Privacy Policy
Effective: [date]
This policy explains what [BusyEats legal entity] ("BusyEats", "we") collects through the BeGood, Sprout, Sunlight and Leaf apps and the pages at busyeats.io, why, who else receives it, how long we keep it, and how to delete it.
The short version
- You sign in with Apple. We don't use passwords.
- We don't show ads, sell your data, or share it with data brokers. We don't track you across other companies' apps or websites.
- Businesses see counts and rates about their promotions, never who you are.
- You can delete your account in each app. Your data is deleted 30 days later.
Who this covers
| App | For |
|---|---|
| BeGood | Customers: find food near you, follow places, share with friends, use promo codes |
| Sprout | Food and beverage businesses ("merchants"): manage the business, stores, menu and promotions |
| Leaf | A business's counter device: staff redeem promo codes, and customers scan a code on its screen |
| Sunlight | BusyEats staff: verifying and supporting merchants |
What we collect
Your account (all apps)
- From Sign in with Apple: an identifier Apple creates for our apps, and, the first time only, your name and email. If you choose Hide My Email, we get an Apple relay address instead of your real one.
- An email you type, if Apple didn't give us one. We send a 6-digit code to confirm it.
- A Sign in with Apple token, used only to tell Apple to disconnect our apps when you delete your account.
- Your notification settings and your device's push token, so we can send notifications to your phone.
BeGood (customers)
- Profile: your username and your friends list.
- Allergies and diet preferences (for example gluten-free, halal or kosher), if you enter them. We treat these as health information. We use them only to show which dishes suit you. They're never used for advertising, never shown to businesses, and never shared.
- Saved addresses, including their map coordinates. One of them is your active "search origin", which decides what's near you. If you use Current Location, we save your phone's coordinates as that address.
- Friends and social activity: friend requests, mutes and blocks, the posts you write (shown to your friends), and the stores and businesses you follow.
- Promo codes: the codes you claim and redeem, the order total staff enter when you redeem one, and codes you give to or receive from friends. When you give a code, the friend sees your display name, and you see theirs. We count how often two friends give each other codes. We use that count only for features you can see, such as suggesting friends, never for advertising.
- Invites: when you send a code to someone not on BeGood yet, anyone with the link can see your first name, the offer, the business and street, and the code. The page isn't listed in search engines.
- Promotion activity: which promotions you see and open, roughly how far away you were (for example "1–3 miles"), and visits to stores. A visit is recorded when staff redeem your code, when you scan a store's counter code, or, only if you turn on Share Visits, when your phone detects that you're at a store. Share Visits can run while BeGood is closed if you allow "Always" location. We store which store and when, not your coordinates. Turning Share Visits off deletes the visits it detected.
- Camera: BeGood uses the camera only to scan a store's counter code. Only the scanned code is sent to us.
Promo codes, promotion activity and visits are stored under a coded key computed from your account, not under your name or Apple identifier. BusyEats could still match the key to your account, so this data is pseudonymous, not anonymous, and we treat it as your personal data.
A small share of customers may not see a particular promotion, so the business can measure whether it works. This is decided from your coded key, and nothing extra is stored.
Sprout (merchants)
- Your business: legal and trading names, address, phone and email, the names, titles, phones and emails of its contacts, logo, brand color, stores and their locations, menu items and photos, and posts and promotions.
- Earlier versions of your business details and menu, kept for a year, so you can undo changes and so we can see who changed what.
- Customers see your trading name, store streets, logo, menu and promotions. They don't see your contacts.
- Camera and location: Sprout uses the camera to scan customers' promo codes, and your location only on your phone, to show how far each store is. Your location isn't sent to us.
Leaf (counter devices)
A Leaf device is paired with one store from Sprout. It stores nothing about the people who use it. When staff redeem a code, Leaf shows only the offer and a confirmation code, never anything about the customer.
Sunlight (BusyEats staff)
Sunlight lets BusyEats staff see merchants' account and business details in order to verify and support them. Every change staff make is recorded with who made it.
Logs
Our servers keep technical logs, to keep the service running and fix problems. We don't log IP addresses, and our log lines don't name you or say where you are. Logs are deleted after 30 days. Our network provider, Cloudflare, sees IP addresses as traffic passes through it (see below).
How we use it
- To run the apps: sign-in, menus and search near you, friends and posts, promo codes, notifications and email.
- To show businesses how their promotions perform, as counts and rates only. Any count from 1 to 9 customers is hidden, so a small number can't point to a person.
- To verify businesses and keep the service safe.
- To send emails you need, such as sign-in codes and account deletion notices. We don't send marketing email.
We don't use your data for advertising, and we don't sell it.
Who receives it
| Who | What | Why |
|---|---|---|
| Your friends on BeGood | Your display name, username, posts, and codes you give them | The social features you use |
| Anyone with an invite link you share | Your first name and the offer | So they can claim the code |
| Businesses | Counts and rates about their promotions and followers, never individuals | Merchant insights |
| Apple | Sign-in, push notifications (whose text can include a friend's name) | Sign in with Apple, Apple Push Notification service |
| Geocodio | Street addresses | Turning addresses into map coordinates |
| Amazon Web Services (Amazon SES, United States) | Your email address and the emails we send | Delivering email |
| Cloudflare | All traffic to busyeats.io, including IP addresses | Secure network connection to our servers |
These providers handle data only to provide their service to us. We may also disclose data if the law requires it, or to a successor if BusyEats is sold or merged, under this policy.
How long we keep it
| Data | Kept |
|---|---|
| Your account and profile | Until you delete it |
| Allergies, diets, saved addresses | Until you change or delete them, or delete your account |
| Posts | Until you delete them, or 1 year |
| Friend requests | 30 days after they're answered; 90 days if nobody answers |
| Promo codes, invites, promotion activity and visits | 180 days |
| Counter scans (scanning a store's counter code) | 10 minutes |
| Earlier versions of account, business and menu details | 1 year |
| Email confirmation codes | Until they expire |
| Server logs | 30 days |
| Backups | 30 days |
Deleting your account
You can delete your account in each app: Settings in BeGood, the Account tab in Sprout, and the Dashboard in Sunlight. (Leaf has no personal account; a business removes a Leaf device in Sprout.) Deleting it in one app (for example BeGood) leaves your account in another (for example Sprout).
- Right away: you're signed out on every device, notifications stop, and we email you the date your data will be deleted.
- During 30 days: signing in to that app again cancels the deletion.
- After 30 days: everything that app holds about you is deleted, and we tell Apple to disconnect it from your Apple Account. Some records behind businesses' promotion statistics are kept with your coded key replaced by a random one, so they can no longer be linked to you. Codes you gave friends stay with them, labeled "a friend". Logs and backups age out on the schedule above.
If you stop using Sign in with Apple with one of our apps in your Apple settings, we schedule that app's account for deletion in the same way. If you delete your Apple Account, your accounts in all our apps are deleted right away.
Your choices and rights
- See or correct your profile, addresses, allergies and diets in the app at any time.
- Location: BeGood asks for location only while you use it, plus "Always" if you turn on Share Visits. You can change this in iOS Settings at any time.
- Notifications: in BeGood, turn each kind on or off in Settings. In any app, turn them all off in iOS Settings.
- Ask us for a copy of your data, to correct or delete it, or any other question, at privacy@busyeats.io. Depending on where you live (for example California or the European Union), you may have further rights, and we'll honor them.
Children
Our apps are for people 13 and older. We don't knowingly collect data from children under 13. If you believe a child under 13 has an account, contact us and we'll delete it.
Security
Data between your phone and our servers is encrypted in transit, and only BusyEats staff can use Sunlight. No system is perfectly secure, and we'll notify you as the law requires if a breach affects your data.
Where your data is processed
Our servers and service providers process your data in the United States.
Changes
If we change this policy, we'll update the date at the top. If a change is significant, we'll tell you in the apps before it applies.
Contact
[BusyEats legal entity], [postal address], privacy@busyeats.io