Beta Under Development - Currently for Demonstration

Privacy Policy

Last updated: January 10, 2026

1. Introduction

Welcome to loavesand.fish ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our food rescue platform.

loavesand.fish is a real-time food rescue platform connecting restaurants, grocery stores, and individuals with surplus food to shelters, food banks, and families in need. We operate under the funding and guidance of kingdominvest.ing.

Data Controller: loavesand.fish
Contact: privacy@loavesand.fish

2. Information We Collect

2.1 Information You Provide

  • Account Information: Name, email address, phone number, organization name (for donors/recipients), address, and profile photo.
  • Donor Information: Business type, food safety certifications, location coordinates for food pickup.
  • Recipient Information: Organization type, 501(c)(3) status, daily capacity, dietary accommodation needs.
  • Driver Information: Vehicle type, availability schedule, background check consent, food handler certification status.
  • Food Post Information: Food descriptions, photos, quantities, dietary information, pickup locations.
  • Payment Information: When you make donations, payment details are processed securely by Stripe. We do not store your full payment card details.

2.2 Information Collected Automatically

  • Usage Data: Pages visited, features used, time spent on platform, interaction patterns.
  • Device Information: Browser type, operating system, device identifiers, IP address.
  • Location Data: With your consent, precise location for matching food posts with nearby recipients.
  • Cookies: See our Cookie Policy for details.

3. How We Use Your Information

We use your information to:

  • Operate and maintain the food rescue platform
  • Match food donors with recipients based on location, capacity, and dietary needs
  • Coordinate volunteer driver pickups and deliveries
  • Process donations and generate tax receipts
  • Send notifications about available food, claimed items, and delivery status
  • Calculate and display impact metrics (meals rescued, CO2 saved)
  • Improve our services and develop new features
  • Ensure food safety compliance and platform integrity
  • Communicate important updates about our service
  • Respond to your inquiries and provide support

4. Data Sharing

We share your information only in the following circumstances:

4.1 Service Providers

  • Cloudflare: Website hosting, security, and performance optimization
  • Stripe: Payment processing for donations
  • 2SMTP: Email delivery for notifications
  • Mapbox: Location services and mapping (if enabled)

4.2 Platform Users

  • Donors can see which recipient claimed their food post
  • Recipients can see donor information for pickup coordination
  • Drivers can see pickup and delivery addresses for matched deliveries
  • Public impact statistics are anonymized and aggregated

4.3 Legal Requirements

We may disclose information if required by law, court order, or to protect our rights and safety.

5. Your Rights (GDPR)

If you are in the European Economic Area, you have the following rights:

  • Right to Access: Request a copy of your personal data
  • Right to Rectification: Request correction of inaccurate data
  • Right to Erasure: Request deletion of your data ("right to be forgotten")
  • Right to Data Portability: Request your data in a machine-readable format
  • Right to Object: Object to processing of your data
  • Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, contact us at privacy@loavesand.fish. We will respond within 30 days.

6. Data Security

We implement appropriate technical and organizational measures to protect your data:

  • All data transmitted over HTTPS/TLS encryption
  • Passwords hashed using industry-standard algorithms
  • Database encryption at rest (Cloudflare D1)
  • Regular security audits and vulnerability assessments
  • Access controls limiting employee access to personal data
  • Background checks for volunteer drivers

7. Data Retention

We retain your data as follows:

  • Account data: Until you delete your account, plus 30 days grace period
  • Food post data: 2 years for impact reporting and tax records
  • Transaction data: 7 years for tax and legal compliance
  • Usage logs: 90 days

8. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we will also send an email notification.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us: