Privacy policy
Last updated: 22 July 2026
This policy explains what the Kush Cooks app and website collect, why, and what you can do about it. It covers the Kush Cooks mobile app for iOS and Android and the Kush Cooks online store at kushcooks.com.
Kush Cooks is operated by **Kush Cooks LLC**, a Georgia limited liability company ("Kush Cooks", "we", "us"). If you have a question about anything here, email kushcooksllc@gmail.com — a person reads that inbox.
## The short version
We collect your name, email address, and your order history — because we can't cook you a meal and hand it to you at pickup without knowing who you are and what you ordered. We don't sell your data, we don't share it with advertisers, and we don't track you across other apps or websites. We don't handle your card details at all; our payment processor does that.
## What we collect
Your account details — name and email address. When you sign in, you do so through Shopify's hosted login using a one-time code sent to your email. We receive your name and email address from your Shopify customer account. We never see or store a password, because there isn't one.
Your orders. The meals you ordered, the amount you paid, your chosen pickup day and time, and the status of the order. This is what powers the Orders tab, order confirmations, pickup reminders, and the guarantee.
What you tell us directly. If you email us — a support question, a guarantee claim, an account deletion request — we keep that message and our reply.
Your dietary preferences. The dietary filters you set in Profile are saved on your device only. They are used to sort and filter the menu on your phone. They are not sent to us and we cannot see them.
## What we do not collect
- Your payment card details. Checkout happens on Shopify's secure hosted checkout page. Your card information goes to the payment processor, not to us. We only ever see that an order was paid, and the amount.
- Your location. The app never requests or uses location data.
- Your contacts, photos, camera, microphone, or health data.
- Advertising identifiers. We do not use the iOS advertising identifier (IDFA) or any
equivalent, and the app contains no advertising or analytics SDKs.
- Tracking data. We do not track you across other companies' apps or websites, we do not build advertising profiles, and we do not share your data with data brokers.
## How your information is stored
Your account session is stored on your device in the iOS Keychain or Android Keystore — the operating system's encrypted credential storage — and is available only when your device is unlocked. Signing out removes it, along with your cart and locally saved orders, so a device you hand to someone else keeps nothing of yours.
All communication between the app and our systems uses encrypted HTTPS connections.
## Notifications
If you switch on pickup reminders, the app schedules a reminder locally on your device using your operating system's notification system. The reminder never leaves your phone — we are not sent a push token and we cannot send you a notification. Turn them off any time in Profile, or in your device's system settings.
## Who we share information with
We do not sell your personal information. We share it only with the service providers who make the app work, and only so they can do that work for us:
| Provider | What they handle | Their policy |
| --- | --- | --- |
| Shopify Inc. | Our store, product catalog, customer accounts, and hosted checkout. Your account and order records live in Shopify. | shopify.com/legal/privacy |
| Shopify Payments (via Shopify Checkout) | Processing your card payment. Your card details go to Shopify Payments directly; we never receive or store them. | shopify.com/legal/privacy |
| Sentry (Functional Software, Inc.) | Crash and error diagnostics, so we can find and fix bugs. Reports carry technical details of the failure — your device model, OS version, and app state — but we configure Sentry so they never include your name, email, order contents, or card details. | sentry.io/privacy |
| Apple / Google | Distributing the app. They may collect their own data under their own policies. | apple.com/legal/privacy · policies.google.com/privacy |
We may also disclose information if we are legally required to — a court order, a tax
audit, or a law enforcement request we're obliged to honour.
## Crash and error reports
When the app hits an unexpected error or crashes, it sends a diagnostic report to Sentry, our error-monitoring provider, so we can fix the problem. These reports describe the failure and the device it happened on — your device model, operating system version, and the app's state at the time — but they do not contain your name, email, order details, or card information. We turn off Sentry's collection of personal data, and we strip out any login or payment tokens before a report is sent. We do not use these reports to identify or track you, and Sentry acts only as our processor.
## How long we keep it
We keep your account details for as long as you have an account. When you delete your account, we delete your personal details within 30 days.
Records of completed orders are kept longer, because tax and business records law requires it — generally up to seven years under IRS and Georgia Department of Revenue rules. Those retained records are kept for that legal purpose only, and are not used to market to you.
## Your choices and rights
Delete your account. Profile → Delete account. This sends us a deletion request and signs you out on that device immediately. We action it within 30 days. (Shopify has no self-serve customer delete, and order records tied to your account must be retained for tax purposes — so we do the deletion by hand rather than pretend it's instant.)
Access or correct your information. Email kushcooksllc@gmail.com and we'll send you a copy of what we hold, or correct it.
Turn off reminders. Profile → Notifications, or your device settings.
Sign out. Profile → Log Out. This clears your session, cart, and saved orders from the device.
Depending on where you live, you may have additional rights — to a portable copy of your data, to object to certain processing, or to complain to a privacy regulator. Residents of the EU/UK (GDPR), California (CCPA/CPRA), and Canada (PIPEDA) have these rights; we honor requests from anyone who asks, regardless of where they live. Email kushcooksllc@gmail.com and we'll act within 30 days.
We will never charge you a different price or give you a worse service for exercising any of these rights.
## Legal basis for processing (EU/UK visitors)
We process your name, email, and order history to perform our contract with you — to take and fulfil your order. We keep completed order records to comply with a legal obligation (tax and accounting law). We rely on your consent for pickup reminders, which you give by switching them on and withdraw by switching them off.
## Children
Kush Cooks is not directed at children, and we do not knowingly collect personal
information from anyone under 13 (or under 16 in the EU/UK). If you believe a child has given us their information, email kushcooksllc@gmail.com and we'll delete it.
## Where your information is processed
We operate from Georgia, USA. Our service providers, including Shopify, may store and process your information on servers in other states or outside the United States. Where that happens, the information remains protected by this policy and by the contractual terms we have with those providers.
## Changes to this policy
If we change how we handle your information, we'll update this page and change the "last updated" date at the top. If the change is significant — new data collected, a new provider receiving it — we'll tell you in the app or by email before it takes effect.
## Contact us
Email: kushcooksllc@gmail.com
Operated by: Kush Cooks LLC
Address: 3300 Marjan Dr, Atlanta, GA 30340, USA
If you're not satisfied with how we've handled a privacy question, you can complain to the Georgia Attorney General's Consumer Protection Division (consumer.georgia.gov) or the U.S. Federal Trade Commission (reportfraud.ftc.gov).