Wellness Forward Operations Co LLC, doing business as Koop Commons ("Koop Commons," "we," "us," or "our"), operates the Koop Commons café at 600 Sixth Avenue, New York, NY 10011, the website at koopcommons.com, and the Koop Commons mobile application (together, the "Services").
This Privacy Policy explains what information we collect when you use the Services, how we use and share it, and the choices you have. By using the Services you agree to the practices described here. If you do not agree, please do not use the Services.
We have written this policy in plain language. If anything is unclear, contact us at privacy@koopcommons.com.
1. Information we collect
We collect information in three ways: information you give us, information collected automatically when you use the Services, and information we receive from other companies that help us run the business.
Information you give us
- Account information. When you create an account we collect your name, email address, phone number, and a password.
- Order information. When you place an order we collect the items you ordered, customizations, pickup time, order history, and any notes you add.
- Payment information. Payments are processed by Square, Inc. ("Square"). When you save a card or pay for an order, your full card number is sent directly to Square and is not stored on our systems. We receive and keep a token that lets us charge your saved card, the card type, the last four digits, the expiration date, and the amount and status of each transaction.
- Saved preferences. If you save favorite drinks or customizations ("usuals"), we store those so you can reorder them.
- Rewards information. If you take part in our rewards program, we keep a record of the points, stamps, or credits you earn and redeem, and the purchases that earned them.
- Event information. If you RSVP to a workshop, tasting, or other event, we collect your RSVP, the number of guests, and any information you provide when registering.
- Communications. If you contact us by email, through the app, or on social media, we keep the message and our response.
- Marketing preferences. We record whether you have opted in or out of marketing emails, text messages, and push notifications.
Information collected automatically
- Device and app information. When you use the app we collect your device type and model, operating system version, app version, unique device or advertising identifiers, language, time zone, and the push notification token that lets us send notifications to your device.
- Usage information. We collect information about how you use the Services, such as screens viewed, features used, items browsed, and the dates and times of activity.
- Crash and performance data. We use Sentry to collect crash reports and performance diagnostics. These reports include device information, app state at the time of the error, and, if you are signed in, an internal identifier for your account. They do not include your payment details.
- Website data. When you visit koopcommons.com we collect your IP address, browser type, referring page, pages viewed, and similar log data. We may use cookies and similar technologies as described in Section 6.
- Location. The app does not track your precise location in the background. If you allow location access, we use it only while the app is open to show your distance to the café and to help time your pickup. You can turn this off in your device settings at any time.
Information from other companies
We receive transaction confirmations and fraud signals from Square, authentication information from Google Firebase (which manages sign-in for the app), and delivery and engagement reports from the providers that send our emails and text messages. We do not buy personal information from data brokers.
2. How we use information
We use the information we collect to:
- Provide the Services, including creating and managing your account, taking and preparing your orders, processing payments, and notifying you when an order is ready.
- Run the rewards program, including tracking points and rewards you earn and redeem.
- Manage events, including confirming your RSVP and letting you know about changes.
- Show nutrition and macronutrient estimates for menu items. This information is provided for general reference and is not medical or dietary advice.
- Communicate with you about your orders, your account, and changes to the Services or our policies.
- Send you marketing communications when you have opted in, as described in Section 4.
- Improve the Services, including understanding which features and menu items are popular, fixing bugs, and developing new features.
- Protect the Services and our customers, including detecting fraud, abuse, and security incidents.
- Comply with law, respond to legal requests, and enforce our Terms of Use.
3. Rewards program
Our rewards program is tied to your account. To run it, we keep a record of your qualifying purchases and the rewards you earn and redeem. We may use your order history to personalize the offers and rewards we show you in the app. Rewards terms, including how rewards expire, are set out in our Terms of Use. If you delete your account, your rewards balance is forfeited.
4. Marketing communications
Email. With your consent, we send emails about new menu items, events, and promotions. Every marketing email includes an unsubscribe link. Unsubscribing does not stop transactional emails such as order receipts and account notices.
Text messages. If you opt in to text messages, we will send you recurring automated marketing and promotional messages at the phone number you provide. Consent is not a condition of purchase. Message frequency varies. Message and data rates may apply. Reply STOP at any time to cancel and HELP for help. We may also send transactional text messages, such as order-ready alerts, that are not marketing.
Push notifications. With your permission, the app sends push notifications for order status and, if you opt in, promotions and event reminders. You can manage or disable push notifications in the app settings or your device settings.
We do not share your contact information with other companies for their own marketing.
5. How we share information
We share personal information only in the following circumstances.
Service providers
We share information with companies that help us operate the Services. These include Square (payment processing and point of sale), Google Firebase (authentication and app infrastructure), Amazon Web Services (hosting), Sentry (crash and performance monitoring), and the providers we use to send email, text messages, and push notifications. These companies may use your information only to provide services to us.
Apple and Google
If you download the app from the Apple App Store or Google Play, those companies may collect information about your download and use of the app under their own privacy policies.
Legal and safety
We may disclose information if we believe it is necessary to comply with law, a court order, or a government request; to enforce our Terms of Use; or to protect the rights, property, or safety of Koop Commons, our customers, or others.
Business transfers
If Koop Commons is involved in a merger, acquisition, financing, or sale of some or all of its business, your information may be transferred as part of that transaction. We will require the new owner to honor this policy or notify you of any change.
With your consent
We may share information for other purposes when you direct us to or agree.
We do not sell personal information and we do not share it with third parties for targeted advertising.
6. Cookies and analytics
Our website uses cookies and similar technologies that are necessary for the site to work, and may use analytics tools to understand how visitors use the site. You can control cookies through your browser settings. Disabling cookies may limit some features of the site.
The app uses software development kits from the service providers listed in Section 5 to provide sign-in, crash reporting, and notifications. We do not currently use third-party advertising networks in the app.
Some browsers send a "Do Not Track" signal. Because there is no common standard for these signals, we do not respond to them at this time.
7. Data retention
We keep account information for as long as your account is open. We keep order and transaction records for as long as needed to run the rewards program, handle disputes, and meet tax and accounting requirements, which is generally seven years. Crash and diagnostic data is kept for up to 90 days. Marketing preference records are kept so we can honor your opt-out.
When you delete your account, we delete or de-identify your personal information within 30 days, except for records we are required to keep by law or that are needed to resolve disputes or enforce our agreements.
8. Security
We use reasonable administrative, technical, and physical safeguards to protect personal information, including encryption in transit, access controls, and hosting with providers that maintain independent security certifications. No system is completely secure, and we cannot guarantee the security of your information. Please use a strong password and keep it confidential. If you believe your account has been compromised, contact us right away.
9. Your choices and rights
- Account information. You can review and update your name, email, phone number, saved cards, and preferences in the app.
- Account deletion. You can delete your account at any time from the account settings screen in the app, or by emailing privacy@koopcommons.com. Deleting your account permanently removes your saved preferences and forfeits any rewards balance.
- Marketing. You can unsubscribe from emails using the link in any email, stop text messages by replying STOP, and turn off push notifications in the app or device settings.
- Location. You can revoke location permission in your device settings.
- Access and correction. You may ask us for a copy of the personal information we hold about you, or ask us to correct it, by contacting privacy@koopcommons.com. We will verify your identity before responding, and we will respond within 45 days.
Additional rights for residents of certain U.S. states
Depending on where you live, you may have the right to know what personal information we collect, use, and disclose; to access and receive a portable copy of it; to correct inaccurate information; to delete it; and to opt out of the sale of personal information, sharing for targeted advertising, and certain profiling. We do not sell personal information or share it for targeted advertising.
You may exercise these rights by emailing privacy@koopcommons.com or using the account deletion feature in the app. You may designate an authorized agent to make a request on your behalf; we will ask for proof of the agent's authority. We will not discriminate against you for exercising your rights. If we deny your request, you may appeal by replying to our response with the word "Appeal" in the subject line.
California residents. Over the past 12 months we have collected the categories of personal information described in Section 1 (identifiers, commercial information, internet activity, geolocation when permitted, and inferences drawn from order history) for the purposes described in Section 2, and disclosed them to the service providers described in Section 5. We do not sell or share personal information as those terms are defined under California law, and we have no actual knowledge that we sell or share the personal information of consumers under 16.
10. Children
The Services are intended for adults. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has given us personal information, contact us at privacy@koopcommons.com and we will delete it.
11. Users outside the United States
The Services are operated from the United States and are intended for customers in the United States. If you use the Services from another country, your information will be transferred to and processed in the United States, where privacy laws may differ from those in your country.
12. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will change the effective date at the top and, for material changes, notify you by email or through a notice in the app before the change takes effect. Your continued use of the Services after the effective date means you accept the updated policy.
13. Contact us
Wellness Forward Operations Co LLC (d/b/a Koop Commons)
600 Sixth Avenue, New York, NY 10011
privacy@koopcommons.com