Privacy Policy

Last Updated: December 22, 2022

Blue Apron, LLC and our subsidiaries and other affiliates (collectively, “Blue Apron,” “we,” “us” or “our”) are committed to protecting your privacy.  This Privacy Policy describes how we collect, use, and disclose the Personal Information that you provide during your online and offline interactions with us in using our websites that link to this Privacy Policy (the "Sites") or mobile application, or that we otherwise collect from and about you.  We refer collectively to all of the activities through which we collect information from and about you as the "Services."

As used in this Privacy Policy, “Personal Information” means any information that can be used to individually identify a person or household, and may include, but is not limited to, name, email address, postal or other physical address, credit or debit card number, title, and other information reasonably linkable to an individual or household with or without other identifying information in our possession.

We may update this policy from time to time, and we will provide notice of any changes as required by applicable law, which may include, for example, by sending an email notification, providing notice through the Sites or updating the “Last Updated” date at the beginning of this Privacy Policy.  We encourage you to review this Privacy Policy whenever you use or access the Sites or otherwise interact with us to stay informed about our information practices and the ways you can help protect your privacy.

This Privacy Policy contains the following sections:
  • Categories of Personal Information we collect
  • How we use Personal Information
  • Cookies, Analytics, and Advertising
  • Our disclosure of Personal Information
  • Rights and controls of your Personal Information
  • Data retention
  • Security of your personal Information
  • Links to other sites
  • Additional privacy information for California Residents
  • Contact Us

Categories of Personal Information we collect

We may collect the following categories of Personal Information from or about you as explained in this Section.

Information collected from you

We collect many of the categories of Personal Information listed below when you affirmatively give them to us or transact business with us.  You may always choose not to provide Personal Information to Blue Apron, but note that you may be unable to access certain services or features if they require Personal Information that you have not provided.  We collect:   
  • Identifiers and Contact Information: Information commonly used to identify you, such as your name, user name, physical address, email address, phone numbers, and other similar identifiers. 
  • Transaction, Subscription and Customer Service Information: Information about your Blue Apron subscription, purchases or receipt of meal ingredients or other products we offer, or your use of our Sites (collectively, our “Services”). This information includes:
    • delivery and dietary preferences
    • information related to returns, refunds and cancellations, and
    • information about gift orders and referrals 
    • information about your interactions with technical and/or customer support
  • General Preference Information: General information about your product and service preferences, including your interest in products or services offered by third parties, and your demographics, behavior, and predispositions.
  • Limited payment information:  When you pay for a Blue Apron Service, your payment information is collected and processed by a payment processing company that is responsible for maintaining your financial account information.  We never get your full credit card information. More info below.
  • Other Information You Choose to Provide: such as when you communicate with us using social media; participate in a survey, contest, promotion or interactive area of the Sites; or when you request technical or customer support.
  • Basic account information related to your Facebook, Apple, or other third party account if you choose to register and log in using such an account: This information includes your username and information from the third party service about whether you entered your password correctly. (These services are designed so that Blue Apron doesn’t see your actual password for these services – just whether you got the password right or wrong.)

Information collected from your device and use of the Services

We also collect information automatically when you interact with our Sites.  This information includes:
  • Device Identifiers and Information: Information about your device, network, and internet connection, such as your IP address(es), MAC address, other device ID (UDID), referring/exit pages, device type, operating system type and version, browser type, and client version.       
  • Usage Activity Information: Information about your usage of or other interaction with our Services.  This information includes actions taken, date and time, frequency, duration, quantity, and performance information related to logins, clicks, messages, how you reached our Services, and other website and feature usage information.
When you visit our Sites from a mobile device, we collect information about the mobile device you use to access or use the Sites, including the hardware model, operating system and version, unique device identifiers, mobile network information and information about your use of our mobile applications. With your consent as required by applicable law, we may also collect information about the precise location of your device and access and collect information from certain native applications on your device (such as your device’s camera, photo album and phonebook applications) to facilitate your use of certain features of the Sites.  

Blue Apron and our third-party service providers may collect this automatic information using methods such as cookies and tracking technologies (further described below).

Information collected from other sources

We may receive Personal Information about you from other sources, such as business partners, marketers, researchers, analysts, social network services, and other parties to help us supplement our records. We may also receive Personal Information that third parties collect in other contexts, such as when you visit other websites that are unaffiliated with Blue Apron and information collected from you offline.
   
We may also collect information about you from other Blue Apron users.  For example, a Blue Apron user can use our referral program to tell a friend about our Services, providing the friend’s name and email address in the process.  A particularly generous Blue Apron user might send a friend a gift or gift certificate, providing the friend’s name, email address, and mailing address.  Blue Apron users are responsible for obtaining any necessary consent from you before submitting your Personal Information to us.

 
Cookies, Analytics, and Advertising

Blue Apron and the vendors we work with – including web analytics vendors, online advertising networks, and other companies that help us market Blue Apron Services – use various tracking technologies, including cookies and web beacons, to collect information about you when you interact with our Sites, including information about your browsing and purchasing behavior. Cookies are small data files stored on your hard drive or in device memory that help us improve the Sites and your experience, see which areas and features of the Sites are popular, and count visits. Web beacons are electronic images that may be used on the Sites or in emails and help deliver cookies, count visits and understand usage and campaign effectiveness. Vendors we work with may combine the Personal Information they collect when you use our Sites with information that they collect from other sources.

You can adjust certain settings, such as by turning off cookies in your browser or adjusting privacy settings in our apps, to reduce the amount of Personal Information we passively collect from you when you use our Services.  Because we use these features to enhance your user experience (such as using cookies to remember your user name when you visit our Sites or by using push notification in our Apps to let you know the status of your Blue Apron orders), disabling such features may impact our Sites’ functionality.

Blue Apron strives to provide you with relevant, value-added content in our online advertisements. We work with online analytics and advertising partners to: (1) better understand the use of our Services so that we can improve our Services; and (2) deliver Blue Apron advertisements that are more tailored to you both on our Services and on third-party Services.

Our partners may also place cookies, pixel tags and similar technologies on many online services, including ours. They use these technologies to collect information about your activities on these services in order to deliver you more relevant advertising. For example, they may use the information they collect from their cookies on our Services to identify Blue Apron products and services you might be interested in and to recognize your device so they can show you relevant Blue Apron advertisements while you are using our Services and other services. Additionally, we sometimes provide basic information we collect (such as email addresses) to service providers, who may “match” this information in hashed form to cookies, mobile ad identifiers, and other proprietary IDs, in order to provide you with more relevant ads when you visit other online services.

If you are interested in more information about tailored browser advertising and how you can generally control cookies from being put on your devices to deliver tailored advertising, you may visit the Network Advertising Initiative’s Consumer Opt-Out link or the Digital Advertising Alliance’s Consumer Opt-Out link to opt out of receiving tailored advertising from companies that participate in those programs. For additional ways to opt-out of targeted advertising activities under applicable law, see the “Rights and Choices” section below.  Please note that these opt-outs apply per browser and per device, so you will have to opt out for each device—and each browser on each device—through which you access our Services.

How We Use Personal Information

We collect and use the categories of Personal Information listed above in order to:
  • deliver you delicious meals and otherwise provide our Services
  • communicate with you about your subscription and our Services, such as by responding to your requests, providing customer support, and troubleshooting
  • provide customer support 
  • advertise and market the Services to you
  • engage in business operations in support of our Services, such as auditing, security, analytics, improvement of the Services, resolving crashes, preventing fraud, invoicing and accounting, sales, and research and development
  • establish, exercise, or defend our legal rights, and take steps that we reasonably believe to be necessary to protect the safety, security, and rights of Blue Apron, its employees, service providers, and others, or as otherwise required by law.
Our disclosure of Personal Information

We may share Personal Information about you in the following ways:

  • Service providers: These are other companies that we share information with for the purposes of providing, running, marketing, personalizing, improving, operating, and maintaining our Sites and Services. Specifically, these entities may assist us in:
    • Managing your account and sending you related information, including confirmations, updates, technical notices, security alerts and support and administrative messages
    • Fulfilling Service requests
    • Protecting against, investigating, and deterring fraudulent, harmful, unauthorized  or illegal activity
    • Providing reports to you based on information collected from your use of our Services
    • Processing your orders and delivering the Services that you have ordered
    • Providing support and assistance in connection with your use of our Services
    • Providing the ability to contact you and provide you with shipping and billing information and other Sites, Services, recipes, services, offers, surveys, events and other news and information we think may be of interest to you
    • Facilitating contests, sweepstakes and promotions and processing and delivering entries and rewards
    • Enhancing your experience with our Sites 
    • Sending you messages on our behalf requesting information about the Services (such as surveys)
    • Responding to your comments, questions and requests and providing customer service
    • Complying with our contractual and legal obligations, resolving disputes with users, enforcing our agreements
    • Monitoring and analyzing trends, usage and activities in connection with the Sites
    • Linking or combining Personal Information from our various sources of Personal Information (described above) to help us understand your needs and provide you with a better experience
  • Advertising partners: These businesses offer services to Blue Apron, like serving advertisements on our behalf across the Internet  and providing analytics services. For more information about opting out of this activity, go to the "Rights and Controls" section below.
  • Legal purposes: We disclose Personal Information to courts, law enforcement, and other appropriate third parties when the disclosure is required or authorized by law or reasonably necessary for the protection of our property or legal rights.     
  • Business transactions: As our business grows, we may buy, merge, or partner with other companies. In such transactions (including in contemplation of such transactions), information may be among the transferred assets. If a portion or all of our assets are sold or transferred to a third party, customer information (including your email address) would likely be one of the transferred business assets.   
  • Other entities with your consent: If you have consented to our disclosure of your information or direct us to disclose your information, we will also do so consistent with your consent or direction.
Rights and Controls over your Personal Information

We do our best to give you reasonable controls over the Personal Information we collect from or about you as set forth below.  If you reside in California, Colorado, Connecticut, Utah or Virginia, you may have legal rights with respect to your Personal Information.  In order to protect the privacy of all Blue Apron customers and potential customers from across the United States, we will make our best effort to honor requests made by residents of other states as well.  Here are the types of requests you can make: 
  • information about the categories of Personal Information we process, our uses of your Personal Information, our sources of such information and our disclosure of such information
  • access to the Personal Information that Blue Apron has collected about you during the previous 12 months and a copy of certain Personal Information in a portable format
  • Correct certain Personal Information we have about you
  • Deletion of the Personal Information we have about you.


You may make a request by calling 1-888-278-4349 or emailing privacy@BlueApron.com.  Before we disclose, correct or delete Personal Information in response to any of these requests, we will need to verify your identity.  If you have an account with Blue Apron, we will verify your identity by having you log-in to your Blue Apron account.  If you do not have an account with us, please provide your email address.  Depending on the nature of your request, we may contact you for further information if appropriate to verify your identity.  Note, however, that Blue Apron will never ask you for sensitive personal or financial information when verifying your identity, and no Blue Apron employee will ask you to tell them your password.   If you are an authorized agent for a California resident submitting a request on their behalf, we may require proof of the written authorization you have received before processing the request.

Under certain circumstances, we will not be able to fulfill your request, such as if it prevents us from completing a transaction you initiated, interferes with our legal obligations, affects legal matters including a Blue Apron user’s rights to data contained in their account, we cannot verify your identity, or compliance with your request is not legally required and would involve disproportionate cost or effort.  But in any event we will respond to your request within a reasonable timeframe and provide you with an explanation.  If we deny your request in whole or in part, the laws in your jurisdiction may provide you with rights to appeal our response.  If applicable, we will provide you with information about your appeal options in our response to you.

Blue Apron will not discriminate against anyone that makes a rights request, but in some cases we will not be able to provide our Services to you without that information.

Opt out of sale of Personal Information and disclosure of Personal Information for online targeted advertising.  As explained in the Cookies, Analytics, and Advertising section above, Blue Apron allows third parties to receive certain information such as cookies, IP address, device identifiers, hashed contact information, browsing behavior, and/or other activity to enable the delivery of targeted advertising to you. 

Blue Apron doesn’t allow marketing companies, advertisers, or anyone else to access to your Personal Information in exchange for payment.  But some of Blue Apron’s information sharing practices for targeted advertising to you may qualify as the “sale” of personal information or sharing or processing of Personal Information for targeted advertising, as defined in applicable law.

Residents of certain states may opt out of the sale of Personal Information or sharing or processing of their Personal Information for targeted advertising by clicking on the “Do Not Sell or Share My Personal Information” link:


Note, if you use a cookie blocker such as Ghostery, it may block visibility of this tool. You can also use an authorized agent to submit a request to opt-out on your behalf if you provide the agent written permission to do so.  We may require the agent to submit proof that you have authorized them to submit an opt-out request.
         
You may still receive advertising, it just may not be tailored to your interests.  Please note, if you use different browsers, devices, or services you will need to opt out on each browser or device where you want your choice to apply. You may also be presented with form field to provide your email address or other information so we may add it to an appropriate suppression list. 

Please note that if you have a legally recognized browser-based opt out preference signal turned on via your device browser (such as Global Privacy Control), we recognize such preference in accordance and to the extent required by applicable law.

Communications preferences

We may send you communications (including emails, phone calls, text messages, push notifications, and snail mail) to your account and transactions initiated by you (such as order status updates and billing receipts).  We need the ability to send you these communications to offer the Services, so we do not allow you turn them off entirely.  But you can let us know if you have a preferred method for receiving these communications by changing the Notification Settings in your account, disabling push notifications as described below, or contacting us.  We try our best to honor your reasonable preferences about communications.       

We may also send additional communications about the Services, such as newsletters and additional options that may be of interest to you.  We do our best to only send this type of communication to people who want to receive it.  If you would like to discontinue receiving these communications, you can update your preferences by using the “Unsubscribe” link found in such emails or by contacting us using the information in the “Contact Us” section of this policy.

Disabling push notifications

Note that discontinuing push messages typically requires you to change your settings on your device.  Each type of device operates differently, so please check your user manual if you’re having trouble.       

Data retention

How long we retain your Personal Information depends on the type of data and the purpose for which we process the data. We will retain your Personal Information for the period necessary to fulfill the purposes outlined in this Privacy Notice unless a longer retention period is required or permitted by law.  

Security of your Personal Information

Blue Apron is committed to protecting the Personal Information you share with us. We utilize a combination of industry-standard security technologies, procedures, and organizational measures to help protect your Personal Information from unauthorized access, use, or disclosure. 
We recommend you take every precaution in protecting your Personal Information when you are on the Internet. For example, change your passwords often, use a combination of upper and lower-case letters, numbers, and symbols when creating passwords, and make sure you use a secure browser.     

Links to Other Sites

Please note that when you voluntarily use a Site feature provided by a third party that requires sharing of Personal Information in order to work properly, for example, if you “Like,” “Tweet,” “Pin,” or share content using the social sharing features or other integrated tools on our Sites, the relevant social media company may access Personal Information from you, and any information that you post may be made broadly available, depending on your privacy settings for your social media account.   For more information about the purpose and scope of data collection and processing in connection with social sharing features, please visit the privacy policies of the social media services that you use and that provide these features.  In other words, Facebook, Instagram, Pinterest, Twitter, and similar services all have their own privacy policies that you should read.  Blue Apron’s privacy policy doesn’t apply to them.         

Additional privacy information for California residents

If you are a California resident, the California Consumer Privacy Act (“CCPA”) requires us to provide you with the following additional information about: (1) the purpose for which we use each category of “personal information” (as defined in the CCPA) we collect; and (2) the categories of third parties to which we (a) disclose such personal information for a business purpose, (b) “share” personal information for “cross-context behavioral advertising,” and/or (c) “sell” such personal information. Under the CCPA, “sharing” is defined as the targeting of advertising to a consumer based on that consumer’s personal information obtained from the consumer’s activity across websites, and “selling” is defined as the disclosure of personal information to third parties in exchange for monetary or other valuable consideration.  We “share” information to provide more relevant and tailored advertising to you regarding our Services.  While we do not disclose our customer’s personal information to third parties in exchange for money, our use of third-party analytics services and online advertising services may result in the sharing of online identifiers (e.g., cookie data, IP addresses, device identifiers, and usage information) in a way that may be considered a “sale” under the CCPA.

Category of personal information
Purposes of use
Categories of Third Parties to Which Blue Apron Discloses this Personal Information
Categories of Third Parties to Which Blue Apron “Shares” and “Sells” this Personal Information for Advertising/Analytics Purposes
Identifiers and contact information
Provide the Services; Communicate with you and provide customer support; Advertising and marketing; Business Operations; Legal Purposes
Service providers; Advertising and analytics partners; Legal purposes; Business transactions; With your consent
Advertising and analytics partners
Transaction and customer service information
Provide the Services; Communicate with you and provide customer support; Business Operations; Legal Purposes
Service providers; Legal purposes; Business transactions; With your consent
We do not share/sell
Limited financial account information
Provide the Services;
Service providers; Legal purposes;
We do not share/sell

Communicate with you and provide customer support; Business Operations; Legal Purposes
Business transactions; With your consent

General preference information
Provide the Services; Communicate with you and provide customer support; Advertising and marketing; Business Operations; Legal Purposes
Service providers; Advertising and analytics partners; Legal purposes; Business transactions; With your consent
Advertising and analytics partners
Social media information
Provide the Services; Communicate with you and provide customer support; Business Operations; Legal Purposes
Service providers; Legal purposes; Business transactions; With your consent
We do not share/sell
Device information
Provide the Services; Communicate with you and provide customer support; Advertising and marketing; Business Operations; Legal Purposes
Service providers; Advertising and analytics partners; Legal purposes; Business transactions; With your consent
Advertising and analytics partners
Information collected through automated technologies
Provide the Services; Communicate with you and provide customer support; Advertising and marketing; Business Operations; Legal Purposes
Service providers; Advertising and analytics partners; Legal purposes; Business transactions; With your consent
Advertising and analytics partners



For more information about each category, purpose of use, and the third parties to which we disclose or share information, please see the “Categories of Personal Information we collect,” “How we use Personal Information,” and “Our disclosure of Personal Information” sections above.

Your Choices Regarding “Sharing” and “Selling”: As described more in the "Rights and Controls" section of our Privacy Policy, you have the right to opt out of Blue Apron’s  sale/sharing of your personal information for purposes of online advertising and related purposes by clicking here.

Please note that we will also honor legally-required browser-based opt out signals (such as the global privacy control) in accordance with our legal obligations.

Other CCPA Rights.  

Incentive Programs.  The Services may offer opportunities to receive certain services or benefits such as discounts or free services, which may require the provision of Personal Information. Such opportunities could be considered a financial incentive under applicable law (each, an “Incentive Program”).  When you participate in an Incentive Program, you agree to the terms of that Incentive Program, and may revoke your participation depending on the Incentive Program (e.g., by opting out of emails). To the extent we can determine the value of your information, we consider the value of providing you with a more personalized experience as well as the expenses we incur in providing Incentive Programs that are reasonably related to the costs associated with offering the Incentives.

Right to Limit.  The CCPA also allows you to limit the use or disclosure of your “sensitive personal information” (as defined in the CCPA) if your sensitive personal information is used for certain purposes.  Please note that we do not use or disclose sensitive personal information other than for business purposes for which you can opt out under the CCPA.

Other information rights.  Please see the “Your Controls and Choices” section of our Privacy Policy above for information about the additional rights you have with respect to your personal information under California law and how to exercise them

Retention of Your Personal Information. Please see the “Retention of Your Information” section above.

Notice concerning Do Not Track.  Do Not Track (“DNT”) is a privacy preference that users can set in certain web browsers. We are committed to providing you with meaningful choices about the information collected on our websites for third-party purposes, and that is why we provide the variety of opt-out mechanisms listed above. Some web browsers offer users a “Do Not Track” privacy preference setting in the web browser. We do not currently recognize or respond to browser-initiated Do Not Track signals. Learn more about Do Not Track.   Please note that “Do Not Track” is a distinct privacy mechanism from the browser-based opt out signals referenced above, which Blue Apron does honor in accordance with applicable law.

California “Shine the Light” disclosure

The California “Shine the Light” law gives residents of California the right under certain circumstances to opt out of the disclosure of certain categories of personal information (as defined in the Shine the Light law) with third parties for their direct marketing purposes, or in the alternative, that we provide a cost-free means for consumers to opt out of any such disclosure.  We do not currently disclose your personal information to third parties for their own direct marketing purposes.

Contact us

If you have any questions or comments related to this privacy policy, please send an email to privacy@BlueApron.com. You can also contact us by writing to this address:  
Blue Apron, LLC
Privacy Requests
28 Liberty St., Floor 28
New York, NY 10005