Privacy Policy

1. Who We Are

KneadLA ("we," "us," "our") is a nonprofit organization that connects Los Angeles bakeries with homeless shelters through volunteer drivers. This policy covers the KneadLA mobile app and website (kneadla.org).

2. Information We Collect

• Account information - name, email address, password, and role (driver, bakery, shelter, or admin) when you register.
• Profile information - vehicle type, driver license details, business name, or shelter name depending on your role.
• Location data - approximate location while the app is in use, solely to calculate delivery routes and provide shelters with driver ETAs.
• Photos - delivery proof photos and document uploads you choose to capture or select.
• Device information - push notification tokens to send you delivery updates.

3. How We Use Your Information

• Match bakery donations with nearby shelters and available drivers.
• Send push notifications and emails about delivery assignments and status updates.
• Calculate routes and estimated arrival times.
• Track platform impact metrics (total deliveries, pounds delivered).
• Communicate with you about your account.

4. How We Share Your Information

We do not sell your personal information. We share limited data only as needed to operate the platform:

• Between platform participants - bakeries, drivers, and shelters see each other's names and locations for active deliveries.
• Service providers - we use Supabase (database and authentication), Google Maps (routing and geocoding), and Expo (push notifications) to operate the platform. These providers process data on our behalf under their own privacy policies.
• Legal requirements - we may disclose information if required by law.

5. Data Storage and Security

Your data is stored in Supabase with row-level security policies. Authentication credentials are stored securely on your device using encrypted storage. We use HTTPS for all data transmission.

6. Your Rights

You may:

• Access or update your profile information through the app.
• Request deletion of your account and associated data by contacting us.
• Opt out of push notifications through your device settings.

California residents have additional rights under the CCPA, including the right to know what personal information we collect and the right to request its deletion.

7. Children's Privacy

KneadLA is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

8. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised effective date.

9. Contact Us

If you have questions about this privacy policy or your data, contact us at hello@kneadla.org.