App Privacy Policy

Effective September 7, 2026

The Original White Duck, LLC (“White Duck,” “we,” or “us”) operates the White Duck Espresso mobile ordering app. This policy covers the app and its supporting services. It does not replace the privacy notices for other businesses or services you use.

Information we use

• Account information: your mobile number, name, account identifiers, sign-in records, and preferences and consent choices.
• Orders and payments: items and options, stand, order times and status, transaction references, payment and refund amounts, and order history. Square processes payment details through its payment interface; our backend receives payment tokens and transaction references rather than your full card number.
• Optional Square linking: when you enable linking, we use relevant customer identifiers to connect your app profile to Square and retrieve available loyalty information.
• Technical information: information needed to operate and protect the service, such as IP addresses in server requests, session identifiers, request times, and error and operational logs.
• Support information: information you provide when you contact us.

Optional device location

If you allow location access, the app uses your foreground location on your device to sort nearby stands. This feature does not send your precise coordinates to our backend or track your location in the background. You can choose a stand manually and change location permission in your device settings. We do record the stand you select for an order.

How we use information

We use information to verify sign-in requests, maintain your account, take and fulfill orders, process refunds, provide loyalty features you enable, respond to support requests, prevent abuse, and improve reliability. We also use order and operational information for business reporting. Our separate reporting database uses internal customer identifiers instead of names and phone numbers; those identifiers should not be treated as fully anonymous.

SMS and consent

We use your phone number to send sign-in codes you request from +1 (833) 905-3825 through Twilio and mobile carriers. Requesting a code does not enroll you in marketing. Message frequency depends on your requests; message and data rates may apply. Reply STOP to opt out, START to resume, or HELP for assistance. You can also contact caffeine@whiteduck.es.

We do not sell or rent personal information. Mobile information, SMS opt-in data, and SMS consent are not shared with third parties or affiliates for their own marketing or promotional purposes. We share information with providers that help deliver the requested services, such as messaging delivery and hosting, only for those service purposes.

Who receives information

The LLC operating your selected location receives the information needed to sell and fulfill your order and provide support. The Original White Duck, LLC operates the app and owns these location companies.

Our staff and service providers receive information needed for their work. These include Square for payments and relevant order and loyalty services, Twilio and carriers for SMS delivery, and infrastructure providers for hosting and storage. These providers also have their own privacy notices. We may disclose information when required by law, to respond to valid legal requests, or to protect people and the service. If the business is transferred, relevant information may transfer with it subject to applicable law and privacy protections.

Retention and security

We retain information for as long as reasonably needed to provide the service, resolve disputes, prevent fraud, and meet accounting and legal obligations. Expired sign-in codes, sessions, and temporary processing records are periodically removed. Transaction records may remain after account deletion where needed for those purposes. We use access controls and other safeguards, but no storage or transmission method guarantees absolute security.

Your choices

You can update your name, manage available consent settings, sign out, and request account deletion in the app’s profile area. Deletion removes direct identifiers from the app profile and revokes app sessions and consent records; retained transaction records may still be subject to accounting, fraud-prevention, and legal requirements. Deleting your app account does not automatically delete records held by Square or Twilio. Contact us to request access, correction, deletion, or assistance with your information. We may need to verify your identity. Additional privacy rights may apply depending on where you live.

You can disable location access in device settings and opt out of SMS by replying STOP. Opting out of SMS prevents delivery of sign-in codes until you opt back in. Ordering at a stand remains available.

Children and policy updates

The app is not directed to children under 13. If you believe a child under 13 has provided personal information, contact us so we can investigate and address it. We will post policy changes here with an effective date and provide additional notice where required.

Contact

For privacy questions or requests, contact caffeine@whiteduck.es.