Last updated: 19 June 2026
This Privacy Policy explains how TruckFestMap ("we," "our," or "us") collects, uses, shares, and protects personal data when you use our mobile application for iOS and Android, our website and business dashboard at truckfestmap.com and app.truckfestmap.com, and all related features and services (together, the "Service").
TruckFestMap is a platform that helps people discover food trucks, view their menus and locations, leave reviews, save favourites, and submit catering/event inquiries, while enabling food-truck owners and event organisers to publish and manage their listings. This Policy should be read together with our Terms and Conditions.
Privacy contact: privacy@truckfestmap.com. General contact: info@truckfestmap.com.
The Service has several types of users, and the data we process depends on your role:
Owner and Organiser roles are granted by invitation issued by an administrator.
Account & profile data: name; email address; password (stored only in hashed/encrypted form by our authentication provider); phone number (optional); profile picture/avatar (optional); short biography (optional); account role.
Food-truck owner / business content (where applicable): business/truck name, descriptions, and cuisine categories; menu items (names, descriptions, prices, photos); business contact details (phone, email, website); social media links; operating hours, address, and city; logos, cover photos, and gallery images; rental availability and settings.
Event organiser content (where applicable): event name, description, and type; dates, location, coordinates, city/region; pricing and accessibility/venue details; event images and contact information.
Inquiry data (when you submit a catering/event request): event title and description; number of people, date, and start/end time; location and city; budget (optional); contact name, contact phone number, and contact email; special requests and selected cuisine categories.
User-generated content: reviews and ratings (1–5 stars plus a written comment); menu item ratings; photos you upload; favourites you save.
Communications: messages exchanged through the Service (where the messaging feature is enabled for business users) and correspondence with our support team.
Location data: when you grant permission, your device’s approximate or precise location is used to show food trucks near you on the map. Location is used while the App is in use (foreground); the App does not track your location in the background. For food-truck owners who enable "live location," the truck’s GPS coordinates (latitude, longitude, and related accuracy/altitude/heading/speed values) are captured and published so customers can find the truck. Owners can turn live location off at any time.
Device & technical data: device type and operating system; app version and device identifiers; push notification token; basic network/connection information.
Usage data: features used, screens viewed, and searches performed; diagnostic, performance, and crash information.
Authentication providers: if you sign in with Google or Apple, we receive your name and email address (for Apple, a name only on first sign-in, or a private relay email if you choose to hide your address) and an authentication token. We do not receive your social account password.
Payment provider: for paid subscriptions, our payment processor (Stripe) provides subscription and billing status, Stripe customer/subscription identifiers, and limited billing details. We do not receive or store your full payment card number.
Under the EU General Data Protection Regulation (GDPR) and Lithuanian law, we rely on the following legal bases:
Where we rely on consent, you may withdraw it at any time (for example, by disabling location or notification permissions in your device settings). We do not use your personal data for third-party advertising, and we do not sell your personal data. The App blocks the advertising identifier (AD_ID) on Android and does not include third-party advertising trackers.
We use trusted third parties that process data on our behalf under data-processing terms: Supabase (authentication, database, file storage, real-time data); Cloudflare Images (hosting and delivery of uploaded images); Stripe (subscription payments and billing); Google Maps Platform (maps and location display); Google and Apple (optional social login); Expo / EAS (push notification delivery and app updates); Resend (transactional emails where enabled).
We may disclose personal data where necessary to comply with law, respond to lawful requests by public authorities, enforce our Terms, or protect the rights, property, or safety of TruckFestMap, our users, or the public.
If we are involved in a merger, acquisition, reorganisation, or sale of assets, personal data may be transferred as part of that transaction. We will notify you of any such change and any choices you may have.
Some of our processors (for example, Cloudflare, Stripe, Google, Apple, and Expo) are established in or operate from countries outside the European Economic Area (EEA), including the United States. Where personal data is transferred outside the EEA, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses, adequacy decisions (including the EU–US Data Privacy Framework where applicable), or other legally recognised transfer mechanisms.
When you delete your account, we delete or anonymise your personal data, except where we are legally required to retain certain records or where limited data must be kept to resolve disputes or enforce our agreements.
Account controls: you can access and update your profile in the App or Website; manage location and notification permissions through your device settings; and delete your account at any time using the in-app/website account-deletion feature. Deleting your account removes your profile and associated content — including your subscriptions, food trucks (and their menus and rental settings), events, messages and conversations, reviews, and notifications — and deletes your authentication record, subject to legal-retention exceptions.
Your GDPR rights: subject to applicable law, you have the right to access, rectify, erase, restrict or object to processing, data portability, and to withdraw consent. To exercise these rights, contact privacy@truckfestmap.com. We will respond within the timeframes required by law (generally one month) and may need to verify your identity.
Supervisory authority: if you are in Lithuania, you may lodge a complaint with the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija, VDAI), L. Sapiegos g. 17, Vilnius — ada@ada.lt — vdai.lrv.lt. If you are elsewhere in the EEA, you may contact your local data protection authority.
The mobile App does not use advertising cookies. It uses local device storage to keep you signed in and to store app preferences.
The Website/dashboard uses strictly necessary cookies for authentication/session management (provided by Supabase) and security, and payment cookies set by Stripe during checkout. Where analytics are used, they are limited to aggregate measurement and, where required, used only with your consent.
We implement appropriate technical and organisational measures to protect personal data, including encryption in transit, encrypted/hashed credentials, access controls, role-based permissions, and use of reputable infrastructure providers. No method of transmission or storage is completely secure; we cannot guarantee absolute security, but we work to protect your data and to address vulnerabilities promptly.
The Service is intended for general audiences and is not directed to children. We do not knowingly collect personal data from children under the age of 16 (or under the lower age of digital consent permitted by your country). If you believe a child has provided us personal data, please contact privacy@truckfestmap.com and we will take steps to delete it.
We may update this Policy from time to time. When we make material changes, we will update the "Last updated" date and, where appropriate, notify you in the App, on the Website, or by email. Your continued use of the Service after the changes take effect constitutes acceptance of the updated Policy.
Privacy email: privacy@truckfestmap.com. General email: info@truckfestmap.com.