Crumbl

"While using Our Application, in order to provide features of Our Application, We may collect, with Your prior permission: Information regarding your location. We use this information to provide features of Our Service, to improve and customize Our Service."

The app collects location information from users' devices. While they mention prior permission, the stated purposes include broad goals like 'improve and customize Our Service' beyond core cookie-ordering functionality.

"While using Our Application, in order to provide features of Our Application, We may collect, with Your prior permission: Information regarding your location. Pictures and other information from your Device's camera and photo library."

The app accesses the device's camera and photo library. For a cookie ordering app, access to the full photo library goes beyond what core functionality would require.

"With Affiliates: We may share Your information with Our affiliates, in which case we will require those affiliates to honor this Privacy Policy. With business partners: We may share Your information with Our business partners to offer You certain products, services or promotions."

Personal information is shared with affiliates, business partners, and service providers for broad purposes including marketing promotions, not just service delivery.

"The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use Your Personal Data to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies."

No specific retention period or deletion timeline is provided. The open-ended language ('as long as is necessary') gives the company broad discretion to retain data indefinitely.

"We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page."

Changes take effect immediately upon posting. While they mention email/prominent notice, continued use constitutes acceptance of new terms with no opt-out mechanism beyond stopping use.

"Usage Data may include information such as Your Device's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers and other diagnostic data."

The collection of unique device identifiers and mobile device unique IDs enables cross-service tracking and device fingerprinting across sessions and contexts.