Privacy Policy

1. Introduction

CampusConcierge ("we," "us," "our") operates LunchLook, a calendar subscription service that helps parents track school lunch schedules. This Privacy Policy explains how we collect, use, disclose, and safeguard your information. If you do not agree with our practices, please do not use the Service.

2. Information we collect

2.1 Email address

Your email is our primary data. We use it to create and manage your account, process your subscription and payments, send service updates, receipts, and support responses, and verify your identity.

2.2 Payment information

Payment details (card, billing address) are collected by Stripe, our payment processor. We do not store or have access to your full card details.

2.3 Subscription data

We keep records of your plan (trial, semester, or annual), start/renewal dates, and cancellation date if any, to manage your access.

2.4 Usage data

We collect limited information about how you use the Service (e.g., which school you selected) to improve it.

2.5 Device and browser information

We do not use cookies or advertising trackers. We do record your IP address and browser user-agent when you sign up and when your calendar link is accessed. We use this only to operate and protect the Service — detecting abuse such as a single subscription being shared widely, troubleshooting delivery problems, and evidencing your agreement to these terms at signup. We do not use it to build advertising profiles and we do not sell it.

3. How we use your information

• Service delivery — create your account, maintain your subscription, provide your lunch calendar.
• Payment processing — process subscription payments through Stripe.
• Communication — account confirmations, receipts, renewal reminders, service updates, and support.
• Service improvement — understand usage and improve the Service.
• Legal compliance — meet legal obligations and protect against fraud.

We do not use your information for targeted advertising, and we do not sell it to third parties.

4. Third-party service providers

We share information with these providers only as needed for them to perform their functions:

• Stripe (stripe.com) — processes payments; your email is shared for billing.
• Supabase (supabase.com) — stores your email and subscription data (SOC 2 compliant, encrypted).
• Framer (framer.com) — hosts the LunchLook website.
• Your calendar app (Google, Apple, Outlook) — runs on your device. We provide a calendar link (.ics) you subscribe to; we don't store data in these services. Your calendar provider handles data under its own policy.

5. Data retention and deletion

While your subscription is active, we retain your email and subscription records to provide the Service.

After you cancel, we keep your email and billing records. We may still email you occasionally — for example, when enrollment reopens for a new school year — and you can unsubscribe from those anytime (see "Your choices"). Essential billing, legal, and support messages may still be sent.

We keep billing and transaction records — such as which plan you purchased and when — for as long as we need them to meet our tax, accounting, audit, and legal obligations, generally up to 7 years, after which they are deleted. Payment card details are held by Stripe, not us.

You can request deletion at any time by emailing support@lunchlook.com. We delete the personal information we are not legally required to retain, and remove the rest once the applicable retention period ends. Backups are purged on a rolling schedule, typically within 60 days. We confirm and act on requests within 45 days.

6. California privacy rights (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect, to request deletion, to correct inaccurate information, and to non-discrimination for exercising these rights. We do not sell or share your personal information, so the right to opt out of sale/sharing does not currently apply.

To exercise a right, email support@lunchlook.com with your name, the email on your account, and your request. We respond within 45 days and may verify your identity first.

7. Data security

We use reasonable safeguards — encrypted transmission (HTTPS), secure storage via Supabase, limited employee access, and monitoring. No system is completely secure, so we cannot guarantee absolute security. In the event of a breach involving your personal information, we will notify you as required by California law.

8. Children's privacy

LunchLook is designed for adults (parents and guardians). We do not knowingly collect personal information from children under 13. Parents may share the calendar link with their children to view menus; this does not create child accounts or collect children's information. If we learn a child under 13 provided personal information, we will delete it.

9. Your choices

You may opt out of non-essential emails via the unsubscribe link; we still send essential communications (account, billing, support). We do not currently use cookies or tracking; if we add analytics later, we will notify you and offer an opt-out.

10. Third-party links

The Service may link to third-party sites (e.g., school websites, Stripe, calendar apps). We are not responsible for their privacy practices; review their policies independently.

11. International users

LunchLook is operated in the United States and governed by U.S. law. If you are outside the U.S., your information will be transferred to and stored in the U.S.

12. Changes to this policy

We may update this Privacy Policy. We will post material changes here with an updated date and, where required, notify you at least 30 days before they take effect.

13. Contact us

Email: support@lunchlook.com