Effective Date: July 20, 2026 | Last Updated: September 22, 2026
HeyTruk helps food-truck fans find the trucks they love and helps trucks reach the people nearby who want to visit them. Doing that well means handling some personal information — mostly your contact details and your location. This Policy explains what we collect, why, who we share it with, and the choices you have.
Wuforia LLC, doing business as "Snackery Labs," a New Jersey limited liability company ("we," "us," "our," or "Company"), respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, share, and protect your information when you use the HeyTruk mobile applications, the HeyTruk Manager web dashboard, and the heytruk.com website (collectively, the "Service").
By using the Service, you consent to the collection and use of your information as described in this Policy. If you do not agree, do not use the Service. This Policy should be read together with our Terms of Use.
The data controller for your personal information is Wuforia LLC (dba Snackery Labs), New Jersey, United States. Email: privacy@heytruk.com. A postal address is available on request.
HeyTruk has two kinds of users — Fans (people discovering trucks) and Operators (people who run or represent a truck). We collect somewhat different information for each.
Location is central to the Service:
If we offer paid features (such as a supporter subscription, tips, or Operator plans), purchases are handled by the Apple App Store or Google Play. We do not collect or store your payment card number. We may receive a purchase or subscription status and a store transaction identifier to validate your entitlement.
To detect and prevent fraud, abuse, and unauthorized access; to review reported Content and enforce our Terms of Use; and to protect our users and the public. Automated signals (such as rate limiting and abuse detection) are reviewed by humans before they result in account actions.
To understand usage in aggregate, fix bugs, and design new features.
To comply with applicable law, respond to valid legal process, and maintain required records.
We may feature publicly displayed Truck information — a Truck's name, logo, cover photo, menu highlights, and Deals — in marketing for the Service itself (for example, our social media and website), as described in our Terms of Use. We do not sell or sublicense it for third-party marketing, and Operators may opt out by emailing privacy@heytruk.com. We do not use an individual Fan's identity in advertising without consent.
We share limited information with providers who help us run the Service, each bound to protect it and use it only as we instruct:
| Provider | Data | Purpose |
|---|---|---|
| Railway | Account data, content, location, media, logs | Application hosting and database (PostgreSQL/PostGIS) |
| Vercel | Web request data, IP address | Hosting for the HeyTruk Manager web dashboard and website |
| Resend | Operator email address, message content | Sending one-time codes and Service emails to Operators |
| Resend | Waitlist email address, neighborhood, and for businesses the business type and Instagram handle | Sending waitlist, launch and promotional emails |
| Twilio Inc. | Fan phone number, one-time code | Delivering one-time SMS verification codes to Fans (Twilio Verify) |
| OpenStreetMap (Nominatim) & Photon / komoot | Search text and coordinates. No account identifiers. | Geocoding and location search |
| Apple Maps & CARTO | Coordinates and map viewport | Map rendering in the apps and Manager |
| Anthropic (Claude) | Menu text/images or schedule text an Operator submits. No account identifiers. | Structuring imported menus and schedules |
| Square (optional) | Operator's Square merchant/catalog data, on connect | Importing a menu when an Operator connects Square |
| Apple / Google (app stores) | Purchase and subscription status, store transaction IDs | In-app purchases and subscriptions, if offered |
We keep this list current and will notify users of material changes through the Service.
We may disclose information when required or permitted by law — in response to valid legal process, to comply with regulation, to protect the rights, property, or safety of the Company, our users, or the public, or to prevent fraud, abuse, or illegal activity.
In a merger, acquisition, or sale of assets, your information may transfer to the successor entity, subject to this Policy. We will notify you of any such transfer.
We do not sell, rent, or trade your personal information, and we do not "share" it for cross-context behavioral advertising as defined by the CCPA/CPRA.
| Data type | Retention |
|---|---|
| Account & profile data | Until Account deletion |
| Ratings, reviews, saves, Deal claims | Until you delete them or your Account (delivered/aggregate signals shown to Operators may persist in their analytics) |
| Live-location broadcasts | Retained briefly for operation and analytics, then aggregated or deleted |
| Saved Radar locations & schedule pins | Until you delete them or your Account |
| Usage & error analytics | Aggregated/de-identified; retained for business analysis |
| Purchase/subscription records | As needed for tax, accounting, and legal compliance |
| Consent records | Retained for legal compliance |
When you delete your Account (Settings → in the app), most personal data is deleted promptly; some data may persist briefly in encrypted backups, and certain records are retained where required by law or to resolve disputes. Ratings you left may remain in a Truck's aggregate score in de-identified form. You can also request a copy of your data in the app before deleting.
We use industry-standard measures to protect your data, including encryption in transit (TLS) and at rest via our hosting providers, access controls limiting data to authorized systems and personnel, and automated monitoring for anomalous activity. No system is completely secure, so we cannot guarantee absolute protection. In the event of a data breach affecting your personal information, we will investigate and contain it promptly, notify affected users without unreasonable delay, and notify supervisory authorities within the timeframes required by applicable law.
Wherever you live, you may request to exercise the following rights, and we will honor them to the extent required by applicable law: access a copy of your data; correct inaccurate data; delete your data; obtain a portable copy; restrict or object to certain processing; and withdraw consent where processing is based on consent. We will not discriminate against you for exercising these rights.
To exercise any right, contact privacy@heytruk.com. We will respond within 30 days (or sooner if required by law) and may need to verify your identity first.
The Service is not directed to children under 13, and Operators must be at least 18. We do not knowingly collect personal information from anyone under 13 (or the higher minimum age required by your local law). We comply with the Children's Online Privacy Protection Act (COPPA) and similar laws. If we learn that a user under the applicable minimum age has created an Account, we will promptly terminate it and delete the associated data. Parents or guardians who believe their child provided us information should contact privacy@heytruk.com.
If you are a California resident, you have the right to know what personal information we collect, use, and disclose; to delete it; to correct it; to opt out of sale/sharing (we do not sell or share personal information for cross-context behavioral advertising, so no opt-out is needed); to limit the use of sensitive personal information; and to non-discrimination for exercising your rights. We respond to verifiable requests within the time the statute allows.
Sensitive personal information. Under the CPRA, precise geolocation is "sensitive personal information." We collect it solely to provide core Service functionality (showing nearby trucks, proximity alerts, and operator go-live). We do not use it for profiling or advertising. You may limit its use through your device and in-app location settings.
| Category | Examples | Collected? |
|---|---|---|
| Identifiers | Phone number (Fans), email (Operators), device ID | Yes |
| Commercial information | Deal claims; purchase/subscription status | Yes |
| Internet/network activity | App usage, IP address, error signals | Yes |
| Geolocation data | Precise and coarse location | Yes |
| Sensory data | Photos you upload | Yes |
| Inferences | Cuisine/venue preferences | Yes (limited) |
| Biometric data | — | No |
| Financial information | Card numbers | No (handled by the app stores) |
If you are a resident of a U.S. state with a comprehensive consumer privacy law — including New Jersey, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, New Hampshire, Tennessee, or others — you may have rights similar to those in §7.2, including to access, correct, delete, and obtain a portable copy of your data, and, where applicable, to opt out of targeted advertising, sale, and certain profiling. We do not sell personal data, serve targeted advertising based on personal data, or conduct profiling with legal or similarly significant effects. To exercise your rights, email privacy@heytruk.com.
HeyTruk is operated from the United States, and your information is stored and processed in the United States. If you use the Service from outside the U.S., you consent to that transfer.
If you are located in the European Economic Area or the United Kingdom, our legal bases for processing are: performance of a contract (providing the Service, including account creation, discovery, and alerts); consent (precise location, which you can withdraw at any time through device settings); legitimate interests (security, fraud prevention, and improving the Service); and legal obligation (compliance and record-keeping). You have the rights described in §7.2 and the right to lodge a complaint with your national supervisory authority (in the UK, the Information Commissioner's Office). To exercise your rights or raise a concern, contact privacy@heytruk.com.
We may update this Policy from time to time. We will notify you of material changes through in-app notifications or by email. Continued use of the Service after notification constitutes acceptance of the updated Policy. If you do not agree, you must stop using the Service and delete your Account.
For privacy questions, data requests, or to exercise your rights, contact us at privacy@heytruk.com. We respond within 30 days (or sooner if required by law). A postal address is available on request.
By using HeyTruk, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your information as described here.
HeyTruk · Privacy Policy · Terms of Use