GEN Loyalty Privacy Policy

Effective date: November 10, 2026
Version: 2026-11-v1

This Privacy Policy explains how GEN Arizona GC, LLC, doing business as GEN Korean BBQ (“GEN,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information when you use the GEN Loyalty mobile application for iOS and Android (the “App”), join or use the GEN Loyalty program (the “Program”), visit related Program pages, or otherwise interact with us about your membership. This policy is also available at https://genkoreanbbq.com/privacy-policy. GEN restaurants are company-operated. There are no franchise or affiliate locations, and we do not share member information with franchisees or affiliates.

It covers GEN Korean BBQ House restaurants in every state where we operate, including California, Texas, Arizona, Nevada, Hawaii, Washington, Oregon, Florida, New York, New Jersey, North Carolina, Tennessee, and any other state where we open.

This policy does not cover information collected by third-party websites or services we link to, such as The GEN Shop (thegenshop.com), gift card, delivery, or social media platforms, except to the extent those services send us order or account information so we can operate the Program, as described below. Their own privacy policies apply to their services.

1. Information we collect

Information you give us

Account and profile: first name, last name, email address, mobile phone number, and date of birth (month, day, and year).
Age confirmation: at sign-up, a required confirmation that you are 18 or older. This is a self-attestation; we do not verify your age with an ID check.
Marketing choices: whether you agree to receive marketing emails and/or text messages, along with the date, time, method, App version, and source of your consent (or a record that you declined).
Communications: information you include when you contact us, use Help & Support, or report an issue.
Receipt claims: the restaurant location and the dine-in order number you scan or type so we can match it to the corresponding point-of-sale order.

Information collected automatically

Device and App data: device type, operating system, App version, and similar technical data needed to operate, secure, and update the App.
Push notification token: if you allow notifications, a device token used by our push provider to deliver messages to your device.
Camera: if you allow camera access, the App uses the camera to read an order number (for example a barcode or QR code) from a dine-in receipt. We do not upload or store a photo of your receipt in our systems. The camera feed is processed on the device to extract the order number you claim.

The App and the GEN admin portal do not use a third-party analytics or crash-reporting SDK.

If you visit genkoreanbbq.com, we may also collect device and usage data, approximate location inferred from your IP address, and cookies and similar technologies, as described in Section 6.

We do not use the App camera as a general photo library, and we do not collect precise GPS location as a stored profile field.

Information from third parties and service providers

Authentication: our backend, Supabase, stores your account and sends one-time sign-in codes to your mobile number through our SMS provider, Twilio.
Dine-in point of sale (Revel): when you claim points, we look up the matching paid/closed order to confirm the restaurant, order number, eligible spend, and order date. We do not receive your full payment card number.
The GEN Shop / Shopify (thegenshop.com): when a paid To-Go pickup or shipped Shop order is reported to us, we may receive order identifiers, food subtotal, tax, tip, shipping amounts, fulfillment and payment status, and the phone number used at checkout (and, if present, a member identifier on the order) so we can award or reverse Program points.
Paid memberships (Payarc): if you buy a Black, Platinum, or Diamond membership, our billing provider processes your payment. We receive subscription status, plan, renewal, cancellation, and similar billing events. Card numbers are entered in Payarc’s hosted fields, not stored in the App.
Push delivery (Expo): we use Expo’s push service to deliver notifications to devices that have granted permission.
Legacy program: if your account was imported from our prior loyalty vendor, Qubriux, we received historical membership data such as name, contact details, date of birth, prior point balance, and original join date, as provided in the import file. Marketing opt-in is not assumed from that import until we have a Program consent record for you.
Service providers that host, secure, or help us operate the App, Program, email, or text messages.

2. How we use information

We use personal information to:

create and manage your GEN Loyalty account, including phone-number sign-in and your confirmation that you are 18 or older;
track GPoints, tiers, rewards, welcome offers, birthday bonuses, and membership perks;
match dine-in receipt claims to Revel orders, and match paid The GEN Shop orders to your account by member identifier or checkout phone number;
send transactional messages, including one-time sign-in codes, account and security messages, points or expiry reminders, and order- or reward-related notices;
send marketing emails and text messages you have agreed to receive, and honor opt-outs;
send push notifications you have allowed, including Program, offer, and account messages;
detect, prevent, and respond to fraud, abuse, duplicate claims, refunds and voids, and security incidents, including claim lockouts, points clawbacks, staff review flags, and manual points adjustments;
operate, maintain, secure, and improve the App and Program;
honor account deletion requests;
comply with legal obligations and enforce our Program Terms of Service (https://genkoreanbbq.com/loyalty-terms); and
carry out any other purpose we describe when we collect the information, with your consent where required.

3. How we disclose information

We do not sell your personal information for money. We disclose personal information only as follows:

Service providers that process information on our behalf under contracts that restrict their use of it, including:
- Supabase (account, database, and authentication hosting);
- our SMS provider, Twilio, for one-time codes and, if you opt in, marketing texts;
- Revel (dine-in order lookup);
- Shopify / The GEN Shop (order notifications and, where used, checkout);
- Payarc (paid membership billing);
- Expo, Apple, and Google Firebase Cloud Messaging (push notification delivery);
- Klaviyo (marketing email delivery);
- Google Maps, to show restaurant locations in the App (Google may collect technical data such as IP address when delivering map content; see https://policies.google.com/privacy).
GEN company-operated restaurants, to deliver Program benefits and service (for example, to verify a reward code when you redeem in a restaurant). We do not share this information with franchisees or affiliates.
Our staff, through the GEN admin portal, to support members, review flagged claims, and adjust points when authorized.
Legal and safety: to comply with law, subpoenas, or other legal process; to protect the rights, property, or safety of GEN, our guests, employees, or others; and to investigate fraud.
Business transfers: in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our business or assets.
With your consent or at your direction.

We do not sell or share mobile numbers or SMS opt-in data with third parties for their own marketing purposes. This data is shared only with service providers that help deliver our messages.

4. “Sale” and “sharing” under state privacy laws

Some state laws define “sale” or “sharing” (for cross-context behavioral advertising) broadly. The App itself is not used to place advertising cookies. If we use advertising cookies or pixels on our websites, that use may count as a “sale” or “sharing” under those laws. You can opt out through the “Your Privacy Choices” link at https://genkoreanbbq.com/privacy-policy#your-privacy-rights, or as described in Section 12. We also honor Global Privacy Control (GPC) browser signals on our website as a valid opt-out request for the browser or device that sends them. We do not knowingly sell or share the personal information of consumers under 16.

5. Text messages, email, and push notifications

Transactional texts. When you sign in or manage your account, we may send one-time passcodes and other account or security texts to the number you provide. These messages are not marketing, and they are required to use phone sign-in.

Marketing texts. If you opt in, the Program may send recurring automated marketing and informational text messages. Consent is not a condition of purchase. Promotional messages (marketing texts and offer pushes combined) are limited to a maximum of one per member per day and three per member per week. Message and data rates may apply. Reply STOP to cancel or HELP for help. See our SMS Terms at https://genkoreanbbq.com/sms-terms for full details.

Email. If you opt in, we send marketing emails using Klaviyo. You can unsubscribe from marketing email using the link in any message, or by updating your choices in the App where that setting is offered.

Push notifications. If you allow notifications, we may send Program, offer, reward, and account messages to your device. You can turn these off in your device settings or, where offered, in the App. You may still receive in-App messages about your account. Marketing and offer messages (offer pushes and marketing texts combined) are limited to a maximum of one per member per day and three per member per week, and are not sent during quiet hours of 9:00 p.m. to 9:00 a.m. in your local time zone (or the stricter hours required by your state). Transactional messages, including one-time sign-in codes and receipt or order notices, are exempt from these limits and may be sent at any time.

6. Cookies and similar technologies

We and our providers use cookies, local storage, and similar technologies on genkoreanbbq.com (the “Site”) for two purposes:

Site functionality (always on): essential storage that makes the Site work, such as remembering that you closed a sign-up banner and remembering your cookie choice.
Analytics and advertising (only with your consent): tools that help us understand traffic and measure marketing, such as Google Analytics or advertising pixels, if we add them in the future.

When you first visit, a cookie notice lets you Accept or Decline analytics and advertising cookies. We store your choice in your browser’s local storage, and we load analytics or advertising tags only if you accept. To change your choice, clear the Site’s data in your browser and choose again, or contact us. If your browser sends a Global Privacy Control (GPC) signal, we treat it as a Decline and as a valid request to opt out of the sale or sharing of your personal information for that browser or device. You can also block or delete cookies in your browser settings, though parts of the Site may then work less well. Because there is no common standard for “Do Not Track” signals, we respond to GPC rather than to Do Not Track. Hosting and map providers, such as Webflow and Google Maps, may collect technical data such as IP address when they deliver content (see https://policies.google.com/privacy).

7. Camera and receipts

The App requests camera permission only so you can scan a dine-in order number. You may also type the number. We store the claim details needed to award and audit points (including restaurant, order number, eligible spend, and claim outcome). We do not keep a receipt photo in our systems.

8. Automatic matching of The GEN Shop orders

For paid orders placed at The GEN Shop (thegenshop.com), including To-Go pickup and shipped Shop orders, we may award GPoints automatically when the order is reported to us as paid. We first use a member identifier on the order if one is present. Otherwise we match the checkout, billing, or shipping phone number to a single active Program account.

If we cannot find a unique match — for example, if no phone is provided, the number is not on an active account, or more than one active member uses the same number — we do not award points automatically. Unmatched orders may be stored (including a hashed phone value) so we can review them. A different phone number at checkout will not earn points for your account.

We use the food subtotal (after discounts, and excluding tax, tip, and shipping) to calculate points. Refunds and cancellations may reverse points already awarded, as described in the Program Terms at https://genkoreanbbq.com/loyalty-terms.

9. Imported (legacy) members

If you were a member of our prior loyalty program operated with Qubriux, we may have created a Program account from that import. Prior points were converted at a rate of one prior point to one GPoint. We keep the original join date where it was provided. The points-expiry clock for an imported balance starts on the import date, not on the original last-visit date. We do not treat a legacy record as consent to marketing until a Program consent is recorded.

10. Data retention and security

We keep personal information for as long as your account is active, as needed to provide the Program, and as required for legitimate business or legal purposes, such as tax, accounting, fraud prevention, and dispute resolution. We then delete or de-identify it.

Claim, ledger, order, billing, consent, and similar records may be retained after an account is closed or deleted for as long as needed for those purposes (for example, to show that points were awarded or reversed, or that an account was deleted).

We use reasonable administrative, technical, and physical safeguards, including encrypted transmission and restricted access for staff. No system is completely secure, and we cannot guarantee absolute security.

11. Your choices and account deletion

You can update certain profile information in the App. Date of birth is set once by you, and staff can correct it if needed.

You can delete your account in the App: go to Account, then Privacy & Security, and choose Delete Account. Phone verification is required. If you have a paid membership, we cancel it immediately with Payarc, with no refund, before the account is deleted. Your remaining GPoints are zeroed and are not paid out. We clear your name, email, phone, and date of birth from the member profile and mark the account deleted. Some records are kept as described in Section 10.

You may also request deletion by emailing support@genbbqoffice.com, calling (562) 356-9929, or writing to us at the address below. App Store and Google Play require an in-App deletion path, which is the method above.

12. Your privacy rights

Depending on your state of residence, you may have the right to:

Know / access the personal information we have collected about you, and the categories of sources, purposes, and recipients;
Correct inaccurate personal information;
Delete personal information, subject to exceptions;
Data portability: receive a copy of your information in a portable format;
Opt out of the sale or sharing of personal information, targeted advertising, and profiling that produces legal or similarly significant effects;
Limit the use of sensitive personal information (we do not use sensitive personal information to infer characteristics about you); and
Non-discrimination: we will not deny service, charge different prices, or provide a different quality of service because you exercised a privacy right. The Program is a financial incentive program (see Section 13).

These rights apply to residents of states with comprehensive privacy laws, including California (CCPA as amended by the CPRA), Colorado, Connecticut, Delaware, Florida (for covered businesses), Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia, as those laws take effect. We may extend similar choices to all U.S. guests as a matter of courtesy.

How to make a request: email support@genbbqoffice.com, call (562) 356-9929, or write to us at 11480 South St. Ste. 205, Cerritos, CA 90703. You may also use in-App account tools, including account deletion, where available. We will verify your identity by matching information you provide (such as your email and phone number) against our records. You may use an authorized agent; we may ask for proof of the agent’s authority and verify your identity directly. We respond within the time the law requires, usually 45 days, with possible extensions where permitted.

Appeals: if we deny your request, you may appeal by replying to our decision or emailing support@genbbqoffice.com with the subject “Privacy Appeal.” If you are still unsatisfied, you may contact your state Attorney General.

Nevada: Nevada residents may submit a request to opt out of sales of covered information to support@genbbqoffice.com.

Washington and Nevada consumer health data: we do not intentionally collect consumer health data as defined by the Washington My Health My Data Act or Nevada SB 370. If you voluntarily share an allergy or dietary need with a restaurant, we use it only to serve you.

13. Notice of financial incentive (California and other states)

GEN Loyalty offers GPoints, rewards, birthday offers, welcome offers, and (for paid tiers) membership perks in exchange for your name, email, phone number, and date of birth. We reasonably estimate the value of your data to be about equal to the value of the benefits provided, based on the expenses we incur to provide the Program. You opt in by creating an account. You may withdraw at any time by deleting your account or contacting us at support@genbbqoffice.com. Withdrawing forfeits unredeemed GPoints and unused offers, and a paid membership is canceled immediately with no refund, as described in the Program Terms at https://genkoreanbbq.com/loyalty-terms.

14. California-specific disclosures

In the past 12 months we have collected the following categories of personal information, where applicable to you: identifiers (name, email, phone, account and device identifiers); personal information under Cal. Civ. Code § 1798.80 (name, phone); characteristics of protected classifications (age, through date of birth); commercial information (Program activity, claims, The GEN Shop orders linked to rewards, and billing status); internet or other electronic network and App activity; and, on our website, approximate geolocation. We collect them from you, your devices, and our service providers, for the purposes in Section 2. We disclose them to the categories of recipients in Section 3. All the above categories exclude text messaging originator opt-in data and consent; this information won’t be shared with any third parties. We do not collect sensitive personal information beyond what is needed for account login (your phone number used for one-time sign-in). Shine the Light: California residents may ask, once per year, for information about any disclosure of personal information to third parties for their own direct marketing; we don’t make such disclosures.

15. Children’s privacy

The App and the Program are intended for adults and are not directed to children under 13. We do not knowingly collect personal information from children under 13 in violation of the Children’s Online Privacy Protection Act (COPPA). If a birthday on an account appears to be under 13, we pause the account and do not delete it. A parent or GEN staff can correct a wrong birthday. You must be at least 18 to join GEN Loyalty. At sign-up, you must confirm that you are 18 or older. This is a self-attestation; we do not verify your age with an ID check. If you believe a child has given us personal information, contact support@genbbqoffice.com and we will delete it.

16. International visitors

The App and Program are operated in the United States and intended for U.S. residents. If you access them from elsewhere, your information will be processed in the United States.

17. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version in the App with a new effective date and version (for example, 2026-11-v1) and, where required by law, notify you or ask for your consent. Continued use after an update means you accept the revised Policy, except where the law requires a different consent.

18. Contact us

GEN Arizona GC, LLC, doing business as GEN Korean BBQ
Attn: Privacy
11480 South St. Ste. 205
Cerritos, CA 90703
Email: support@genbbqoffice.com
Phone: (562) 356-9929