Privacy Policy

Effective Date: April 1, 2026 · Last Updated: April 1, 2026

KIMCO LLC, doing business as DonutDash (“DonutDash,” “we,” “us,” or “our”), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the DonutDash website (donutdash.app), mobile application, and related services (collectively, the “Platform”).

1. Information We Collect

We collect the following types of information:

Information You Provide:

• Account information: Name, email address, phone number, and password.
• Delivery information: Street address, apartment or unit number, and delivery instructions.
• Payment information: Credit or debit card details, processed securely through Square. We do not store your full card number on our servers.
• Profile information: Profile photos, preferences, and dietary notes.
• Communications: Messages you send through the Platform, customer support inquiries, and feedback.

Information Collected Automatically:

• Location data: GPS coordinates from your device (with your permission) used for delivery address suggestions and driver tracking.
• Device information: Browser type, operating system, device identifiers, and IP address.
• Usage data: Pages visited, features used, order history, and interaction patterns.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Process orders: To facilitate ordering, payment processing, and order fulfillment.
• Delivery coordination: To connect customers with drivers and provide real-time delivery tracking.
• Communications: To send order confirmations, delivery updates, promotional offers, and customer support responses via email (Resend) and SMS (Twilio).
• Platform improvement: To analyze usage patterns, improve our services, and develop new features.
• Safety and security: To detect and prevent fraud, abuse, and unauthorized access.
• Legal compliance: To comply with applicable laws, regulations, and legal processes.

3. Information Sharing

We share your information with the following parties as necessary to operate the Platform:

• Donut shops: Your name, order details, and delivery address are shared with shops to prepare and fulfill your orders.
• Delivery drivers: Your name, delivery address, phone number, and delivery instructions are shared with drivers to complete deliveries.
• Square: Payment information is shared with Square for secure payment processing.
• Twilio: Your phone number is shared with Twilio to send SMS notifications about your orders.
• Resend: Your email address is shared with Resend for transactional and marketing email delivery.
• Analytics providers: Anonymized usage data may be shared with analytics services to improve the Platform.

We do not sell your personal information to third parties. We may disclose your information if required by law, court order, or governmental regulation, or if necessary to protect our rights, property, or safety.

4. Location Data

We collect and use location data in the following ways:

• Customers: With your permission, we use your device’s GPS to suggest delivery addresses and show nearby shops.
• Drivers: GPS tracking is used during active deliveries to provide real-time location updates to customers and to optimize delivery routes. Driver location is only tracked and shared while a delivery is in progress.

You can disable location services through your device settings, though this may affect certain Platform features.

5. Cookies and Tracking

We use cookies and similar tracking technologies to:

• Keep you signed in to your account.
• Remember your preferences and cart contents.
• Analyze Platform usage and performance.
• Deliver relevant promotional content.

You can control cookies through your browser settings. Disabling cookies may limit your ability to use certain features of the Platform.

6. Data Security

We implement industry-standard security measures to protect your personal information, including encryption of data in transit (TLS/SSL), secure password hashing, and access controls. Payment information is processed through Square’s PCI-compliant infrastructure and is not stored on our servers.

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but will notify affected users in the event of a data breach as required by applicable law.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. Order history and transaction records are retained for a minimum of seven (7) years for tax and legal compliance purposes. If you request account deletion, we will delete or anonymize your personal information within 30 days, except where retention is required by law.

8. Your Rights

You have the following rights regarding your personal information:

• Access: You may request a copy of the personal information we hold about you.
• Correction: You may update or correct inaccurate information through your account settings or by contacting us.
• Deletion: You may request deletion of your account and associated personal information.
• Opt-out: You may opt out of marketing communications at any time by using the unsubscribe link in our emails or contacting us.

To exercise any of these rights, please contact us at support@donutdash.app. We will respond to your request within 30 days.

9. Children’s Privacy

The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected information from a child under 18, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us at support@donutdash.app.

10. California and Texas Privacy Rights

California Residents: Under the California Consumer Privacy Act (CCPA), California residents have additional rights, including the right to know what personal information is collected, the right to request deletion, and the right to opt out of the sale of personal information. As stated above, we do not sell personal information. To exercise your CCPA rights, contact us at support@donutdash.app.

Texas Residents: Under the Texas Data Privacy and Security Act (TDPSA), Texas residents have the right to access, correct, delete, and obtain a copy of their personal data, as well as the right to opt out of targeted advertising and the sale of personal data. To exercise these rights, contact us at support@donutdash.app. We will respond within 45 days.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the “Last Updated” date at the top of this page. For significant changes, we may also notify you by email or through a notice on the Platform. Your continued use of the Platform after changes are posted constitutes your acceptance of the updated policy.

12. Contact Information

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:

KIMCO LLC (d/b/a DonutDash)
Tyler, Texas
Website: donutdash.app
Email: support@donutdash.app