Privacy Policy
Last updated: November 2025
Godega Market LLC d/b/a Nimble (“Nimble”, “we”, “our”, “us”) operates the Nimble mobile applications and the website located at nimblechicago.com (collectively, the “Services”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you access or use the Services. By using the Services, you consent to the data practices described in this Policy.
1. Information We Collect
We collect information that you provide directly (“User Provided Information”) as well as information collected automatically when you interact with the Services (“Automatically Collected Information”).
1.1 User Provided Information
- Account & Profile Data: Name, email, phone number, loyalty tier, preferences, and authentication credentials managed by Supabase.
- Order & Transaction Data: Items purchased, order history, delivery or pickup method, and promo usage.
- Payment Data: Payment card and wallet details entered at checkout. These are processed securely by Square; we do not store full card numbers.
- Delivery Details: Pickup or delivery addresses you provide.
- Support & Feedback: Information supplied when contacting us, responding to surveys, or opting into SMS/email communications.
- Push Notification Tokens: Device identifiers (Expo push tokens) you register so we can send order updates and alerts. Disable notifications in device settings to revoke consent.
1.2 Automatically Collected Information
- Device & Technical Data: Device type, operating system, unique device identifiers, IP address, browser/app version, and crash diagnostics.
- Usage Data: Time stamps, screens visited, features used, referral URLs, and aggregated analytics events.
- Cookies & Local Storage: Session cookies on the website (authentication, security, preferences) and local storage within the mobile app (session tokens, guest checkout state). Mobile apps do not use browser cookies.
We currently do not collect precise GPS location automatically. Any location details we process are the addresses you provide for pickup or delivery.
2. How We Use Information
- Order fulfillment, payment processing, loyalty point management, and confirmations.
- Transactional communications, support responses, and (with consent) marketing messages.
- Personalization, analytics, debugging, and service improvements.
- Security, fraud prevention, and legal compliance.
3. How We Share Information
We do not sell personal information. We may share data with:
- Service providers that host, operate, or support the Services (e.g., infrastructure, email, analytics).
- Square for payment processing.
- Supabase for authentication and session management.
- Delivery or fulfillment partners to complete orders.
- Analytics/monitoring tools (such as Sentry) to improve reliability.
- Authorities when required by law or to protect rights, safety, or property.
- Affiliates or successors in a merger, acquisition, or asset sale.
4. Cookies, Tracking & Opt-Out Choices
The website uses cookies for authentication, analytics, and preferences. You can manage cookies via your browser settings; disabling them may affect functionality. Mobile apps store tokens locally and do not use browser cookies. We currently do not respond to browser “Do Not Track” signals.
Opt-out options include uninstalling the app, disabling push notifications, and unsubscribing from marketing emails.
5. Data Retention & Deletion
We retain personal information as long as necessary to deliver the Services, comply with legal obligations, resolve disputes, and enforce agreements. To request deletion, email privacy@nimblechicago.com. Some data may remain as required by law or for operational needs.
6. Security
We use reasonable administrative, technical, and physical safeguards to protect your information, including HTTPS, access controls, and encryption. Payments are processed solely by Square (PCI DSS compliant). No system is perfectly secure, and we cannot guarantee absolute protection.
7. Children’s Privacy
The Services are not directed to children under 13. If you believe your child has provided personal information without consent, contact us at privacy@nimblechicago.com and we will delete it.
8. International Transfers
We store and process data in the United States using U.S.-based providers (Square, Supabase, Vercel, Expo). By using the Services from outside the U.S., you consent to these transfers, which may be subject to different privacy laws than your jurisdiction.
9. California Privacy Rights (CCPA/CPRA)
California residents may request to know, access, correct, or delete their personal information and will not be discriminated against for exercising these rights. We do not sell personal information. Submit requests to privacy@nimblechicago.com.
10. Changes to This Policy
We may update this Policy periodically. We will post the updated Policy with a new “Last updated” date. Continued use of the Services after updates constitutes acceptance of the new Policy.
11. Contact Us
Privacy/Data Requests: privacy@nimblechicago.com
General Support: hello@nimblechicago.com