Legal
Last updated: April 2026
BrightBites by Lighthouse Enrichment is operated by Gulf of America Business, a Wyoming limited liability company ("BrightBites," "we," "us," or "our"). We operate a three-sided marketplace connecting K-12 schools, local food vendors, and parents for pre-ordered healthy school meals. Our platform is accessible at brightbites.io.
We collect information you provide directly, including: name, email address, phone number, and payment information when you create an account or place an order. For student accounts, we collect name, grade, classroom, and allergy information provided by parents or guardians. We also collect information automatically when you use our platform, including device type, browser type, IP address, and usage data through Vercel Analytics.
We use your information to process meal orders, manage your wallet and payment history, send order confirmations and pickup reminders, operate school fundraising programs, detect allergy conflicts at checkout, and improve our platform. We do not sell your personal information to third parties.
If you provide your phone number and opt in to SMS notifications, we may send you text messages including order confirmations, pickup reminders, wallet alerts, and school fundraiser updates. Message and data rates may apply. Message frequency varies. You can opt out at any time by replying STOP to any message. Reply HELP for help. SMS consent is not required to use BrightBites and is collected separately from other agreements.
BrightBites serves K-12 schools. Student records including name, grade, and allergy information are collected only from parents or guardians — never directly from students. We comply with the Children's Online Privacy Protection Act (COPPA). Parents may request access to, correction of, or deletion of their child's information by contacting us at privacy@brightbites.io. We do not knowingly collect personal information directly from children under 13.
We share your information with school administrators to facilitate meal service, with food vendors to fulfill orders, with Stripe for payment processing, and with Twilio for SMS delivery. We do not sell personal data. We may disclose information when required by law.
We retain account information while your account is active. Order history is retained for 7 years for financial compliance. You may request account deletion by contacting privacy@brightbites.io.
We use industry-standard security measures including encrypted connections (HTTPS), row-level security in our database, and Stripe for payment processing. No payment card data is stored on our servers.
You have the right to access, correct, or delete your personal information. To exercise these rights, contact us at privacy@brightbites.io. Parents may request removal of student records at any time.
Gulf of America Business (BrightBites by Lighthouse Enrichment) Email: privacy@brightbites.io Website: https://brightbites.io