Privacy Policy

Effective date: August 29, 2026

This policy governs the Ken's BiLo Foods mobile app and customer web portal (together, the "Service"). It does not cover third-party sites or services we link to or that you use alongside the Service — see "Third-Party Services" below.

1. Who We Are

Ken's BiLo Foods ("we," "us," "our") operates the Service described here, including a mobile app, a customer web portal, and related email/SMS/push communications. If you have questions about this policy or how we handle your information, see "Contact Us" below.

2. Information We Collect

We collect information in three ways: what you give us directly, what's generated by using the Service, and what your device provides with your permission.

a. Information you provide

Account information — name, email address, phone number, and password when you create an account.
Optional profile information — mailing address, date of birth, and preferred store, if you choose to provide them.
Communication preferences — your choices about receiving marketing email, text messages, and mail, and records of that consent (see Section 5).
Anything you submit through a form in the Service, such as a survey response.

b. Information collected automatically

Usage data — which screens/pages you view and which features you use within the Service, used only to understand and improve the Service. This data stays internal to us; it is never sold or shared with advertisers or data brokers, and we do not use it to track you across other companies' apps or websites.
Device push token — a unique identifier your device generates so we can deliver push notifications to it. This is shared only with our push-notification delivery provider (Google Firebase) strictly to deliver the notification — not for advertising.

c. Information from your device, with your permission

Location — if you grant location permission, we use your device's location to find nearby stores and estimate distance. A location lookup is used for that single request and is not stored tied to your account. You can deny or revoke this permission at any time in your device settings; declining it does not limit your ability to use the rest of the app.

3. How We Use Your Information

To create and maintain your account and let you sign in across devices.
To operate core features: showing your preferred store, weekly ad, offers, and order/redemption history.
To send transactional communications related to your account or an offer.
To send marketing communications (email, SMS, and/or mail) — only if you've opted in, and only from us, never on behalf of unrelated third parties (see Section 5).
To send push notifications, if you've granted notification permission.
To understand how the Service is used so we can maintain and improve it (first-party analytics only).
To detect, prevent, and address fraud, abuse, security incidents, and technical issues.
To comply with legal obligations.

We do not use your information for third-party advertising, and we do not sell your personal information.

4. Location Services

The app requests location permission only to help you find nearby stores. You control this permission entirely through your device's operating system settings (iOS: Settings → Privacy → Location Services; Android: Settings → Apps → Permissions). You may use the app without granting location access by browsing or searching for a store manually instead.

5. Marketing Communications — Email, SMS, and Mail

We only send you marketing email, text messages, or mail if you've affirmatively opted in (for example, by checking a consent box when creating an account). You may withdraw consent at any time:

Email — click "unsubscribe" in the footer of any marketing email, or update your preferences in your account settings.
Text messages — reply STOP to any message to opt out immediately, or reply HELP for help. Message and data rates may apply. Message frequency varies. Carriers are not liable for delayed or undelivered messages.
Mail — update your preferences in your account settings.

Text messaging opt-in data and consent are never shared with third parties or affiliates for marketing or promotional purposes. Your mobile number and consent status are used solely to deliver messages you've requested from us and are shared only with our SMS delivery provider (see Section 6) strictly to send those messages on our behalf.

Withdrawing marketing consent does not affect transactional messages reasonably necessary to your account or a transaction you've initiated (e.g., a one-time verification code), where permitted by law.

6. How We Share Information

We do not sell your personal information. We share it only in these limited circumstances:

Service providers, who process information on our behalf solely to help us operate the Service, under contractual confidentiality and data-protection obligations:
- Our SMS provider, to deliver text messages you've opted into.
- Google Firebase, to deliver push notifications to your device.
- Our hosting/infrastructure providers, to run the Service.
Legal reasons — if required by law, subpoena, or legal process, or to protect the rights, property, or safety of us, our users, or the public.
Business transfers — if we're involved in a merger, acquisition, or sale of assets, your information may transfer as part of that transaction, subject to this policy (or a successor policy you'll be notified about).
With your direction — anywhere else, only with your consent.

We do not share your information with third parties for their own advertising purposes.

7. Third-Party Services

The Service links to or embeds certain third-party services for your convenience — for example, online grocery ordering is provided through a third-party partner. When you use those services, you're subject to their own privacy policies and terms, not this one. We encourage you to review them. We are not responsible for the privacy practices of third-party services.

8. Your Choices and Rights

Regardless of where you live, you can:

Access and update your account information at any time in account settings.
Delete your account yourself at any time from Account Settings (in the app or on the web), or by contacting us (see Section 14); we'll delete or anonymize your personal information except where we're legally required or permitted to retain it (e.g., records needed for tax, fraud-prevention, or legal-compliance purposes).
Opt out of marketing at any time, as described in Section 5.
Control location and notification permissions through your device settings.

If you are a resident of a U.S. state with a comprehensive consumer privacy law, you may also have the right to know what personal information we've collected about you, correct inaccurate information, request a portable copy of it, and appeal a denied request. We extend these rights to all users on a good-faith basis, whether or not your state's law currently applies to us. To exercise any of these rights, contact us using the information in Section 14; we'll respond within the time required by applicable law (or, where none applies, within 45 days). We do not discriminate against anyone for exercising these rights.

9. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we'll delete it.

10. Data Retention

We retain personal information for as long as your account is active and as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed for these purposes, we delete or anonymize it.

11. Security

We use reasonable administrative, technical, and physical safeguards designed to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we experience a data breach affecting your personal information, we will notify affected individuals and any required regulators as required by applicable law, including Pennsylvania's Breach of Personal Information Notification Act.

12. International Users

The Service is intended for use within the United States. If you access it from outside the United States, you understand your information will be transferred to and processed in the United States.

13. Changes to This Policy

We may update this policy from time to time. If we make material changes, we'll notify you by updating the effective date above and, where appropriate, through the Service or by email. Your continued use of the Service after a change takes effect constitutes acceptance of the updated policy.

14. Contact Us

Questions about this policy, or requests regarding your personal information, can be sent to:

Ken's BiLo Foods
2423 Betts Avenue Northern Cambria, PA 15714
kensbilo.com/contact-us