Legal
Privacy policy
TakeMe2theFood collects information to operate food festival and event platforms for organizers, vendors, and attendees. This policy explains what we collect, how we use it, and your choices.
Information we collect
Account information
When you create an account, we collect your email address and password. Vendors also provide a business name. Organizer applicants provide their name as part of the review process.
Children's profiles
When you add a child to your account, you may provide a first name, age, a physical description, and optionally a photo. Providing a name is optional. You may leave the name blank or use a nickname or a fictitious name if you prefer not to disclose your child's real name. We only ask for what is needed to help identify the child in a missing-child situation at an event.
This information is stored only within your account and is used solely for the missing-child safety feature. We do not share children's profile data with any third party for advertising or analytics purposes.
Location
Vendors may submit their on-site location when checking in at an event. Attendees who enable location access see a map of the event grounds. Location data is used only within the event context.
Device permissions
- Camera: used to scan QR codes at events and to take photos for child profiles.
- Location: used to show your position on the event map.
- Push notifications: used to send event updates, missing-child alerts, and safety notices. You can withdraw this permission at any time in your device settings.
Event activity
We record your event interactions, including ticket scans, loyalty point activity, vendor ratings, staff time entries, and wayfinding requests. This data is associated with your account and is used to run the event features you requested.
Payments
Payment processing is handled by Stripe. We do not store your card number or bank details. We receive a record of each transaction (amount, items, and date) from Stripe after it is completed.
Analytics and performance data
Both the marketing site and the app use Vercel Analytics and Vercel Speed Insights to track page visits and loading performance. This data does not include personally identifiable information and is used only to improve the platform.
Push notification identifiers
If you opt in to push notifications, OneSignal stores a device identifier. This identifier is used only to deliver notifications from TakeMe2theFood and is not shared for advertising.
How we use your information
- To create and manage your account.
- To run event check-in, ticketing, vendor discovery, and attendee engagement features.
- To send transactional emails such as ticket confirmations, account verification, and safety alerts.
- To support the missing-child broadcast when requested by an account holder at an active event. The broadcast shares only the information provided in the child's profile, which may include a name or label, age, physical description, and photo if one was added. No name is required.
- To improve the platform using aggregated, anonymized analytics.
Third parties we use
We share your information with the following service providers only as needed to operate the platform.
| Service | What they receive | Why |
|---|---|---|
| Supabase | Account credentials and all structured event data | Database and authentication |
| Stripe | Payment details entered during checkout | Payment processing |
| OneSignal | Device push identifiers | Push notifications |
| Mapbox | Map tile requests (no personal data sent) | Event maps and wayfinding |
| Vercel | Page visits and performance metrics | Hosting and analytics |
| Railway | Application requests | Backend hosting |
| Brevo | Email address and message content | Transactional email delivery |
We do not sell your information to any third party.
Children's information
Child profiles contain sensitive personal information. Because a name is optional, a profile may contain only a physical description and photo — no identifying name is required or stored if you choose not to provide one. This data is accessible only to the account holder who created the profile, and to event organizers solely for the purpose of missing-child coordination. Child data is not used for analytics or advertising and is not shared outside the event context. To delete a child profile or all related data, contact us at info@takeme2thefood.com.
Your choices
- Push notifications: turn them off at any time in your device settings.
- Account deletion: email info@takeme2thefood.com to request full account deletion, including all event records and children's data.
- Analytics: Vercel Analytics respects the browser Do Not Track setting where applicable.
Data retention
Account data is kept as long as your account is active. Event records (scans, tickets, and ratings) are kept for up to three years to support event reporting and dispute resolution. Child profiles are kept until you delete them or request account deletion.
Security
All data is transmitted over HTTPS. Account passwords are managed by Supabase using industry-standard hashing. Payment data is never stored on our servers.
Changes to this policy
If we make material changes, we will update the date at the top of this page and notify you by email at least 14 days before the changes take effect.
Contact
Questions about this policy can be sent to info@takeme2thefood.com.