Privacy Policy
What we collect, why, who we share it with and the choices you have. We don't sell your personal information.
This is the plain-language version. The full legal text is being finalized with our lawyers; where the two differ, the signed full text applies.
Who we are
You Can Do Inc. runs YCD Eats and is responsible for the personal information described here. Our address is [to be confirmed]. For privacy questions, write to privacy@eatsycd.com.
What we collect from customers
Identifiers such as your name, phone number and email. Delivery addresses and instructions. Your device's location, only if you allow it. Order history, reviews and wallet activity. Payment tokens from Stripe, plus the card's brand and last four digits (never the full number). Chat messages with couriers and support. Device and log data, such as device type, browser, app version and IP address.
What we collect from couriers
The same account details, plus images of your driver's license or state ID, a selfie, proof of auto insurance if you drive a car, the result of your background check, and your bank account for payouts, which we store encrypted. We collect your precise location only while you are online or on a delivery.
Why we use it
To take and deliver orders, handle payments and refunds, send sign-in codes, receipts and order updates, give support, verify couriers, keep the platform safe and prevent fraud, and meet our legal and tax duties. We send promotions only if you turn them on in Account → Settings.
Who we share it with
Only what each party needs. The restaurant gets your order and your name. The courier gets your first name, the delivery address and your instructions. Service providers for payments, email, maps, hosting and background checks process data for us under contract. We disclose information to authorities when the law requires it.
One account across our apps
YCD Eats, YouCanDo and YCD Marketplace are all run by You Can Do Inc. and share one account. When you switch between them, we pass along your name, phone number, email and language so you don't have to sign up again.
No selling, no ad tracking
We don't sell personal information and don't share it for cross-context behavioral advertising. We honor the Global Privacy Control signal. Sensitive personal information, such as precise location and driver's license details, is used only to provide the service.
Your rights
Depending on where you live, including California (CCPA/CPRA) and other states with consumer privacy laws, you have the right to: know what we collect and access it; get a copy in a portable format; correct it; delete it; opt out of the sale or sharing of your information; limit the use of sensitive personal information; and appeal if we turn down your request. We won't treat you differently for using these rights.
How to make a request
Download your data or delete your account in Account → Settings, or write to privacy@eatsycd.com. We verify your identity before we act on a request. An authorized agent can make a request for you. Your Privacy Choices explains opt-outs, agents and appeals.
How long we keep it
Order and payment records: as long as tax and accounting law requires, generally 7 years. Other account data: deleted within 30 days after you ask us to delete your account, unless the law requires us to keep it.
Security
We encrypt data in transit, encrypt sensitive fields at rest, and give staff only the access their job needs.
Children
Accounts are for people 18 and older. YCD Eats is not directed at children under 13, and we don't knowingly collect their personal information.
Changes
If we change this policy in a way that matters, we tell you in the app before the change applies.