TropiGo Privacy Policy

Effective date: October 25, 2026.

Who operates TropiGo

This Privacy Policy applies to TropiGo, an online grocery ordering and delivery service offered and operated by Coalinga Foods Inc. d/b/a Tropicana Supermarket. The operator is located at 555 E Elm Ave, Coalinga, California 93210-1512, United States. In this policy, “we,” “us,” and “our” mean Coalinga Foods Inc. d/b/a Tropicana Supermarket.

This policy covers the TropiGo Customer app, TropiGo Operations and TropiGo Driver staff apps (previously listed as Tropicana Operations and Tropicana Driver), and the TropiGo website, including accounts, grocery ordering, fulfillment, pickup, delivery, payments, membership records, and support. The canonical notice is https://tropigo.store/privacy. Mused Ali is the current individual Apple Developer account holder and software publisher; that role and the software-development provider are separate from the grocery operator identified above. This notice does not transfer or extinguish an existing publisher’s or provider’s obligations for historical services or subscriptions.

Information handled by the service

We obtain information from you, your use of TropiGo, the store’s fulfillment activities, and providers supporting those activities. This includes:

• Account information: email address, name, account identifiers, and authentication records used to create, verify, secure, and recover your account.
• Shopping and order information: selected store, cart items, quantities, pickup or delivery choices, requested times, substitutions, fulfilled quantities, prices, taxes, fees, order history, and order status.
• Contact and delivery information: checkout name, telephone number, delivery address, and instructions you choose to provide. Delivery addresses are used to check service eligibility and support fulfillment.
• Payment records: processor identifiers, authorization and payment status, amounts, refunds, and records needed to reconcile purchases.
• Support information: messages and order details you provide when seeking help.
• Staff and fulfillment information: authorized staff and driver account identifiers, email addresses, roles, store access, assignments, fulfillment actions, quantities and weights, status changes, timestamps, support replies, and operational records.
• Uploaded content: product or other photos and content selected by authorized staff. Selected photos may retain embedded metadata, including precise location where present. Do not upload photos or unnecessary personal information you are not authorized to share.
• Driver location: precise device coordinates and related accuracy/timing information shared for an active assigned delivery, linked to the authorized driver and assignment.
• Technical information: account/session and operational records used to authenticate requests, investigate errors, and protect the service. Hosting and payment providers may also handle connection, device, or security information when providing their services.

Please do not include payment-card numbers, security codes, passwords, or unnecessary sensitive information in delivery instructions or support messages.

Why information is used

Information is used to maintain accounts; provide grocery shopping; verify availability, delivery eligibility, and checkout totals; arrange pickup and delivery; process and reconcile payments and refunds; communicate about accounts and orders; answer support requests; secure the service; and maintain necessary transaction and accounting records.

Payments and optional camera access

Grocery checkout uses Stripe. Card details are entered through Stripe’s payment interface. TropiGo’s application database does not store full payment-card numbers or card security codes; it retains the transaction identifiers and status information needed to manage grocery orders and refunds.

If you choose optional payment-card scanning, the app requests camera access to help enter card details in the payment interface. You can enter details manually instead, and manage camera permission in your device settings.

Stripe’s handling of information is described in its Privacy Policy.

Existing membership and subscription records

New TropiGo+ subscription acquisition is disabled in the current Customer release. Existing valid entitlements and previously promised benefits remain protected. Historical membership and subscription records may include account associations, product and transaction identifiers, purchase or renewal status, expiration, and entitlement information used to validate benefits, provide support, and meet applicable obligations. Where a historical subscription was purchased through Apple App Store or Google Play, the relevant store processes its subscription payments and manages renewal or cancellation under its own procedures. This notice does not cancel subscriptions, erase transaction history, change renewal obligations, or remove valid benefits. Account deletion alone does not cancel an app-store subscription.

Information disclosed to others

Information needed for fulfillment is available to authorized store staff and delivery personnel. Verified service providers include Supabase for backend data and authentication; Stripe for grocery payments; Resend for account email; and Sites hosting with Cloudflare infrastructure and traffic protection. Google Maps Platform supports delivery-address geocoding, and California Department of Tax and Fee Administration address services support applicable tax checks. Delivery-address processing does not require access to the Customer device’s GPS. Apple supports iOS app distribution and device services; Expo and Apple support app delivery and notification infrastructure where the relevant feature is enabled. The software-development provider may access information when needed for authorized maintenance or support. Service-provider processing can include operational diagnostics, performance information, and coarse location derived from network connections. These records support functionality and security, not advertising tracking.

We may disclose information when required by applicable law or necessary to address fraud, security incidents, or legal claims.

The current TropiGo release integrations use information for the operational purposes described above. No data-sale integration or advertising/marketing-sharing integration was identified in this release. This statement is limited to TropiGo’s verified implementation; it does not describe unrelated supermarket business practices or override providers’ own privacy notices.

Device location, notifications, and analytics

Driver: after the driver accepts the app’s disclosure, grants the required device permissions, and confirms pickup, the app can share precise device location for the active delivery with authorized dispatch staff and the customer assigned to that order. With the relevant permission, sharing may continue while the app is in the background. It is scoped to the active assignment and stops through the supported delivered/canceled or session-cleanup workflow. Drivers can manage device permissions; limiting them may prevent pickup or location-dependent fulfillment. This is an operational location feature, not a promise of uninterrupted background tracking or background notifications.

Operations: authorized staff can view the location and status of scoped active deliveries. Staff account actions and customer-support conversations are retained as operational records. Photos selected for upload may contain embedded location metadata; the app does not guarantee removal of that metadata.

The initial Customer app uses the delivery address you provide; customer-device GPS tracking is not enabled. Customer push notifications can provide transactional order updates when you enable them. We use your notification token and device/installation identifiers, linked to your account, to deliver those updates and honor notification preferences and suppression controls. Promotional Weekly Ad and Hot Deal push notifications are not enabled in this release. Account confirmation and password-recovery email remain part of the service.

The website uses browser local storage to maintain sign-in, shopping carts, language and fulfillment preferences, and checkout recovery. Clearing or blocking this storage can interrupt those functions. Cloudflare sets a __cf_bm security cookie to help detect automated traffic; see Cloudflare’s cookie explanation. No enabled advertising/marketing analytics or separate crash-reporting integration was identified in the deployed TropiGo application configuration and public page scripts. Operational diagnostics and provider security logs are distinct from advertising analytics; this statement does not mean providers create no technical records.

Account deletion and retention

Operations and Driver staff accounts are organization-managed. Staff can contact their administrator or the support channel below about access, correction, or deletion requests; operational and legally required records may be retained as described here.

Customer app users can initiate account deletion in Account → Delete Account and follow the confirmation steps. You may need to verify your identity or sign in again. If an active order or unsettled payment prevents completion, resolve it or contact support and retry.

Deletion removes your active sign-in and customer profile. Personal information not needed for retained records is removed, anonymized, or disconnected from the active account. Necessary order, payment, refund, accounting, security, and deletion-verification records may remain for the purposes that justify their retention. Retained transaction records support later refunds and payment reconciliation.

Deleting an account does not itself cancel a confirmed order or request a refund. Pending unpaid reservations are cancelled during deletion. It does not necessarily erase records independently retained by a payment provider.

Information is retained only as reasonably necessary for order fulfillment, payment and refund processing, accounting and tax obligations, fraud and security prevention, dispute resolution, and applicable legal or regulatory obligations. The nature and status of the transaction, unresolved disputes, and applicable obligations determine continued retention; this policy does not invent a fixed retention period. Account deletion redacts retained checkout contact/address payloads and detaches customer identity links from financial records. It does not claim immediate erasure of every backup or independently retained provider record. Those records remain subject to their applicable retention requirements and provider practices.

Your choices and privacy requests

You may contact us to request access, correction, or deletion of personal information and to exercise other rights available under applicable law. We may need to verify your identity. Depending on applicable law, additional rights may include portability, restrictions on certain uses, and opting out of sale or sharing. Applicable exceptions may permit retention of necessary records. See the California Attorney General’s privacy-rights information.

Use https://tropigo.store/support for support and privacy requests, and the in-app account controls where applicable. You may also write to Coalinga Foods Inc. d/b/a Tropicana Supermarket at the address above.

Security, children, and changes

The service uses authentication and access controls designed to protect information. No system can guarantee absolute security. Protect your sign-in credentials and contact support about suspected unauthorized access.

TropiGo provides general grocery services. The current signup flow does not request a date of birth or implement age verification, and these documents do not introduce an unapproved minimum age. If you have concerns about information supplied by a child, contact the TropiGo support channel for assistance with the account or a privacy request.

When this policy changes, we will update its effective date and provide any notice required by applicable law.

Contact

Coalinga Foods Inc. d/b/a Tropicana Supermarket
555 E Elm Ave
Coalinga, California 93210-1512
United States
Support and privacy requests: https://tropigo.store/support