Privacy Policy

Last updated: 11/11/26

Who we are. LftOvr ("LftOvr", "we", "us") is a [California nonprofit corporation: confirm legal name and status once the articles are filed] that runs a platform connecting food businesses with surplus food, food banks, charities and families in California. This policy covers lftovr.org and app.lftovr.org.

1. What we collect

Account information.

Individuals and families: first name, email address and phone number (if you give them), household size, ZIP code and any notes you add.
Food businesses and organizations: organization name and type, contact name, email, phone, address and notes.

Activity on the platform. Donations posted (item, food type, weight, notes, optional photo, best-by date, allergens), food claimed, pickups, event RSVPs, receipts, and a dated history of each status change (for example posted, claimed, picked up).

Support and contact messages. What you write to us, your name and email, and any screenshot you upload. When you use the in-app Help form we also record the page you were on, your IP address and your browser type, so we can find and fix problems and block spam.

Technical data. Your IP address, browser and device type when you use the site. We use Google Analytics on lftovr.org and app.lftovr.org to see which pages are visited, how people find us and how they use the site. Google receives your IP address and device information to do this.

What we do not collect. We do not ask for Social Security numbers, bank or card numbers, or government ID numbers. We do not process payments or money donations.

2. How we use it

To run the platform: match donations with organizations, show pickup details, send notifications, create receipts and reports, and keep records.
To review and approve organizations and individual accounts.
To give support and answer messages.
To prevent spam and abuse and to keep the platform secure.
To understand how the site is used and improve it, using Google Analytics.
To meet legal obligations.

3. Who can see your information

Donors and recipients see what is needed to complete a pickup. A donor’s name, pickup address, phone number and email are shown to the organization or person who claims the food. An individual’s name and request notes are shown to food organizations reviewing assistance requests. Their phone number and email are not shown.
The public can see an organization’s name, type, city and state in our organization directory. Distribution events you post are public. Event pages show the organization’s name, the event date and time, the city and the full street address.
LftOvr administrators can see account and activity information in order to run and support the platform.
Service providers that help us operate: web hosting (Hostinger), email delivery (Brevo), spam protection (Cloudflare Turnstile), fonts (Google Fonts), and analytics (Google Analytics). They may process your information only to provide their service to us.
Cities and counties. [Attorney: if we later give local governments reports about food recovery, state it here. Reports show totals and never an individual’s name, address or contact details.]
Legal reasons. We may disclose information if the law requires it or to protect people’s safety or our rights.
We do not sell personal information, and we do not share it for advertising.

4. Cookies and similar technologies

Our site and app use cookies and browser storage needed to log you in, remember your light or dark setting and show the app tour. On lftovr.org, Google Analytics cookies (_ga and _ga_…) load only if you accept statistics cookies in our cookie banner. We remember your choice for 30 days. You can block cookies in your browser, but parts of the app may not work.

5. How long we keep information

We keep account information while your account is active. We keep donation, pickup and receipt records because donors, organizations and local agencies may need them for their own recordkeeping. We keep these records for 1 year after the pickup. Support messages and screenshots are kept for as long as needed to resolve the request and for our records. [Set a period.]

6. Your choices and rights

You can ask us to see, correct or delete the information we hold about you by emailing support@lftovr.org. We will respond within [attorney: confirm timing]. We may keep records we are required or entitled to keep, such as donation records that other parties rely on. [Attorney: California privacy rights. Confirm whether the CCPA applies to LftOvr as a nonprofit. If it does not, decide whether to offer the same rights voluntarily. Also confirm whether California’s rules on "Do Not Track" and Shine the Light need wording.]

7. Security

We use reasonable safeguards, including encrypted connections, spam protection and limits on who can see what. No system is completely secure, and we cannot guarantee the security of information you send us.

8. Children

Accounts are for people 18 and older. A parent or guardian may list the number of people in their household, but we do not knowingly collect information from children under 13. [Attorney: confirm wording; also confirm the 18+ account age.] If you believe a child has given us information, contact support@lftovr.org.

9. Text messages

We do not send text messages. If we add text alerts, we will update this policy and ask for your consent before sending any.

10. Links to other sites

Links to Google Maps, Google Calendar, CalRecycle, 211 and others take you to sites we do not control. Their privacy practices apply there.

11. Changes

We will post changes on this page and update the date at the top. [Attorney: decide whether registered users get an email for material changes.]

12. Contact

LftOvr, support@lftovr.org. [Add mailing address when we have one.]