CARI
CARI Privacy Policy

Your Data, Protected

Effective Date: July 15, 2025 · This Policy describes how CARI collects, uses, discloses, and protects personal information across our app, website, and services in compliance with CCPA, GDPR, and FERPA (as applicable).

By using the Services, you agree to this Policy. For questions, email contact@caridelivery.com.

1. Information We Collect

1.1 Personally Identifiable Information

  • Full name
  • University-issued email address
  • Mobile phone number
  • Campus ID or institutional ID
  • Delivery address (residence hall or on-campus location)
  • We do not collect FERPA-governed education records.

1.2 Payment Information

  • Payments are processed through Stripe. CARI does not store full payment card numbers.

1.3 Technical and Usage Information

  • IP address and geolocation
  • Device/browser details
  • Session activity and page views
  • Order history and diagnostics

1.4 Location Information

  • With consent, GPS data is collected to optimize deliveries. You may revoke this in device settings.

1.5 Communications Metadata

  • Support chats
  • Reviews or inquiries
  • Notification preferences
  • In-app chats

1.6 User-Generated Content

  • Submitted content (e.g., feedback, surveys) may be used to improve services.

1.7 Third-Party SDKs

  • We use tools like Firebase and Mapbox, governed by their respective privacy policies.

2. Use of Information

  • Manage food deliveries
  • Authenticate users
  • Process payments and prevent fraud
  • Send transactional communications
  • Analyze and optimize performance
  • Deliver marketing (with consent)
  • Use limited automation (e.g., courier matching)

3. Disclosure of Information

  • Service Providers: Payment processors, cloud vendors, contractors
  • University Partners: Limited operational data only
  • Legal: If required by law
  • Mergers: With safeguards during corporate transitions
  • Cross-Border: Lawful international processing

4. Data Security

  • TLS encryption
  • Role-based access
  • Restricted internal access
  • Regular monitoring and assessments
  • In the event of a breach, CARI will notify you per applicable law.

5. Data Retention

  • For as long as necessary to provide services
  • To comply with legal obligations
  • To protect legal rights

6. Your Rights and Choices

6.1 Right to Access/Rectify

  • Amend data in your account or email contact@caridelivery.com.

6.2 Right to Erasure

  • Request deletion by emailing contact@caridelivery.com.

6.3 Right to Opt Out of Marketing

  • Unsubscribe from promotional emails in your settings.

6.4 Right to Revoke Location Access

  • Manage in your device settings.

7. Cookies and Similar Technologies

  • We use cookies to support login, preferences, analytics, and error tracking. You may disable cookies in your browser.

8. Children’s Privacy

  • We do not knowingly collect data from anyone under 13. If discovered, such data will be deleted.

9. California Privacy Rights (CCPA)

  • Right to know and access personal info
  • Right to request deletion
  • Right to opt out of sale (CARI does not sell data)

10. Rights of European Users (GDPR)

  • Right to access, correct, or erase data
  • Right to object or restrict processing
  • Right to data portability
  • Right to lodge a complaint

11. Policy Updates

  • CARI may revise this Policy. Continued use of the Services implies acceptance of updates.

12. Contact Information

  • Email: contact@caridelivery.com
  • Phone: (248) 872-1729