Privacy Policy
Effective Date: September 14, 2026
1. Introduction & Scope
Field2Fare LLC ("Field2Fare," "we," "our," or "us") respects your privacy and is deeply committed to protecting it. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile applications, phone intake line, APIs, and backend services (collectively, the "Platform").
By accessing, registering for, or interacting with the Platform, you acknowledge and consent to the data practices described in this Privacy Policy.
2. Categories of Information We Collect
A. Information You Voluntarily Provide
- Account Credentials: Name, email address, mobile phone number, and authentication data.
- Profile Data: Profile photographs, usernames, and biographical information you choose to display.
- Producer Data: If you register as a Producer, we collect your business name, physical farm or stand address, operational hours, product inventory, and descriptions.
- User-Generated Content (UGC): Reviews, ratings, comments, photographs, posts, and messages you send to other users through the Platform.
- Contacts (optional): If you choose to use the "Find Friends" feature, the phone numbers in your device's address book are sent to our servers solely to match them against existing Field2Fare accounts. Numbers that do not match an account are not stored. You can use the Platform fully without granting contacts access.
- Phone Intake Line (Producers): If you call our farm-stand intake phone line, the call is answered by an automated assistant and recorded and transcribed so that we can update your stand's status, address, and inventory. Transcripts are retained for quality and dispute purposes.
- Communications: Records of your interactions with our support team.
B. Information Collected Automatically
- Location Data: With your explicit device-level permission, the app uses your precise GPS location while it is open to show nearby farm stands, calculate distances, and generate driving routes. For usage analytics we store only an approximate location (rounded to roughly one kilometer), never your exact coordinates.
- Device & Diagnostic Data: Device model, operating system and version, app version, push notification tokens, browser type (on the website), and crash reports. Our servers, like all web services, record the IP address of each request in routine access logs.
- Usage Metrics: Session durations, screens viewed, stands viewed, features utilized, and timestamps.
C. Information from Third-Party Partners
- Single Sign-On (SSO): If you authenticate via Google or Apple, we receive your name and email address as permitted by those providers' authorization screens.
- Payment Processors: Premium subscriptions are sold through the Apple App Store and Google Play and managed with RevenueCat. We receive subscription status, expiration dates, product identifiers, and billing tier information. We never receive, process, store, or transmit your credit card numbers.
3. How We Utilize Your Data
Your information is utilized exclusively for legitimate business purposes, including:
- Service Delivery: To operate the mapping engine, cluster farm stands, generate driving routes via Google Maps APIs, connect you with friends you choose to find, and deliver messages and notifications.
- Authentication & Security: To issue One-Time Passwords (OTPs) via email or SMS, verify identities, and prevent unauthorized account access.
- Content Moderation: To review User-Generated Content and user reports for violations of our Community Guidelines.
- Platform Enhancement: To analyze usage, debug crashes, and develop new features.
📱 4. Strict SMS & Mobile Data Policy
Field2Fare utilizes Twilio to transmit critical authentication codes and account alerts via SMS. We strictly adhere to A2P 10DLC messaging compliance regulations.
No mobile information, phone numbers, or SMS opt-in consent will be shared with, sold to, rented to, or distributed to any third parties, affiliates, or partners for marketing or promotional purposes under any circumstances. All sharing categories expressly exclude text messaging originator opt-in data and consent.
5. Disclosure & Sharing of Information
We do not sell your personal data. We disclose data only in the following restricted scenarios:
- To Essential Service Providers: We share only the data needed to run the Platform with our service providers, each bound by confidentiality and data-processing terms: cloud infrastructure and databases (Supabase), mapping, geocoding, and routing (Google Cloud), SMS delivery (Twilio), email delivery (Resend), push notification delivery (Expo), voice-call handling and transcription for the phone intake line (Vapi and its speech partners), sign-in (Apple, Google), and subscription management (RevenueCat, Apple App Store, Google Play).
- Public Visibility: Information you voluntarily attach to a Producer profile (stand name, location, inventory, public photos) or Explorer profile (reviews, display name, profile photo) is visible to the public community. Messages are visible only to their sender and recipient.
- Legal & Compliance Obligations: We will disclose data if required to do so by a subpoena, court order, or governmental request; to investigate fraud; or to protect the physical safety of our users or the public.
- Corporate Restructuring: In the event of a merger, acquisition, bankruptcy, or asset sale, user data may be transferred as a business asset under the condition that the receiving entity honors this Privacy Policy.
6. Data Retention & Your Rights
We retain your personal data only for as long as your account is active or as needed to provide our services and comply with legal obligations. Usage analytics are retained in aggregate form; reports and moderation records are retained as needed to enforce our Community Guidelines.
Account Deletion & Data Erasure
You maintain the right to request the complete, permanent erasure of your account and all associated personal data.
- In-App Deletion: You may permanently delete your account and data at any time by navigating to Account > Delete Account within the Field2Fare iOS or Android applications. Deletion removes your profile, photos, reviews, messages, favorites, routes, and subscription records; stands you created are unpublished.
- Email Request: Alternatively, you may submit a verifiable deletion request by emailing support@field2fare.com from the email address associated with your account. We will execute this purge within 30 days.
Location, Contacts & Notification Controls
You may revoke Field2Fare's access to your device's location, contacts, or push notification services at any time via your device's native OS settings. Note that revoking location access will severely limit the core functionality of the map. Individual notification types can also be turned off inside the app.
Your Privacy Rights
Depending on where you live, you may have the right to access, correct, export, or delete the personal data we hold about you, and to object to certain processing. You can exercise these rights by emailing support@field2fare.com. We will not discriminate against you for exercising them.
7. Security of Your Data
We implement technical, administrative, and physical security measures—including TLS encryption in transit, secure token authentication, and strict Row Level Security (RLS) database policies—to protect your data from unauthorized access. However, no transmission over the public internet is 100% secure. You are responsible for safeguarding your login credentials.
8. Children's Privacy (COPPA Compliance)
The Platform is intended for users aged 13 and older. We do not knowingly collect, solicit, or maintain personal information from anyone under the age of 13. If we discover that a child under 13 has provided personal data, we will promptly delete that data from our servers. If you believe a child under 13 has created an account, please contact us at support@field2fare.com.
9. Policy Modifications
We reserve the right to amend this Privacy Policy at our discretion. Material changes will be communicated via an in-app notification, an email to the address on file, or a prominent notice on our website prior to the change taking effect. Your continued use of the Platform after the effective date constitutes your acceptance of the revised policy.
10. Contact Our Privacy Team
If you have inquiries, require clarification on these practices, or need to escalate a data dispute, please contact us: