Privacy policy: DropSpot

This policy covers the DropSpot: Food Drops and DropSpot: Drivers apps and this website, all made by Original Function Inc. ("we"). It explains what we collect, why, who can see it, and how to have it deleted.

In short: we collect what's needed to run food drops: your phone number, your name, your orders and your messages. We don't sell your information, show ads, or use third-party analytics or tracking.

What we collect

Information you give us

Account: your phone number, the name you enter, and optional dietary notes.
Groups: the groups you belong to, your role (member, helper or driver), who invited you, and whether you were approved.
Orders: what you order, quantities, notes, the stop you choose, totals, and pickup status, including weights recorded for items sold by weight.
Messages: what you write in group chat, direct messages between a member and their group's driver and helpers, and updates drivers send to their group.
Driver information: the areas you shop and deliver to; the stores, items, prices and menu text you add; menu photos, PDFs and menu web page addresses you import; and photos of stores, items and your group's cover; the stops and pickup times you set, including where you pin each stop on the map; the DropSpot fee for each of your drops (not charged yet); and your earnings records.

Information created as you use DropSpot

Payments: your order totals; each order's payment status (unpaid, member says paid, or paid), how it was paid (cash, Venmo, Zelle or WeChat Pay), when, and who marked it. For drivers, the payment details you publish to your group: your Venmo username, Zelle phone number or email, a WeChat Pay QR code image, and a note. These payments happen outside DropSpot: we don't process them, never handle the money, and never receive card or bank details. Paying by card in the app isn't available yet. When it is, we will also keep the amount, status and a reference from our payment processor, and we will never receive or store full card numbers.
Sign-in: session tokens that keep you signed in, stored in a form that can't be read back.
Updates about your orders and drops, shown in the app's Updates list, and which messages you've read, for unread counts.
Push notifications: if you allow them, the push token Apple gives your phone for each DropSpot app.
Server logs: when the apps or this website contact our servers, we record the IP address, time and address requested. We use these to keep the service secure and to fix problems.

What we don't collect

Location: we don't collect your device's location. The stop locations you see on the map are entered by drivers.
Camera: the Drivers app uses the camera only to scan pickup QR codes. Images are processed on the phone and never uploaded.
Contacts, advertising identifiers, cookies on this website, or third-party analytics: none of these.

How we use it

To sign you in, by texting you a one-time code.
To run drops: showing your order to your driver, building pick lists and stop rosters, and recording handoffs.
To tell you what's happening, in the app's Updates list and by push notification if you allow them: a drop opening, orders closing within 24 hours, your driver arriving at your stop, your order being handed off (with a receipt), a payment reported or received, driver broadcasts, group chat and direct messages, and, for drivers, requests to join your group.
To answer support requests, keep the service secure, and prevent abuse.
To meet legal, tax and accounting obligations.

Who can see it

Your driver and their helpers see your name, your orders and notes, your stop, and your pickup status, and read and reply to the direct messages you send them. They don't see your phone number.
Members of a group see the payment details their driver publishes (Venmo, Zelle, WeChat Pay QR code and note).
Anyone with the link can see the photos drivers and helpers upload (stores, items, group covers and WeChat Pay QR codes). They're stored on our servers and delivered through Cloudflare. Don't upload photos of people.
Other members of your group see your name and the messages you post in group chat.
Service providers handle specific tasks for us and may use your information only for those tasks:
- Twilio sends sign-in codes and receives your phone number to do so.
- Cloudflare carries traffic between the apps and our servers and protects against attacks.
- Anthropic reads menus that drivers and helpers import from a photo, a PDF or a web page address, and returns the item names and prices. It receives only that file or page (it fetches the page itself) and our instructions, never member information, phone numbers or orders. Menu text you paste is read on our own server and isn't sent to Anthropic.
- Apple Push Notification service delivers push notifications. It receives your device's push token and the text of each notification.
- A payment processor will handle card payments once paying in the app is available. We will name it here before then.
The law: we disclose information when required by law, or to protect people's safety or our rights.

We don't sell your personal information or share it for targeted advertising.

Where it's kept and for how long

Your information is stored on servers we operate in the United States.

We keep your account information while your account is open.

When you delete your account

Deletion happens right away. At that moment we:

delete your phone number, dietary notes, sign-in sessions and sign-in code records, push tokens and any notifications not yet sent, your Updates list, read markers, and group memberships;
replace your name with "Deleted user";
for drivers, delete your driver profile, including payout account details, and turn off the invite links you created.

We keep these records, shown as "Deleted user" and no longer linked to your phone number:

orders, payments and payouts, which drivers need for their earnings and we need for tax and accounting;
messages you wrote in group chat and direct messages, so conversations still make sense to the people in them;
for drivers, the groups and drops you ran.

A few things can pause deletion, so that nobody is left without their food or their money. A driver can't delete their account while one of their drops is taking orders, being shopped or being delivered; finish or cancel it first. A member can't delete their account while an order is past its deadline and not yet picked up. Orders you've placed in drops that are still taking orders are cancelled automatically.

Menu imports

We don't keep the menu photo or PDF you import. We keep only the item names and prices read from it, as a draft for you to check before it goes into your catalog.

Backups and logs

We back up our database and uploaded photos every day and keep each backup for 14 days, on our own servers. Deleted information leaves the backups within 14 days.

Server logs (IP address, time and requested address) are kept for a limited time and automatically overwritten as new logs are written.

Twilio, Cloudflare, Apple and Anthropic keep the information they handle for us under their own retention policies.

Your choices

See or correct your information: your name and dietary notes are under You in DropSpot: Food Drops. For a copy of everything we hold about you, email us.
Delete your account: in DropSpot: Food Drops, go to You → Delete account; in DropSpot: Drivers, go to Group → Delete account. If you can't sign in, email hello@originalfunction.com with the phone number on the account, and we confirm by text to that number before deleting. What's deleted and what's kept is described above.
Leave a group: ask the driver to remove you. Your past orders stay in their records.
Push notifications: turn them off in iPhone Settings → Notifications. Signing out removes this device's push token.

Depending on where you live, you may have other rights over your information, such as the right to know, correct or delete it. Email us to use them; we won't treat you differently for doing so.

Suspended accounts

We can suspend an account that's used to break the law, harm other people, or abuse DropSpot. A suspended account can't sign in. Suspension doesn't delete information; to have a suspended account deleted, email us from the address below.

Security

Connections to DropSpot are encrypted. Sign-in codes and session tokens are stored in a form that can't be read back, and access to our servers is limited to the people who run them. No system is perfectly secure; if a breach affects your information, we will tell you as the law requires.

Children

DropSpot isn't meant for children under 13, and we don't knowingly collect their information. If you think a child has given us information, email us and we'll delete it.

Changes to this policy

When we change this policy, we update the date at the top. If a change affects how we use information we already have, we tell you in the app before it takes effect.

Contact

Original Function Inc.
hello@originalfunction.com