Privacy Policy

Last updated: March 8, 2026

This Privacy Policy explains how Threebie, LLC ("Threebie," "we," or "us") collects, uses, and shares your Personal Information when you use our services, including our websites, mobile applications, APIs, and AI-powered shopping features like "Threebie my Basket" (collectively, the "Services"). "Personal Information" is any information that we can reasonably use to identify you or that is linked to your identity.

1. Information We Collect

Information You Provide

We collect the following Personal Information directly from you:

• Contact information: Name, telephone number, and email address.
• Account information: Your login credentials, profile settings, and authentication data (managed securely via our identity provider, Clerk).
• Order information: Delivery address, order dates and times, items ordered, custom instructions, and fulfillment preferences.
• Payment information: Billing address and payment method details (processed via our secure payment partners; see Section 2).
• Customer service & AI interactions: Information you provide when interacting with our support team or providing feedback to our AI shopping concierge ("Jamie") regarding product suggestions, preferences, or alternatives.
• Information about other people: If you use our Services to send a grocery delivery to a friend or family member, we collect the recipient's name, email, and delivery address. You are responsible for ensuring you have their permission to share this information.

Information Collected by Automated Means

When you use the Services, we automatically collect information about your device, browser, and activity:

• Browser and activity information: How you interact with the Services, including products viewed, cart additions, search queries, page navigation, time spent on the app, and interactions with emails/notifications (e.g., open rates).
• Device information: Your device's IP address, device type, browser type, internet service provider, operating system, and unique device/advertising identifiers.
• Location information (General and Precise): General location: We infer your general region using your IP address for security, fraud prevention, and localized app experiences. Precise geolocation: If you grant our app permission (or enter a specific address), we collect your precise geographic coordinates (Latitude/Longitude) utilizing Google Maps APIs. We use this to accurately map the closest grocery stores to your location, calculate accurate delivery/pickup availability, and optimize your basket. You can toggle GPS permissions at any time in your device settings.
• Cookies, pixels, and tracking technologies: We (and our analytics/marketing partners) use cookies, local storage (such as saving your active cart), and software development kits (SDKs) to make the Services function, remember your preferences, and analyze app performance.

Information Received From Other Sources or Parties

• Single Sign-on services: If you log in via third-party providers (e.g., Google or Apple) using Clerk, we receive basic profile data like your name and email.
• Fulfillment Partners: Retailers and delivery couriers may provide us with fulfillment statuses, receipt confirmations, and order dispute information.
• Fraud and security partners: Providers who assist us in verifying identity and preventing fraudulent purchases.

2. Payment Processors and Authentication Partners

Authentication: Your account security is our priority. Threebie utilizes Clerk as our identity and access management provider. Your login credentials and sessions are securely managed by Clerk in accordance with their privacy standards.

Payments: When you pay for orders, your credit card or payment information is collected and processed directly by our third-party payment processor, Stripe. Threebie does not directly collect, process, or store your full credit card number. We may receive limited information, such as the last 4 digits of your card and the expiration date, to provide you with order histories.

3. Information Uses

We use the Personal Information we collect for the following purposes:

• Provide and manage the Services: To maintain your account, save your cart, and operate our database via PocketBase.
• Process your transactions: To fulfill your orders and process payments.
• Optimize your shopping (AI Integration): To power "Jamie," our AI concierge, allowing us to scan local store inventories, analyze your past orders, calculate distances, and build mathematically and economically optimized baskets for you.
• Provide customer support: To respond to inquiries and resolve order issues.
• Communicate with you: To send transactional updates, receipts, and policy changes.
• Marketing and Advertising: To send you promotional materials, targeted deals, and measure the effectiveness of our advertising campaigns.
• Improve the Services: To test new features, analyze usage trends, and debug our search functionality (such as our adaptive search algorithms).
• Maintain security and prevent fraud: To protect our users and infrastructure from unauthorized activity.
• Satisfy legal obligations: To comply with applicable laws, regulations, and legal processes.

4. Information Disclosures

We may disclose your Personal Information to the following categories of recipients:

• Service Providers and Vendors: Identity verification (Clerk), payment processing (Stripe), map services (Google Maps), communications platforms (e.g., email, SMS, voice), cloud, and infrastructure services.
• Retailers and Fulfillment Partners: Local grocery stores and third-party delivery couriers who require your name, address, and order details to prepare and deliver your items.
• Analytics Providers: Third parties who help us analyze app traffic and usage.
• Marketing and Advertising Partners: We may disclose identifiers and browsing data to partners to market our products and measure campaign effectiveness.
• In connection with corporate transactions: In the event of a merger, sale of assets, reorganization, or bankruptcy.
• Legal Authorities: When we believe disclosure is necessary to comply with the law, protect our rights, or ensure the safety of our users.

5. Summary Table

The table below summarizes our data collection and sharing practices as required by California law (CCPA/CPRA).

6. AI Optimization & "Jamie" Profiling

To provide the "Threebie my Basket" feature, we utilize automated processing and artificial intelligence (referred to contextually as "Jamie"). By analyzing your cart contents, precise location, purchase history, and implicit preferences, our systems make automated inferences to present you with alternative items, cheaper delivery routes, and store availability. You are never obligated to accept these suggestions and always retain manual control over finalizing your checkout cart.

7. Children's Privacy

The Services are intended for a general adult audience and are not directed to individuals under the age of 16. We do not knowingly collect Personal Information from children under 16. If we learn we have collected such information, we will take reasonable steps to delete it.

8. Third-Party Websites

Our Services may contain links to external sites or use embedded services (like Google Maps Places API). The privacy practices of these third parties (including Google's Privacy Policy) are governed by their own policies.

9. Information Security

We employ reasonable administrative, physical, and technical measures designed to safeguard your Personal Information. By using Clerk for authentication, we minimize risk as we do not store user passwords on our servers. However, no data transmission over the internet is completely secure, and we cannot guarantee absolute security.

10. Cross-Border Transfers

Threebie is based in the United States. If you access our Services from outside the U.S., your information will be transferred to, stored, and processed in the United States, where our servers and service providers are located. Data protection laws in the U.S. may differ from those in your jurisdiction.

11. Information Retention

We retain Personal Information only for as long as necessary to fulfill the purposes for which it was collected. To determine the appropriate retention period, we consider the volume, nature, and sensitivity of the data, the potential risk of harm from unauthorized access, and our applicable legal, tax, and accounting requirements (transaction data is typically retained for up to 7 years). AI inference data is kept as long as your account is active to continually improve your personalized experience.

12. Your Privacy Choices

Depending on your state of residence, you have the following rights and choices:

• Correct or Update your Account: You can edit your profile details or delivery addresses at any time by logging into your account settings.
• Marketing Choices: You may opt out of promotional emails by clicking "unsubscribe" in the email footer. You will still receive mandatory transactional messages (like order receipts).
• Location Permissions: You may revoke GPS tracking at any time via your browser or mobile OS settings.
• Right to Know / Access: The right to request what personal information we have collected, the sources, and the third parties with whom it was shared.
• Right to Delete: The right to request the deletion of your Personal Information (subject to legal exceptions like completing transactions or fighting fraud).
• Right to Opt-Out of Selling or "Sharing": The right to opt-out of the use of your data for cross-context behavioral advertising.

How to Exercise These Privacy Rights

• To Opt-Out: You may visit our Do Not Sell or Share My Personal Information page. We also recognize and honor the Global Privacy Control (GPC) signal transmitted by supported web browsers.
• For Access/Deletion Requests: Please email us at privacy@threebie.com. You will be asked to authenticate your identity via your Clerk login before we can process data disclosures.
• Authorized Agents: You may designate an authorized agent to make requests on your behalf. We require written proof of authorization and may verify your identity directly with you.
• Right to Appeal: If we deny your privacy request, you may appeal the decision by emailing privacy@threebie.com with the subject line "Rights Request Appeal." If unsatisfied, you have the right to lodge a complaint with your state's Attorney General.

13. Supplemental Disclosures for Residents of California

The California Consumer Privacy Act (CCPA/CPRA) provides specific rights. Please refer to Section 5 (Summary Table) for the disclosure matrix required by California law.

• Use of Sensitive Personal Information: We only use Sensitive Personal Information (Precise Geolocation and Login Credentials) for the strict functional purpose of providing the Services such as mapping nearby stores and securing your account.
• Shine the Light: California residents may request a list of third parties to whom we have disclosed personal data for their direct marketing purposes in the preceding calendar year.
• Consumer Affairs Notice: Under CA Civil Code Section 1789.3, you may contact the Complaint Assistance Unit of the Division of Consumer Services of the California Department of Consumer Affairs in writing at 1625 N. Market Blvd., Suite N 112, Sacramento, California 95834, or by telephone at (800) 952-5210.

14. Disclosures for Residents of Nevada

If you are a resident of Nevada, Chapter 603A of the Nevada Revised Statutes permits you to opt out of the future sale of certain covered information that a website operator has collected or will collect. To submit such a request, please contact us at privacy@threebie.com.

15. Changes to this Privacy Policy

We may occasionally update this Privacy Policy to reflect business or legal changes. The "Last updated" date indicates when revisions were made. If we make material changes, we will provide additional notice, such as an in-app banner or an email to your registered address.

16. Contact Information

If you have questions, comments, or complaints about this Privacy Policy or our data handling practices, please contact us at: