Legal

Privacy Policy

Effective July 30, 2026

This Privacy Policy explains how Lil' Rollout collects, uses, discloses, and protects personal information through its websites, applications, communications, and neighborhood curbside can services. It should be read with our Terms of Service.

Information we collect

Depending on how you use the Services, we may collect:

• Adult account information, such as name, email, phone number, login provider, role, and legal-consent records.
• Child operator information entered by a parent or guardian, such as a first name, nickname, team name, role, and assignments.
• Service information, such as address, can details, schedule, access instructions, service selections, operator assignments, and completion status.
• Transaction information, such as prices, payment status, receipts, and limited payment-related identifiers. Payment processors may collect payment-card or bank information directly.
• Communications, support requests, feedback, waitlist submissions, and messages.
• Device and usage information, such as IP address, browser, timestamps, pages viewed, session information, and diagnostic logs.
• Approximate or precise location information only when needed for address lookup, service coverage, routing, or a feature an adult account holder chooses to enable.

How we use information

We use personal information to:

• Create and secure adult-owned accounts and authenticate authorized users.
• Provide parent-controlled child operator access.
• Determine service availability, schedule and perform services, route operators, and communicate updates.
• Process and reconcile payments, prevent fraud, and maintain business records.
• Provide support, enforce agreements, investigate safety concerns, and protect users, children, operators, and the public.
• Operate, troubleshoot, analyze, and improve the Services.
• Comply with law, legal process, tax, accounting, and regulatory obligations.
• Send marketing communications only as permitted by law and subject to available opt-outs.

How we disclose information

We may disclose information:

• To the neighborhood business owner, parent or guardian supervisor, operator, customer, or administrator as needed to coordinate and verify service.
• To service providers that support hosting, authentication, maps, email, text messaging, analytics, payments, security, and customer support.
• During a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets, subject to appropriate safeguards.
• When required by law or when reasonably necessary to protect rights, safety, property, users, children, or the public.
• With your direction or consent.

We do not sell personal information for money. If our practices later involve a form of “sale,” “sharing,” or targeted advertising regulated by state privacy law, we will provide the required notice and opt-out mechanisms before engaging in that practice.

SMS and text messaging

If you provide a mobile phone number to log in or verify your identity, we send text messages containing one-time verification codes through a third-party messaging provider. Message frequency depends on your use of the Services — typically one message per login or sign-up attempt. Message and data rates may apply. We do not sell or share your mobile phone number with third parties for their own marketing purposes. Reply STOP to any message to opt out of text messages, or HELP for assistance.

Children and parent-supervised businesses

Customer accounts and business-owner accounts are intended for adults. A parent or legal guardian may provide limited information about a child and authorize that child to use designated operator features under adult supervision. The adult remains the account holder and controls the child's access. A child operator is not expected to create an independent account, accept legal terms, configure billing, enroll customers, or provide personal contact or payment information.

We seek to minimize child information. Parents should use a first name, nickname, or team name where practical and should not provide a child's full legal name, birthdate, school, personal email address, personal phone number, or other unnecessary identifying information. A parent or guardian may request review, correction, or deletion of child operator information, subject to records we must retain by law or for legitimate safety, dispute, or fraud-prevention purposes.

We do not knowingly permit a child under 13 to independently create an account or submit personal information. A parent or guardian who believes a child submitted information without appropriate authorization should contact us so we can investigate and delete it where required.

Child operator activity and device information

When a child uses an authorized operator mode, the Services may record operational events such as assigned stops, completion status, timestamps, skipped-service reasons, photos when an adult-enabled feature requires them, and ordinary security or diagnostic logs. We do not intend to use child operator activity for behavioral advertising or to create advertising profiles.

The preferred design is to use customer service addresses already supplied by adults rather than continuously tracking a child's movements. Precise continuous location history should not be collected unless a future feature has a documented safety or operational need, uses appropriate parental authorization, provides clear notice, and limits retention and access.

Location and service-address information

Service addresses and route information can be sensitive. We use them to check coverage, coordinate service, create routes, and support safety and operations. Access should be limited by account role and operational need. Child operator mode should display only the route and customer details needed to perform assigned work. Users should not enter door codes, alarm codes, medical details, or other highly sensitive data unless a feature specifically requests it and it is necessary.

Cookies and similar technology

We may use cookies, local storage, and similar technology for authentication, security, preferences, reliability, and analytics. Essential technology is necessary for the Services to function. Where law requires consent for nonessential analytics or advertising technology, we will provide an appropriate choice before using it.

Retention

We retain information for as long as reasonably necessary for the purposes described above, including providing service, maintaining records, resolving disputes, enforcing agreements, preventing fraud, and meeting legal obligations. Retention periods vary by data type and legal requirement. Child operator information and precise location data, if any, should be retained only as long as reasonably needed for the stated purpose. We may retain deidentified or aggregated information where it cannot reasonably identify a person.

Security and account access

We use reasonable administrative, technical, and organizational safeguards. No system is completely secure, and we cannot guarantee that unauthorized access, loss, or misuse will never occur. Adult account holders are responsible for protecting unrestricted credentials, controlling child access on shared devices, ending operator sessions when appropriate, and promptly reporting suspected account compromise. Child operator access should use limited profiles, PINs, or device handoff controls when available.

Your choices and U.S. state privacy rights

You may update certain account information, unsubscribe from marketing, and request access, correction, deletion, or a portable copy of personal information. Residents of states with comprehensive privacy laws may also have rights to opt out of regulated sale, sharing, targeted advertising, or certain profiling; to limit use of sensitive information; and to appeal a denied request. Rights vary, exceptions apply, and we may need to verify your identity. Authorized agents may submit requests where permitted by law.

We will not discriminate against you for exercising an applicable privacy right. We will honor legally required browser-based universal opt-out preference signals when they apply to our data practices. Because we currently state that we do not sell personal information or use it for regulated targeted advertising, such a signal may not change the operation of the Services.

Payment information and automatic payments

Payment providers may process payment credentials under their own privacy terms. If auto-pay is introduced, we will use payment tokens or provider identifiers where practical rather than storing full payment credentials, and we will keep records of the adult account holder's separate authorization, disclosed terms, and cancellation status as required by law. Child operators may not enroll in, modify, or cancel auto-pay.

Legal acceptance records

We may maintain records showing the legal-document versions an adult account holder accepted, the acceptance date and source, user ID, and limited device or network information when reasonably necessary to document consent, prevent fraud, or comply with law. Any such collection will be limited, secured, retained according to need, and described in this Policy.

Third-party links and services

Third-party sites and services have their own privacy practices. This Policy does not govern information handled solely by those third parties.

Changes to this Policy

We may update this Policy as the Services or law changes. We will post the revised Policy and effective date and provide additional notice or request consent when required.

Contact

Lil' Rollout is based in Mount Pleasant, South Carolina. Use the contact method shown in the app or on the applicable operator's public page to submit privacy questions or requests. We may ask for information needed to verify and fulfill a request.