← Cone Zone

Privacy Policy

Last updated 17 August 2026

This explains what we collect, why, where it lives, and what you can tell us to do with it.

The short version.

We do not track where you go. The app shows trucks near a place you chose — your saved spot, or the part of the map you are looking at.

Truck locations are different: an operator's truck position is published on purpose, because that is the whole point. That is business information, not personal movement.

We do not sell your information to anybody, and we never will.

Who is responsible

Cone Zone is operated by Oskar Szydlowski, a sole proprietor in Toronto, Ontario, Canada, trading as Cone Zone. He is the person responsible for the personal information described here.

Questions, requests, or complaints: hello@conezone.app. A person reads that address.

What we collect, and why

If you use Cone Zone to find ice cream

WhatWhy
Your email addressSo you can sign in and we can reach you about your account.
Saved spots — places you choose, like home or a parkTo show you which trucks are near the places you care about. You pick these; we do not detect them.
Your device's location, while you are using the mapTo centre the map and work out how far away a truck is. This is used to answer your request and is not stored as a history of your movements.
Which pins you looked at or tapped "take me there" onSo operators can see how many people looked them up. Operators see counts, not who you are.
Sightings you report, and confirmations you giveTo show the sighting to others and stop the same person voting twice.
A notification token, if you turn notifications onTo tell you when a truck you follow is nearby.

If you run a truck

WhatWhy
Your business name, description, contact email and phoneShown to customers so they can recognise and reach you.
Your mobile food vendor permit number, and a photo of the permit if you send oneTo check you are entitled to trade before we put you on the map.
Where your trucks are while checked inTo show them on the map. This is published deliberately.
Which device started a check-inTo stop somebody else ending or moving your check-in.
Billing detailsHandled by Stripe. We keep an identifier and your plan, never your card number.

Your consent

We collect this because you asked us to provide the service, and you consent by using it. For anything beyond that — notifications, background location — your device asks first and you can say no, or change your mind later in your phone's settings. Saying no to notifications or background location does not stop you using Cone Zone; it just turns off that part.

You can withdraw consent and close your account at any time. Some information may need to be kept where the law requires it, such as records of payments.

Location, specifically

This is the part people care most about, so here it is plainly.

  • Customers. We do not build a picture of where you go. Your location is used at the moment you use the map, to answer the question you asked. Saved spots are places you typed in, not places we noticed you visiting.
  • Operators. While a truck is checked in, its position is recorded and shown publicly — that is the service. Position reports are kept for 30 days and then deleted automatically, so we can show a trading history without keeping a permanent record of a vehicle's movements. Tracking stops when the check-in ends.

How long we keep things

WhatHow long
Truck position reports30 days, then deleted automatically
Community sightingsExpire within hours; rows removed after 7 days
Permit photosDeleted the moment we make a decision. We keep the number and the fact it was checked, not the image.
Account and business informationWhile your account is open, then removed on request
Payment recordsAs long as tax and accounting law requires

Where your information lives

Our database and files are hosted by Supabase in the Canada Central region. Personal information stays in Canada in normal operation.

Some services we rely on are based elsewhere and may process limited information outside Canada, where it is subject to the laws of that country:

  • Stripe — payments and billing for operators
  • Resend — sending our email. Password resets and account messages for everyone, and billing messages for operators. It handles your email address and what the message says.
  • Google Maps — the map itself
  • Expo — delivering push notifications and app updates
  • Cloudflare — serving this website

We share the minimum each one needs to do its job. None of them are permitted to use your information for their own purposes.

Who else sees it

  • Other customers see truck pins and sightings. They do not see who reported a sighting.
  • Operators see how many people looked them up. They do not see who you are, where you live, or your email.
  • We see what is needed to run the service and check permits.
  • Nobody buys it. We do not sell personal information, and we do not run advertising on it.

We would disclose information if the law required us to — a court order, for example — or to protect someone's safety. We would tell you unless we were forbidden to.

Keeping it safe

  • Everything travels encrypted, and is encrypted where it is stored.
  • The database enforces who can see what, row by row, rather than trusting the app to ask nicely.
  • Permit photos sit in private storage that only an administrator can open, through a link that expires in minutes.
  • We never see your card number; Stripe handles it.

No system is perfect. If a breach ever created a real risk of significant harm to you, we would tell you and the Privacy Commissioner of Canada, as the law requires.

Children

Cone Zone is meant for adults, though the thing it points at is very popular with children. We do not knowingly collect information from a child under 13. If you believe a child has given us information, write to us and we will remove it.

What you can ask us to do

Under Canadian privacy law, you can:

  • ask what personal information we hold about you, and get a copy
  • ask us to correct anything wrong
  • withdraw your consent and have your account deleted
  • ask how we have used it and who we have given it to

Write to hello@conezone.app. We will reply within 30 days. There is no charge.

Closing your account has its own page, with the steps and exactly what is removed: how to delete your account.

If you are not happy with our answer

Tell us first — we would rather fix it. If that does not resolve it, you can complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca.

Changes

If we change this policy in a way that matters, we will tell you before it takes effect rather than quietly updating the date at the top.

Contact

hello@conezone.app
Oskar Szydlowski, trading as Cone Zone
Toronto, Ontario, Canada