Grice’s Exchange Privacy Policy
Effective September 20, 2026. Applies to our website and iPhone app, online sale exchanges, and incoming-package pickup service operated by Grice’s Grocery & Deli in Western Grove, Arkansas.
Information we use
We collect your email, account identifier, name and optional phone number; item descriptions and photos you provide; buyer invitations; package recipient, address and tracking details; and intake, shelf, pickup, fee and staff-action records. Package enrollment records include the accepted terms version, signer name, email and acceptance time. We do not collect payment card details: service fees are paid in store.
Camera, photos and notifications
Camera access is used when you scan a pickup code or label, or add an item photo. Label reading runs on the staff device; confirmed label text is saved, not the label image. Item photos you choose to upload are stored privately. Device notification tokens are saved only when notifications are enabled. Notifications are optional and can be disabled in your account or device settings. Email confirmations remain part of the service. Lock-screen notification messages do not include pickup codes or item details.
How information is shared
Authorized Grice’s staff use records to provide and verify the service. Buyers and sellers see relevant information for their own exchange, including the other party’s name and item details. Private pickup codes should only be shown to staff. We use Supabase for accounts, database and photos; OpenAI Sites and its hosting infrastructure for the website; Resend for email; and Expo and Apple for iPhone builds and native notification delivery. These providers process information needed to operate their services. We may disclose relevant information to a carrier, authorized collector, or authorities when needed to resolve a service issue, protect rights, or comply with law. We do not sell customer information or use it for targeted advertising.
Site traffic and local storage
We measure page visits and menu clicks using random visitor and session identifiers, broad device category and referral category. Analytics records are not joined to your account and are routinely removed after approximately 90 days. The site respects browser Do Not Track and Global Privacy Control signals. Local storage and secure cookies retain sign-in state, pending invitations and your service selection. Hosting and delivery providers may also process technical connection and security logs under their own policies.
Deletion and retention
Under My account → Account & privacy → Delete my account, you can submit a deletion request without contacting support. Grice’s reviews and completes requests within 30 days and sends a confirmation email. If Grice’s still holds an item, we will contact you to arrange collection or return before completing deletion; deleting an account does not abandon property or cancel a fee or another person’s rights. A service owner must transfer operational ownership first.
When completed, deletion removes the sign-in account, contact profile, device subscriptions, and associated seller photos and descriptions. Remaining service records are stripped of profile contact details. Limited fee and handoff history and the original package-service agreement acceptance record (including signer name, email, terms and date) may remain restricted to authorized staff as reasonably needed for disputes and recordkeeping. Grice’s reviews these retained records when processing the request and can explain any continuing retention. Provider backups and logs may expire on their own schedules; we cannot recall emails already delivered or copies another participant saved.
Your choices and questions
Update your name and phone under My contact details. Contact mgrice2012@gmail.com to request access, correction, or an explanation of retained records. Please do not send passwords or pickup codes. The service is intended for adults; a parent or guardian must use their own account for a minor’s package. We use access controls and private storage, but no system can promise absolute security.
Changes
We will update this page when our practices change and identify the effective date. Material changes will be communicated through the service as appropriate.