NIBBLS INC

Privacy Policy

Last Updated: July 6, 2026

1. INTRODUCTION AND SCOPE

1.1 About This Policy

This Privacy Policy explains how NIBBLS INC ("NIBBLS," "we," "us," or "our") collects, uses, shares, and protects personal information when you use the NIBBLS platform, including our website at nibbls.app, our mobile applications, and related services (together, the "Service"). It applies to Diners, Restaurants, Creators, and visitors who use the Service.

1.2 What This Policy Does Not Cover

This Policy does not cover the practices of Restaurants, payment processors, or other third parties that operate their own services, and it does not cover any site or service that has its own privacy policy. Your use of the Service is also governed by our Terms of Service.

1.3 Effective Date

This Policy is effective as of July 6, 2026.

2. WHO THIS POLICY COVERS

2.1 User Roles

The Service connects three groups of users. Diners browse and order food. Restaurants list menus and fulfill orders. Creators post food-related video content and may earn commissions when their content drives orders. The information we collect and how we use it depends in part on your role.

2.2 How Roles Affect This Policy

Where a practice applies only to a particular role, we say so. Otherwise, the practice applies generally to users of the Service.

3. INFORMATION WE COLLECT

3.1 Account and Contact Information

Name, email address, phone number, username, password, and similar details you provide when you create or manage an account.

3.2 Order Information

The restaurants and items you order, order history, pickup or delivery details, special instructions, and related communications.

3.3 Payment Information

Limited payment details needed to process a transaction, such as payment tokens, the type of payment method, and transaction status. We do not store full payment card numbers. See Section 8 for more on payments.

3.4 Creator Information

For Creators, profile details, social handles, the content you post, attribution links or codes, performance data, and payout and tax information needed to pay commissions.

3.5 Restaurant Information

For Restaurants, business contact details, representative information, menu and order data, and information from point-of-sale integrations.

3.6 Public Content

Videos, captions, comments, profile information, and other content that users post through the Service.

3.7 Device and Usage Information

IP address, device identifiers, browser and app information, and information about how you interact with the Service, including attribution events that link content to orders.

3.8 Location Information

Approximate location and, with your permission, precise location, as described in Section 11.

3.9 Communications

Messages, support requests, survey responses, and related records when you contact us or we contact you.

3.10 Sensitive Information

We do not seek to collect sensitive information beyond what is needed to operate the Service. We treat precise location and account credentials as sensitive and handle them accordingly.

4. SOURCES OF INFORMATION

We collect information directly from you when you use the Service, automatically through your device and our technologies, and from third parties such as Restaurants, point-of-sale providers, payment and payout processors, analytics providers, and, where you connect them, social platforms.

5. HOW WE USE INFORMATION

5.1 Operating the Service

To create and manage accounts, display menus, process and fulfill orders, sync restaurant point-of-sale systems, and enable content and discovery.

5.2 Payments and Payouts

To process Diner payments and to calculate and pay Creator commissions.

5.3 Attribution

To determine whether a Creator's content drove an order, calculate commissions, and report performance.

5.4 Safety and Fraud Prevention

To verify users, detect and prevent fraud and abuse, and protect the Service and its users.

5.5 Support and Communications

To respond to your requests and send transactional messages about your account and orders.

5.6 Analytics and Improvement

To understand how the Service is used and to improve it.

5.7 Marketing

To send promotional messages, subject to your choices and applicable law.

5.8 Legal and Compliance

To comply with law, enforce our terms, and establish or defend legal claims.

6. HOW WE SHARE INFORMATION

6.1 Restaurants

When you place an Order, we share the information the Restaurant needs to prepare and fulfill it. If a third-party courier delivers your Order, we also share the details needed to complete the delivery. In New York City, we share order-customer information with the fulfilling Restaurant unless you tell us not to, as described in Section 14.

6.2 Creators

We share limited attribution and performance information with Creators so they can understand which content drove orders. We do not share your payment details with Creators.

6.3 Service Providers

We share information with vendors that perform services for us, such as hosting, payment and payout processing, point-of-sale integration, analytics, customer support, and fraud prevention. We require these providers by contract to keep the information confidential and to use it only to provide services to us.

6.4 Legal and Protective

We may disclose information to comply with law, respond to lawful requests, enforce our terms, or protect the rights, safety, and property of NIBBLS, our users, or others.

6.5 Business Transfers

We may disclose information in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy or a successor policy.

6.6 Professional Advisors

We may share information with our auditors, lawyers, and similar advisors as needed.

7. SALE, SHARING, AND TARGETED ADVERTISING

We do not sell your personal information for money. We do not share your personal information for cross-context behavioral advertising, and we do not use it to serve you targeted advertising across unaffiliated websites or apps. We use analytics providers to understand and improve the Service. Where the law gives you the right to opt out of certain sharing or targeted advertising, or requires us to honor browser or device signals such as Global Privacy Control, we will do so. If our practices change, we will update this Policy and provide the choices the law requires.

8. PAYMENTS

Payments and Creator payouts are processed by a third-party payment processor. When you pay or receive a payout, you provide payment details to the processor, and the processor handles that information under its own terms. We receive limited information such as payment tokens, payment type, transaction status, and information needed for refunds, payouts, fraud prevention, and tax reporting. We do not store full payment card numbers.

9. PUBLIC CONTENT AND ATTRIBUTION

9.1 Public Content

Content that Creators and Restaurants post, including videos, captions, profile details, and comments, is visible to others and may be promoted within the Service. Do not post anything you want to keep private or that you do not have permission from all visible persons or entities involved to post or share.

9.2 Attribution

We use links, codes, and interaction data to determine whether a Creator's content drove an order. We use this information to calculate commissions, detect fraud, and report performance.

10. COOKIES AND TRACKING TECHNOLOGIES

We and our providers use cookies and similar technologies to keep you signed in, remember your preferences, measure and analyze use of the Service, and support security and fraud prevention. You can control cookies through your browser or device settings, and where required we will present choices for non-essential technologies. Some features may not work properly if you disable certain cookies.

11. LOCATION INFORMATION

We use approximate location, such as from your IP address, to show nearby restaurants and relevant content. With your permission, we may use precise location from your device to improve discovery, support delivery or pickup, and help prevent fraud. You can turn off precise location in your device settings, though some features may be limited.

12. DATA RETENTION

We keep personal information for as long as needed to provide the Service and for the purposes described in this Policy. How long we keep information depends on the type of information and the reason we have it, including the life of your account, completing and recording transactions, resolving support issues, preventing fraud, and meeting legal, tax, and accounting obligations. When we no longer need information, we delete it or deidentify it, subject to backups and legal holds. We may create aggregated or deidentified information and use it for any lawful purpose. We keep that information deidentified and do not try to reidentify it.

13. SECURITY

We use reasonable administrative, technical, and physical safeguards designed to protect personal information, including access controls and encryption where appropriate. No method of storage or transmission is completely secure, so we cannot guarantee absolute security. If a security incident affects your information, we will notify you as required by law.

14. YOUR PRIVACY RIGHTS AND CHOICES

14.1 Your Choices

You can update your account information, adjust your device permissions, and unsubscribe from marketing messages using the link in those messages. Turning off marketing does not stop transactional messages about your account or orders.

14.2 New York City Order Data

If you order in New York City, you may ask us not to share your order-customer information with the fulfilling Restaurant by contacting us at the address in Section 19.

14.3 Rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to opt out of certain processing, to limit the use of sensitive information, and to appeal a decision on your request. Section 15 describes these rights further.

14.4 How to Exercise Rights

You can submit a request through the Service or by contacting us at the address in Section 19. We will verify your request using information associated with your account and respond within the time the law requires. You may use an authorized agent where the law allows, and we may take steps to confirm the agent's authority.

14.5 No Retaliation

We will not deny you service, charge you a different price, or provide a different level of service because you exercised your privacy rights, except as the law allows.

15. STATE-SPECIFIC RIGHTS

Some states give residents specific privacy rights. Depending on your state, these may include the right to know and access the personal information we hold about you, to correct or delete it, to obtain a portable copy, to opt out of the sale or sharing of personal information and of targeted advertising, to limit the use of sensitive personal information, and to appeal our response to a request. As described in Section 7, we do not sell personal information for money or use it for targeted advertising across unaffiliated sites. To exercise any right, use the channels in Section 14. If we deny your request, you may appeal by contacting us at the address in Section 19, and you may contact your state regulator if you are not satisfied.

16. CHILDREN'S PRIVACY

The Service is not directed to children under 13, and we do not knowingly collect their personal information. Diners must be at least 13, and if under 18 may use the Service only with the involvement of a parent or guardian. Creators and Restaurant account holders must be at least 18. If we learn that we have collected information from a child under 13, we will delete it. Parents and guardians may contact us at the address in Section 19.

17. INTERNATIONAL USERS

The Service is intended for users in the United States. If you access it from outside the United States, you understand that your information will be processed in the United States, where privacy laws may differ from those in your location.

18. CHANGES TO THIS POLICY

We may update this Policy from time to time. We will post the updated version, revise the effective date, and, where the changes are material, provide additional notice.

19. CONTACT US

30 East 37th Street, 3F

New York, NY 10016

Privacy: privacy@nibbls.app