Privacy Policy

PlumRun Delivery LLC, doing business as PlumRun, provides grocery shopping and local delivery services through the PlumRun Android app and associated services. This policy explains how we handle personal information in connection with those services.

Personal information is information that identifies you or can reasonably be linked to you. External websites and services have their own privacy practices; this policy describes PlumRun's handling of information and the service providers we use.

Effective date: October 17, 2026
Last reviewed: October 17, 2026

Technical and Security Information

Our app and service providers process technical information needed to operate and secure the service. Cloudflare Turnstile processes IP addresses, browser and device characteristics, and security-verification signals to help distinguish people from bots and prevent abuse. Our server uses request information to limit repeated sign-in attempts.

We record order actions and timestamps to maintain order history, coordinate shopping and delivery, and resolve issues. These records may be associated with your account. We do not use an advertising or general visitor-analytics service in the current app.

Camera, Photos and Device Information

The app uses the camera and user-selected photographs for barcode scanning, receipt capture, item evidence and delivery evidence. On-device Google ML Kit supports barcode and receipt text recognition.

When a feature needs camera or photo access, we use device permission and selection controls as applicable. Technical information sent through ordinary network requests and security checks is processed separately from camera or photo permissions.

Optional Foreground Delivery Location

The assigned shopper can explicitly turn on location sharing during an active delivery in PlumRun Shopper. After the shopper grants device location permission, the app sends the shopper's latitude, longitude, device-reported accuracy and capture time while that delivery screen is active in the foreground. Location updates pause when the app goes into the background. They can resume when the shopper returns to the active delivery screen while sharing remains enabled. Closing that screen, turning sharing off, or confirming arrival or delivery stops sharing. The latest fix may remain visible until a stop request reaches the service or the fix expires, as described below. This feature does not request or collect the customer's device GPS location. Customer-provided delivery addresses may still be converted temporarily into coordinates for service-area checks. Run mileage is entered manually.

The delivery-tracking service holds only the latest fix for each order in temporary server memory, rather than storing a GPS route in order or run history. A fix is available only while it is less than 120 seconds old and the delivery is active before arrival; it is then withheld and discarded. Closing sharing clears the server copy when the stop request reaches the service. If that request cannot be delivered, the latest fix expires within 120 seconds of its capture. The authenticated customer for that order and its assigned shopper can retrieve a current fix. Other customers and unassigned shoppers cannot retrieve it. An optional arrival estimate is entered by the shopper; it is not a calculated route or guaranteed arrival time.

Optional External Maps

When the customer chooses View shopper location, the Android app opens an external Google Maps link containing the shopper's latest shared coordinates. Map directions links likewise open an external mapping service when selected. The mapping provider receives the coordinates or destination in that link and ordinary connection information under its own privacy practices. Opening a map is optional; it does not grant PlumRun access to the customer's device GPS location. The associated website offers an embedded OpenStreetMap delivery map only after the customer chooses Show delivery map; that provider receives the requested map area and shopper coordinates and ordinary browser request information. See the OpenStreetMap Foundation Privacy Policy.

Order Messages and User Content

PlumRun accepts private order messages, receipt and item photographs, delivery evidence, issue reports and ratings. This content is associated with the relevant account or order and is used for shopping, delivery, customer support, security and dispute resolution.

Submitting order content does not make it a public post or authorize its use in advertising or social media. Relevant order participants and service providers may access it as needed to provide and support the service. We may also disclose it when required by law or to protect legal rights.

Collection and Use of Information

We collect information when you register or sign in; browse stores or products; place or manage an order; provide delivery details; exchange order messages or respond to substitutions; submit receipts, photographs, ratings or issue reports; use shopping, delivery or run-summary features; or contact admin@plumrun.shop.

We use it to provide account access, coordinate grocery shopping and delivery, process payment references, communicate about orders, maintain transaction records, resolve issues, meet applicable legal obligations, and secure the service against fraud and abuse.

We associate account information with the relevant order, messages, photographs, payment references and workflow records. Customer-provided delivery addresses may be checked through the U.S. Census address lookup service. Current practice orders use Stripe sandbox checkout and do not collect real payments.

How Long We Keep Your Personal Information

Optional live delivery location is an exception to the durable order records described below: the tracking service keeps only the latest fix in temporary memory, makes it unavailable once it is 120 seconds old, and does not store a GPS route in order or run history. A newer fix replaces the previous one; arrival, stopping sharing or the end of active delivery also ends its availability.

Retention depends on the information and its purpose, including account operation, order fulfilment, customer support, payment and accounting records, security, and legal obligations or disputes. We do not currently apply one automatic deletion period to all account, order, message and photograph records.

Contact admin@plumrun.shop to request access, correction or deletion. We review requests after verifying identity, subject to applicable law and any lawful need to retain records. The app currently has no self-service account-deletion control. Expiration of a temporary photograph link does not delete the underlying image.

Disclosure of Personal Information to Third Parties

Information may be made available to the relevant customer and assigned shopper as needed for shopping, communication, delivery and issue resolution; personnel and contractors who operate or support the service; and hosting, database, storage, security, catalog, payment and address-lookup providers for their respective services.

Providers include Spaceship Hyperlift (hosting), Turso (database), Cloudflare (Turnstile security and private R2 image storage), Kroger (store and product catalog), the U.S. Census Geocoder (address lookup), and Stripe (hosted checkout). Google ML Kit performs on-device barcode and receipt recognition. Optional Google Maps links open an external service. OpenStreetMap provides the website delivery map only when the customer chooses to display it. The information each provider receives depends on the feature used; not every provider receives every data category.

Stripe handles card entry through hosted checkout. PlumRun stores payment references, status and amounts, not full card numbers. Current practice checkout uses Stripe test mode.

Disclosure may also occur where required by applicable law or necessary to establish, exercise or defend legal rights, or to a successor in a business transfer subject to applicable law. Service providers may process information in the United States and other locations where they operate.

Your Rights and Controlling Your Personal Information

Contact admin@plumrun.shop with privacy questions or to request access, correction or deletion of personal information. Depending on applicable law, you may also have rights to a copy of your information, objections, restrictions, withdrawal of consent, or an appeal of a decision.

We may request information reasonably needed to verify identity and understand a request. Requests are handled under applicable legal requirements and exceptions, including lawful record-retention obligations. The current product has no self-service account-deletion feature.

We do not use advertising or email-newsletter services in the current product. Private order content is not provided for advertising or unrelated marketing use. We do not discriminate against users for exercising applicable privacy rights. You may contact a relevant regulator about a privacy complaint.

We will follow applicable requirements for security incidents and material changes in how information is used.

App Storage and External Browser Services

The Android app stores sign-in information, appearance preferences, practice-order information and selected image files on the device. Hosted security-verification pages and external Stripe checkout may use browser cookies or storage under their respective notices.

See our Cookie and Local Storage Policy for information about the website. The current app does not use advertising or general visitor-analytics integrations.

Additional U.S. State Privacy Disclosures

These additional provisions apply only to the extent the relevant state law applies to PlumRun, the individual and the processing activity. Listing a right does not mean every state privacy law applies to every user or activity. Nothing here removes rights under applicable law.

Categories of Information Collected

Where a state privacy law applies, the relevant categories used by PlumRun include:

• Identifiers: name, email, account identifiers and IP address.

• Customer and order records: delivery address, instructions, payment status and transaction references. Stripe processes payment details through hosted checkout.

• Commercial information: grocery orders, purchase history, quantities, prices, fees and tips.

• Visual information: receipt, item and delivery photographs.

• Location information: customer-provided delivery addresses, temporary coordinates derived from those addresses, and optional recent foreground location fixes from the assigned shopper during an active delivery. GPS routes are not stored in order or run history.

• Order messages, issue reports, ratings and manually entered run information.

Sources and purposes are described above. Categories describe the information relevant to features you use; they do not mean we directly collect full card numbers, government identifiers or every type of data listed in a statute.

Access, Correction and Deletion Requests

Where applicable law provides these rights, you may request categories and specific pieces of information held about you; their sources, purposes and recipients; correction; deletion; and a portable copy. You may also have rights concerning sale, sharing, targeted advertising or certain profiling, and the right to appeal a privacy-request decision.

Send requests to admin@plumrun.shop. We may verify identity and apply lawful exceptions. Provide your account email and enough detail for us to understand the request; do not send passwords, full card numbers or unnecessary identity documents.

California Marketing Information Requests

Where California Civil Code section 1798.83 applies, California residents may request information about disclosures of covered personal information to other organizations for their own direct marketing. Contact admin@plumrun.shop with a privacy-information request.