Privacy Policy
1. Who we are and what this policy covers
This Privacy Policy explains how the Super Hero Haul app ("Super Hero Haul", "we", "us"), offered by developer Sunset Architecture Collective, collects, uses, shares, and protects information when you use the Android app and its food ordering, delivery, and haul services. Contact: support@deletedatainhouse.com.
2. Information we collect
- Location: precise location (GPS) and approximate location (network-based or inferred, including IP address). See section 3.
- Account and contact information: name, email address, phone number, user ID, and account role (customer, restaurant/seller, or driver), plus other profile or eligibility details you provide.
- Addresses: delivery and pickup addresses you enter or select on the map.
- Orders and payments: order and purchase history, amounts, and fees. Card details are entered into Stripe's secure payment form. We do not store full card numbers, but we may store the card brand, last four digits, and payment-method identifiers.
- Tax and payout information (drivers and sellers who receive payouts only): taxpayer identification number, tax address, Stripe Connect identifiers, and annual payout totals needed for tax reporting.
- Messages: chats between customers, drivers, and restaurants, and messages to support.
- Photos, videos, and files you upload: for example listing photos, door-proof or proof-of-delivery photos, videos, and driver or seller documents.
- Voice or sound recordings: only when you choose audio or video calling, a live room, or a meeting feature and grant microphone permission. If you explicitly record a meeting, the recording is stored as described below.
- Other content you provide: delivery instructions, ratings, reviews, listings, and dispute notes.
- In-app search history: what you search for in the app, including saved searches.
- App activity and diagnostics: how features are used, crash logs, and performance data.
- Device identifiers: push-notification (FCM) token, Firebase installation ID, and other app-scoped device identifiers needed for sign-in, notifications, and diagnostics. The app does not collect the device advertising ID.
3. Location information
What we collect. Precise location from your device's GPS and approximate location from network sources, when you grant the app location permission.
When we collect it. Only while the app is open and in use. The app does not request background location.
- Customers: when you tap "Use my location", or open a map, to find your delivery address and show nearby restaurants and places.
- Drivers: during an active delivery, the app sends the driver's position to our servers every few seconds so the customer can follow the delivery and so the delivery can be confirmed.
Why we collect it. To find addresses, show maps and nearby restaurants, plan routes and estimate arrival times, show live delivery tracking, confirm that deliveries were completed, and prevent fraud.
Who we share it with.
- The customer on an order sees the assigned driver's live location until the delivery is complete. The driver sees the drop-off address and pin.
- Map, address-lookup, and route-planning services: your device may send coordinates, typed addresses, or the map area you are viewing to these services so they can return map images, addresses, nearby places, and routes.
- Uber Direct and other delivery partners: when an order is delivered by a third-party courier, we share the pickup and drop-off addresses, the recipient's name and phone number, and delivery instructions so the courier can complete the delivery.
How long we keep it. Location updates and drop-off pins are stored with the order record and kept as described in section 8.
Your choices. You can deny or remove location permission at any time in your device settings. Customers can type an address instead. Drivers need location turned on to accept and complete deliveries.
4. How we use information
- To create and manage your account and sign you in.
- To take orders, process payments, arrange deliveries, and pay restaurants, sellers, and drivers.
- To show live delivery tracking, estimates, and order updates, and to send transactional notifications, receipts, and service messages.
- To send promotional emails and text messages about Super Hero Haul (for example, offers or new features). This is optional marketing from us, not third-party ads in the app. See "Marketing and how to opt out" below.
- To provide customer support and resolve disputes and refunds.
- To detect and prevent fraud, abuse, and security problems.
- To understand app usage and fix crashes (Firebase Analytics and Crashlytics).
- To meet tax, accounting, and other legal obligations.
We do not sell personal information, and we do not show third-party advertising in the app.
5. How we share information
- Other users, as needed for an order: for example, a driver sees the customer's name, drop-off address, and instructions; a customer sees the driver's name and live location; a restaurant sees the order.
- Service providers that process data for us under contract:
- Stripe - payments, payouts, and identity checks for people who receive payouts.
- Uber Direct - third-party courier delivery.
- Twilio - transactional and promotional text messages.
- SendGrid (Twilio SendGrid) - transactional and promotional email, including receipts.
- Firebase (Google) - sign-in, database and file storage, push notifications, analytics, and crash reporting.
- Cloud hosting and other infrastructure needed to run the service, plus map, address-lookup, and route-planning services as described in section 3.
- Legal and safety: when required by law, to respond to legal process, or to protect users and the public.
- Business transfers: if the app is sold or merged, information may transfer to the new owner under this policy.
6. Marketing and how to opt out
If you have an account, we may email or text you about Super Hero Haul promotions or product updates. You can opt out at any time:
- Email: use the unsubscribe link in any promotional email, or email support@deletedatainhouse.com and ask to be removed from marketing.
- Text messages: reply STOP to a promotional text, or contact us at support@deletedatainhouse.com.
Transactional messages (for example, order receipts, delivery updates, or security notices) may still be sent as needed to provide the service. Deleting your account also stops marketing to that account. We do not use an advertising ID and we do not show third-party ads in the app.
7. Security
All data the app sends is encrypted in transit (HTTPS). We limit access to personal data to the people and services that need it. No method of transmission or storage is completely secure.
8. Data retention
We keep personal data while your account is active and as long as needed to provide the service. When you delete your account, we delete or de-identify your personal data within 30 days of verification. We keep only what we must: order, payment, payout, and tax records (generally up to seven years where the law requires), and records needed for fraud prevention, disputes, or legal holds. Saved meeting audio is kept up to 30 days unless you delete it sooner.
9. Deleting your account and data
- In the app: Settings → Delete account → Delete My Data, then confirm.
- On the web: Delete Account and Data Deletion.
- By email: support@deletedatainhouse.com from the email address on your account, with subject "Super Hero Haul Account Deletion Request".
Verified requests are completed within 30 days of verification, unless a longer period is required by law.
10. Your rights
Depending on where you live (for example California or the European Economic Area), you may have the right to access, correct, delete, or receive a copy of your personal data, or to object to or restrict certain processing. To make a request, email support@deletedatainhouse.com. We will not discriminate against you for exercising these rights.
11. International processing
We and our service providers process data in the United States.
12. Children
Super Hero Haul is not intended for anyone under 18, and we do not knowingly collect data from children.
13. Changes to this policy
We will post any changes on this page and update the "Last updated" date.
14. Live Shows, YouTube, and meeting audio
YouTube (Live Shows): if you choose to connect a YouTube channel to host a Live Show, we use Google OAuth to request permission to manage your YouTube live broadcasts (scope youtube.force-ssl). We use this access only to create, start, update, and end live broadcasts you request in the app. Access tokens are stored encrypted on our servers, are never sold or shared, are not used for advertising, and are not used to train AI models. You can disconnect at any time in the app or at https://myaccount.google.com/permissions, and we delete stored tokens when you disconnect or delete your account. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. YouTube's Terms of Service apply: https://www.youtube.com/t/terms
Meeting and call audio: audio is accessed or transmitted only when you choose audio or video calling, a live room, or a meeting feature and grant permission. Saved meeting audio, when you explicitly record it, is kept up to 30 days and can be deleted in the app or by emailing support@deletedatainhouse.com.
15. Contact
Questions or requests: support@deletedatainhouse.com. Related pages: Terms of Service · Delete Account · Data Deletion · Data Safety.