EKGO Privacy Policy

1. Who this policy applies to

• Restaurant customers using the EKGO! app to request pickups, see service history, and view the carbon-reduction clock.
• Drivers using the EkGo Driver app to run assigned routes, capture before/after photos, and record service completions.
• Administrators and operations staff using the EKGO admin dashboard.

If you received a login from us but have not yet used the app, this policy still applies once your account is created.

2. Information we collect

2.1 Information you give us directly

• Account information — name, email address, phone number, and the role assigned to you (customer, driver, admin).
• Restaurant information (customers) — restaurant name, address, oil tank size, grease-trap capacity, preferred service windows.
• Service requests and messages — content of any requests, notes, or messages you send through the app.
• Service completion data (drivers) — gallons collected, outcome (collected / no access / zero-gallons reason), notes.
• Photos you capture (drivers) — before/after service photos, manifest photos. Captured via the device camera and stored against the relevant work order.

2.2 Information collected automatically

• Precise location (drivers, while a route is active) — so dispatch can track progress and stops can be auto-checked-in. Collection pauses when no route is active and stops when you sign out. We request background-location permission because routes continue when the app is backgrounded during navigation.
• Device information — device model, operating-system version, app version. Used for crash triage and compatibility.
• Usage events — sign-in, sign-out, page views inside the app, errors. We do not use third-party behavioral analytics or advertising SDKs.

2.3 Information we do NOT collect

• Payment card numbers. Rebate payouts today happen via external bank transfer or check and are arranged out-of-app; if payments enter the app in the future, a payment processor (e.g., Square) will receive card data directly — we will not see or store it.
• Contacts, SMS, calendar, microphone audio, browsing history outside the app, or advertising identifiers.

3. Why we collect it

• Service delivery — routing, scheduling, pickup confirmation, manifest generation, and sister-company vendor reporting where applicable.
• Customer transparency — the carbon-reduction clock, service history, and rebate statements are derived from service records.
• Communication — responding to service requests, notifying you of upcoming pickups, answering questions.
• Operations and improvement — debugging, crash triage, auditing who changed what. Staff access to data is scoped by role.
• Legal and safety — keeping records required by environmental, waste-hauler, and tax regulations.

We do not sell your personal information, use it for advertising, or share it with data brokers.

In California terms (CCPA/CPRA), we do not “sell” or “share” personal information, and we have not done so in the preceding 12 months.

4. Who we share it with

We share data only in the following categories, and only to the extent needed for the listed purpose:

We may also share information with a successor in connection with a business reorganization or acquisition. If that happens we will notify you and give you a chance to opt out or delete your account first.

5. How long we keep it

• Account data — while the account is active, plus 12 months after deletion so that pickup records and regulated manifests remain traceable.
• Service records (work orders, photos, manifests, gallons collected) — for at least the retention period required by the jurisdictions where the service occurred. For California waste-hauler records this is typically 3 years. We may keep aggregated, de-identified figures indefinitely.
• Location history (drivers) — the full point-level trail is retained for 90 days for route-audit and safety reasons, then reduced to a per-stop summary.
• App logs — 30 days for crash and error data.

If you delete your account we delete or de-identify your data according to the schedule above, keeping only what we need to meet our legal obligations.

6. Your rights

Depending on where you live you may have some or all of the following rights. You can exercise any of them by emailing us at erykah@eklean.com (cc it@eklean.com) — we will respond within 30 days.

• Access — get a copy of the information we hold about you.
• Correction — fix anything that's wrong.
• Deletion — have your account and associated personal data deleted, subject to the retention rules above.
• Data portability — receive your data in a machine-readable format.
• Opt out of “sale” or “sharing” for targeted advertising — we don't do either, so there is nothing to opt out of. This notice is included so California residents know this explicitly under the CCPA/CPRA.
• Withdraw consent — where we rely on consent (e.g., background location), you can revoke permission from your device settings at any time. Some app features will stop working if you do.
• Lodge a complaint with your local data protection authority.

We do not discriminate against anyone for exercising these rights.

7. Children

The EKGO apps are business tools for adult restaurant operators, drivers, and administrators. We do not knowingly collect information from anyone under 13 (or 16 in jurisdictions where that applies). If you believe we have, email us and we will delete it.

8. Security

• Traffic to our servers is encrypted in transit (TLS).
• Passwords are hashed by our authentication provider (Supabase) and are never stored or visible to us in readable form.
• Access to production data is role-restricted and logged.
• Photos and manifests live in access-controlled storage.

No internet-connected system is perfectly secure. If we learn of a breach affecting your data we will notify you without undue delay.

9. International users

Our servers are in the United States. If you use the apps from outside the United States, your information will be transferred to and processed in the United States, which may have data-protection laws that differ from the laws where you live.

10. Changes to this policy

If we make material changes we will update the “Last updated” date above and, for meaningful changes, notify you in-app or by email before the change takes effect.

11. Contact us