GL Plus Runner Privacy Notice

Grocery List Plus, Inc. ("GL Plus", "we", "us") is a North Carolina corporation located at 4800 Express Dr #19769, SMB 9347, Charlotte, NC 28208, USA. This notice covers what we collect about you from the moment you apply on our website or in the GL Plus Runner app, through screening and onboarding, and for as long as you hold a Runner account.

If you also use Grocery List Plus as a shopper, our Privacy Policy covers that separately. This notice is only about the Runner side.

When you apply

• Your first and last name, email address, and mobile number if you give one; the city and ZIP codes you want to serve; how you plan to deliver; whether you have driven for, applied to, or been removed from us before; and a recruit code if you have one.
• A one-way hash of your IP address and of your browser or device signature, kept to detect someone who was removed applying again under a new name. We keep the hashes, never the raw address or device details.
• The version of the Runner Terms you accepted by submitting, and when. The form is protected by Google reCAPTCHA, which processes your interaction under Google's own privacy policy.

During screening and onboarding

• The identifiers Checkr assigns to your background check and report, whether it cleared or needs review, its status, and the dates of any adverse-action notices. Checkr collects your Social Security number, date of birth and identity documents directly; we receive results, not the documents.
• A profile photo, which a person at GL Plus reviews before it goes live, and the make, model and colour of your vehicle plus a photo of it — so households know who and what to expect.
• Your Stripe account identifiers. Stripe collects your bank details and tax information (including your W-9) directly and holds them under its own privacy policy; we hold the account id, its status and the date your tax form was received.
• Your acknowledgement of the Runner handbook, by version, and of the note that the Runner's Kit is guidance, not tax or legal advice.

While you work

• Your availability — the days, windows and ZIP codes you offer, how many deliveries you will take, and any time off you block.
• Your delivery record: runs, completions, cancellations, marks, and ratings households give you.
• Your device location and its accuracy when you review a route, work an active run or confirm a delivery. The app uses location to calculate routes and arrival estimates and offer store-arrival prompts. During an active run on Android, a visible foreground-service notification allows updates to continue when you switch to another app, such as your maps app. Active-run updates stop when the run ends or you sign out. A delivery confirmation may also record a location fix as delivery evidence. If you decline location access or a fix is unavailable, you can confirm arrivals manually and continue the delivery workflow.
• Photos you take at work: the receipt at checkout and the groceries at the door. These are stored privately and are the evidence of each delivery.
• Your device's push-notification token, a stable device id the app creates, your platform, and your operating-system and app versions — so we can reach you about runs and cover offers.

• Your Social Security number or date of birth. Checkr collects those on its own secure form; they never pass through our systems.
• Your licence plate. There is no field for it anywhere, on purpose.
• Continuous location monitoring outside an active run. Active-run location updates stop when the run ends or you sign out. A location request when you review a route or confirm delivery is separate from continuous active-run updates.
• Photos of households or their homes beyond the groceries at the door, and no photo of a customer is ever shown to you.

We use what we collect to:

• Decide whether to approve your application, and keep you approved — including periodic re-checks through Checkr while you are an active Runner.
• Match you with households in the ZIP codes and windows you offer, and tell them who is coming.
• Run deliveries: send you runs and cover offers, issue the card you shop with, record proof of delivery, and settle what you are owed each week.
• Keep your record, which a person reads when you ask for a higher limit or when we are considering removing you. Nothing about your standing changes automatically.
• Send you the emails and notifications the work requires: application outcomes, run and cover updates, payout statements, and changes to these documents.

We do not use your information for advertising, and we do not sell it.

A household you are matched with, or delivering to, sees your first name, your reviewed profile photo, and how you arrive — your vehicle's colour, make and model. That is the point of the photo review: the person at the door should recognise you.

They never see your surname, email, phone number, address, or licence plate. A household considering Runners who are not yet matched with them sees availability in their area, never a named person.

We share your information with the companies that do part of this work for us, each under its own agreement and privacy policy:

• Checkr, Inc. — background checks, identity verification and adverse-action notices.
• Stripe, Inc. — weekly payouts (Stripe Connect) and the card you shop with (Stripe Issuing), including the tax information Stripe collects.
• Google — reCAPTCHA on the application form, and Firebase for delivering push notifications to your phone.
• Twilio SendGrid — the emails we send you.
• Amazon Web Services — where everything is hosted and stored, in the United States.
• Mapbox — maps, route planning and travel-time estimates. Route requests send your current location and stop coordinates to Mapbox. The Runner service receives arrival estimates and arrived-stop identifiers for route progress, rather than a continuous stream of GPS positions. A delivery confirmation may separately record a location fix as delivery evidence.

We may also disclose information when the law requires it, to protect a household, a Runner or the public from harm, or as part of a sale or reorganisation of the business, in which case this notice continues to apply. We do not sell your information.

Background checks are consumer reports run by Checkr, Inc., a consumer reporting agency. Before any check is ordered, Checkr gives you a separate disclosure and asks for your written authorisation; you can decline, and the application simply stops.

If something in a report means we cannot move forward, you have rights under the Fair Credit Reporting Act: you receive a copy of the report and a summary of your rights, and you can dispute anything you believe is wrong. Disputes go to Checkr, who hold the report; we cannot see or change its contents. The notice we send you carries Checkr's contact details.

We may re-check periodically while you are an active Runner. The same disclosure and rights apply.

For as long as you hold a Runner account, and then:

• If you close your account, sign-in is refused at once and your personal information is removed thirty days later. During those thirty days support can restore the account if you ask.
• Money records stay. Settlements, pay items and the lane-pass ledger are financial and tax records and are kept for as long as the law requires, whether or not your account is open.
• Checkr keeps its own records of your check under its own retention rules; asking us to delete your account is not a request to Checkr, and we will tell you how to make one.
• A removal for cause survives deletion. If you were removed, a minimal record of that decision is kept so that deleting an account cannot be a way to apply again as if it never happened.

• See and correct. Your phone number, ZIP codes and transport mode you change yourself in the app or portal while your application is open. Your name, email and date of birth are the identity your background check was built on, so corrections to those go through support, where a person sees them.
• Delete. The Account screen in the app closes your account. It is refused while you still have deliveries scheduled, so that households are not left without a Runner — block those days first and another Runner covers them.
• Permissions. Camera, location and notifications are controlled by your phone's settings. Refusing camera access means you cannot record receipts or deliveries and so cannot complete runs; if location access is refused or a fix is unavailable, you can confirm arrivals manually and continue the delivery workflow.
• Withdraw. You can withdraw an open application at any time from the app or portal.

If you are in a state that gives you further rights over your personal information, write to us and we will honour them; we will need to verify it is you.

Your data is stored in encrypted systems in the United States, in a database that holds Runner information only, separate from shopper data. Photos are stored privately and served only by short-lived signed links. Access is limited to the people who need it to run the service, and every action a person takes on your record is logged.

You must be at least 18 to apply, as the Runner Terms say. We do not knowingly collect information from anyone under 18 through the Runner application, and we will delete it if we learn we have.

When we change what we collect, who we share it with, or how long we keep it, we publish a new version here with a new version number and tell active Runners by email and in the app. The version and date are at the top of this page.

Questions about this notice or your information: support@glplusinc.com, or write to Grocery List Plus, Inc., 4800 Express Dr #19769, SMB 9347, Charlotte, NC 28208, USA.