Privacy policy
Last updated October 4, 2026
LunchDock lets shift workers order meals ahead and pick them up at their work site during their break. LunchDock is an assumed business name of Alaox Holding, LLC (registered with the Indiana Secretary of State), which is responsible for your information. This page explains what we collect, why, who sees it, and how long we keep it.
What we collect
| What | Why |
|---|---|
| Name, email, password (stored only as a one-way hash), optional mobile number, home site, preferred language | Your account, the name on your bag, and showing the app in your language |
| Orders: dishes, notes to the kitchen, site, break time, totals, tips, promo codes, and each status change | Making and delivering your food, receipts, and fixing problems |
| Payments: card brand and last 4 digits, and payment status. Card numbers are handled by Stripe, our payment processor; we never see or store them | Charging for orders and refunds |
| Your LunchDock balance and its history (money added, credits, refunds, employer and invite credits) | Paying for orders with your balance |
| Weekly meal plans and break reminders you set up | Placing your plan's orders and reminding you before ordering closes |
| Notification subscriptions for your devices (if you turn notifications on) | Sending reminders and "your food is here" alerts |
| Your text-message choice, the consent text you agreed to, and when | Texting you when your food is dropped off, only if you opted in |
| Drop-off photos taken by our couriers, and where they left the bags | Proof and directions for picking up your bag |
| Problem reports you send, and our replies | Resolving issues with an order |
| Catering and restaurant-partner requests (name, company, email, phone, details) | Replying with a quote or about partnering |
| Sign-in records (time, network address and browser type) and a log of staff actions | Security and preventing misuse |
| The warehouse you name if yours isn't on LunchDock yet (company, warehouse name or code, city, state), and when you joined its waiting list | Planning where we open next, and telling you by email and notification when we're there |
| Daily visit counts by approximate city, worked out from your internet connection. We don't store your network address or exact location, and the counts aren't linked to you | Seeing where people want LunchDock, so we can plan new sites |
We don't collect your precise location, and we don't use advertising or tracking cookies. To plan where to open next, we count each device's visit once a day by the approximate city of its internet connection. We use a code that changes every day and is deleted after two days, so a visit can't be traced back to you. If your browser sends a "Do Not Track" or Global Privacy Control signal, we don't count your visit. The app uses one cookie to keep you signed in, and your device stores a few settings (your cart, language, last site).
Who sees it
- The restaurant making your order sees your bag name, dishes and notes.
- Dispatch and your courier see your bag name and order code. Dispatch also sees your email and phone number when you report a problem, so they can contact you.
- Other customers in the same delivery may see your bag and its label in a drop-off photo, just as they would at the pickup point.
- Your employer, if you join a meal program they pay for, sees only totals (how many people joined and how much credit was used). Never your name, orders or what you ate.
- A coworker who invited you sees only that someone joined with their code, not who.
- Coworkers on the same waiting list see only how many people are waiting for that warehouse, never who. If you share your invite link, whoever opens it sees the warehouse you're waiting for, but not your name.
- Service providers that run parts of the service for us: Cloudflare (hosting, photo storage and email), Neon (database), Stripe (card payments), Twilio (text messages, only if you opt in), and your browser's push service (Google, Apple, Mozilla or Microsoft) to deliver notifications you turned on.
We don't sell or rent your information, and we don't share it for advertising. We don't share your mobile number with anyone for their marketing.
How long we keep it
- Drop-off photos: deleted automatically after 90 days.
- Records of which notifications we sent: deleted after 30 days.
- Database backups: kept for 35 days.
- Visit counts by city: kept as totals. The daily code used to count each device once is deleted after two days.
- Your waiting list entry: until you leave the list, or until we open at your warehouse and add it to your account as your home site.
- Your account, orders and balance history: while your account is open. Ask us to close it and we'll delete or anonymize your personal information, keeping only what we must for tax, accounting and payment records.
Your choices
- Update your name, phone number, home site, language and waiting list warehouse (or leave the waiting list) in the app's Account tab.
- Turn notifications and texts on or off in Account. Reply STOP to any text to stop texts.
- To get a copy of your information, correct it, or delete your account, email support@atozcook.com.
Security
Passwords are stored as one-way hashes, staff accounts use two-step sign-in, all traffic is encrypted, and access is limited to what each role needs.
Children
LunchDock is for adults at work. We don't knowingly collect information from anyone under 16.
Changes
If we change this policy in a way that matters, we'll tell you in the app before it takes effect.
LunchDock is an assumed business name of Alaox Holding, LLC, registered with the Indiana Secretary of State. LunchDock is independent and isn't affiliated with or endorsed by Amazon or any other employer.
Privacy · Terms · Refunds · Text terms · Open the app