Privacy Policy

Effective Date: December 10, 2025

Last Updated: December 10, 2025 | Version: 1.0

Introduction

Welcome to PACmeLunch ("we," "our," or "us"). We are committed to protecting your privacy and the privacy of your children. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and services (collectively, the "Service").

Please read this Privacy Policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Personal Information

We collect the following personal information when you create an account and use our Service:

For Parents/Guardians:

  • Email address
  • Name (derived from email address)
  • Password (encrypted)
  • Payment information (processed securely by Stripe)

For Students:

  • Student name
  • School name

For Restaurant Vendors:

  • Email address
  • Name (derived from email address)
  • Password (encrypted)
  • Business name
  • Business description
  • Phone number
  • Business address
  • Stripe account information (for payments)

For School Administrators:

  • Email address
  • Name
  • School name
  • School address
  • Bank account information (for receiving payments)

Order Information

When you place an order through our Service, we collect:

  • Order details (menu items, quantities, prices)
  • Delivery date
  • Order history

Payment Information

Payment information is processed securely by our third-party payment processor, Stripe. We do not store complete credit card numbers on our servers. Stripe collects:

  • Credit/debit card information
  • Billing address
  • Transaction history

For more information about Stripe's privacy practices, please visit: https://stripe.com/privacy

Automatically Collected Information

When you use our Service, we may automatically collect:

  • Device information (device type, operating system, unique device identifiers)
  • Usage data (features used, time spent in app, interaction patterns)
  • Log data (IP address, access times, app crashes)

How We Use Your Information

We use the collected information for the following purposes:

To Provide and Maintain Our Service

  • Process and fulfill meal orders
  • Facilitate communication between parents, school authorities/PACs, and vendors
  • Manage user accounts
  • Process payments and refunds
  • Send order confirmations and reminders

To Improve Our Service

  • Analyze usage patterns to enhance user experience
  • Develop new features and functionality
  • Monitor and analyze trends
  • Troubleshoot technical issues

To Communicate With You

  • Send important service updates and notifications
  • Respond to your inquiries and support requests
  • Send order confirmations and delivery notifications
  • Provide customer support

To Ensure Safety and Security

  • Detect and prevent fraud
  • Protect against unauthorized access
  • Comply with legal obligations
  • Enforce our Terms & Conditions

How We Share Your Information

We do not sell your personal information to third parties. We may share your information in the following circumstances:

With Service Providers

We share information with trusted third-party service providers who assist us in operating our Service:

Stripe (Payment Processing)

  • Payment card information
  • Billing information
  • Transaction details

Cloud Hosting Provider (Render)

  • All data stored on our servers
  • Subject to their security and privacy policies

With Schools and Vendors

To fulfill orders, we share necessary information:

With Schools:

  • Student names
  • Order details for distribution

With Restaurant Vendors:

  • Order details (items, quantities, delivery date)
  • Student names (for order labeling)

For Legal Reasons

We may disclose your information if required by law or in response to:

  • Court orders or legal processes
  • Government or regulatory requests
  • Protection of our rights or property
  • Investigation of fraud or security issues
  • Protection of user safety

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change.

Data Security

We implement appropriate technical and organizational security measures to protect your personal information:

  • Encryption: All data transmitted between your device and our servers is encrypted using SSL/TLS
  • Secure Storage: Passwords are hashed using industry-standard algorithms
  • Access Controls: Limited employee access to personal information on a need-to-know basis
  • Payment Security: PCI-DSS compliant payment processing through Stripe
  • Regular Security Audits: Periodic review of security practices

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Data Retention

We retain your personal information for as long as necessary to:

  • Provide our Service to you
  • Comply with legal obligations
  • Resolve disputes
  • Enforce our agreements

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal or regulatory purposes.

Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

Access and Portability

  • Request a copy of your personal information
  • Receive your data in a structured, machine-readable format

Correction

  • Update or correct inaccurate information
  • Complete incomplete information

Deletion

  • Request deletion of your personal information
  • Contact us to delete your account

Opt-Out

  • Unsubscribe from marketing communications
  • Disable push notifications in app settings

Restriction

  • Request limitation of processing of your information

To exercise these rights, please contact us at privacy@pacmelunch.com.

Children's Privacy

Our Service is designed to facilitate school lunch ordering for children. We take children's privacy seriously and comply with applicable children's privacy laws.

Parental Consent

  • Parents/guardians create accounts and provide student information
  • Parents control all student data and order history
  • We do not knowingly collect information directly from children under 13

Student Information

  • We collect only information necessary to fulfill lunch orders
  • Student information is shared only with school authorities/PACs and vendors for order fulfillment
  • Parents can review, update, or delete student information at any time

Educational Context

  • Our Service is used in an educational setting with school authority/PAC oversight
  • Schools may have additional privacy policies governing student data

If you believe we have collected information from a child without proper parental consent, please contact us immediately.

Cookies and Tracking Technologies

Our Service uses minimal tracking technologies:

Essential Cookies

  • Session management (keeping you logged in)
  • Security features
  • Basic functionality

Analytics (Optional)

  • We may use analytics to understand how users interact with our Service
  • You can opt out of analytics tracking in app settings

We do not use advertising cookies or third-party tracking for marketing purposes.

Third-Party Links

Our Service may contain links to third-party websites or services (e.g., Stripe). We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using our Service, you consent to such transfers.

We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

  • Posting the new Privacy Policy in the app
  • Sending an email notification
  • Displaying a prominent notice in the app

Your continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Email: legal@pacmelunch.com

Response Time: We will respond to privacy inquiries within 30 days.

Governing Law

This Privacy Policy is governed by the laws of the Province of British Columbia and the federal laws of Canada applicable therein, including the Personal Information Protection and Electronic Documents Act (PIPEDA).

Consent

By using our Service, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy.

Last Updated: December 10, 2025 | Version: 1.0