmail.com, and we will verify and respond to your request as the law requires. You may also have the right to appeal a decision or to contact your state’s attorney general.

9. How long we keep information

We keep information for as long as your account is active and as needed to provide the Service, resolve disputes, and meet legal and accounting obligations, then we delete or de-identify it.

10. Where we process information

We are based in the United States, and our service providers may process and store information in the United States. If you use the Service from outside the United States, you understand your information will be handled in the United States.

11. Security

We take reasonable steps to protect your information. No online service is perfectly secure, so we cannot guarantee absolute security, but we work to safeguard your data and will address issues responsibly.

12. Children

The Service is intended for adults and is not directed to children under 13. We do not knowingly collect information from children under 13. If you believe a child has given us information, contact us at groupdealdelivery@gmail.com and we will address it.

13. Do Not Track

Some browsers offer a “Do Not Track” signal. Because there is no common industry standard for how to respond, the Service does not currently respond to Do Not Track signals. We do not track you across other companies’ websites for advertising.

14. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will give reasonable notice through the Service or by email. The “Last updated” date above shows when it was last changed.

15. Contact

Questions about your privacy? Contact us at groupdealdelivery@gmail.com.