Chick-fil-A Play Privacy Policy

Effective as of 4/10/2026

This Chick-fil-A Play Privacy Policy (“Privacy Policy”) describes how Chick-fil-A, Inc., its affiliates, subsidiaries and related entities (collectively, “Chick-fil-A”, “we”, “us”, or “our”) process and use the personal information that we collect through the Chick-fil-A Play mobile application (“CFA Play”). This Privacy Policy does not apply to other sites or services offered by Chick-fil-A where a different privacy policy is provided. If you would like to learn more about how Chick-fil-A handles personal information of our customers more generally across various services, please visit Chick-fil-A Privacy Policy.

CFA Play is intended for families, including children, and this experience complies with the Children’s Online Privacy Protection Act (“COPPA”). Children can watch videos, create crafts and drawings, listen to podcasts and songs, learn about recipes, play games, and read books on CFA Play.

Kids Privacy Assured by PRIVO: COPPA Safe Harbor Certification

Chick-fil-A, Inc. is a member of the PRIVO Kids Privacy Assured COPPA safe harbor certification Program (the “Program”). The Program certification applies to the digital properties listed on the certification page that is viewable by clicking on the PRIVO Seal. PRIVO is an independent, third-party organization committed to supporting online services to safeguard children’s personal information collected online. The PRIVO COPPA safe harbor certification Seal posted on this page indicates Chick-fil-A, Inc. has established COPPA compliant privacy practices and has agreed to submit to PRIVO’s oversight and consumer dispute resolution process. If you have questions or concerns about our privacy practices, please contact us at 1-866-232-2040 or [email protected]. If you have further concerns after you have contacted us, you can contact PRIVO directly at [email protected].

1. We Make Updates to This Privacy Policy

We may update this Privacy Policy from time to time, and the updated Privacy Policy applies to you after the effective date stated in the revised Privacy Policy. If our information practices change, we will post an updated policy on CFA Play. If we change the policy in a material way, we will provide appropriate notice to you by posting a prominent notice on CFA Play and notify you via the contact information we have on record prior to making the change.

2. Categories of Personal Information We Collect and Process from all users including children

We collect personal information from you, your device, or other sources such as our service providers or your child (if your child provides your information for parental consent).

A parent email address or phone number is collected to create an optional account. Children can provide their parents’ contact information to invite their parents to create an account. This information is not collected for any other purpose.

We collect and process the following categories of personal information from all users in the course of providing CFA Play:

Identifiers, such as first name, nickname, Internet Protocol addresses, device identifiers, or other similar unique identifiers.
Internet or other similar network activity, including information regarding your interaction with CFA Play.
Geolocation data of your coarse location, such as region and country, for the operation of CFA Play. We do not collect geolocation data sufficient to identify both your street name and name of city or town.
Visual information, such as drawings you create on CFA Play if you have an account.

3. How We Use Your Information

We do not sell or share for cross-context behavioral advertising or targeted advertising and have not sold or shared for cross-context behavioral advertising or targeted advertising any personal information, including personal information of individuals we know to be under the age of 16, collected on CFA Play.

We use personal information collected through CFA Play for the following purposes:

To support the internal operations of CFA Play, including to maintain or analyze the functioning of CFA Play, perform network communications, protect the security or integrity of you or CFA Play, or ensure legal or regulatory compliance. When we collect or use children’s persistent identifiers to support the internal operations of CFA Play without parental consent, we take measures to avoid using or disclosing them for any other purpose. For example, we implement technical data segregation measures, maintain procedures to evaluate and periodically review how we use persistent identifiers collected from children, and consult with PRIVO under the Program for ongoing compliance.
To obtain parental consent before collecting, using, or disclosing children’s personal information in accordance with applicable law.
To communicate with you, such as by sending push notifications or, if applicable, parental disclosures, notifications, or other communication.
To save certain information on the server, so that you can save your favorites, recent activities, and other similar activities such as activity completion status.

These purposes also include the following business purposes:

Helping to ensure security and integrity to the extent the use of your personal information is reasonably necessary and proportionate for these purposes.
Debugging to identify and repair errors in our systems.
Short-term, transient use.
Verifying and maintaining the quality of CFA Play.

We do not process personal information collected on CFA Play for the purpose of profiling in furtherance of “decisions that produce legal or similarly significant effects,” as such term is defined under applicable law.

If you have a question about the collection and use of yours or your child’s personal information, please contact us at [email protected].

4. Retention

We retain personal information only for the length of time needed to carry out the purposes described in the “How We Use Your Information” section. When personal information is no longer reasonably necessary for those purposes, we will delete that information. Personal information collected through CFA Play will be deleted after 24 months of inactivity unless longer retention is necessary in accordance with our record retention practices.

5. How We Disclose Your Information for all users, including children

We may disclose personal information within Chick-fil-A and to our service providers who provide services to support the operations of CFA Play.

CFA Play uses the following service providers:

Google Analytics to help us understand your use of CFA Play and improve the experience. Any information collected is not disclosed to any other third parties and is used solely for the operation of CFA Play.
Photon to help us analyze, maintain, and enhance proper and effective functioning of CFA Play. Any information collected is not disclosed to any other third parties and is used solely for the operation of CFA Play.
DataDog to help us analyze, maintain, and enhance proper and effective functioning of CFA Play. Any information collected is not disclosed to any other third parties and is used solely for the operation of CFA Play.
Catamorphic, Co. (d/b/a LaunchDarkly) to help us analyze, maintain, and enhance proper and effective functioning of CFA Play. Any information collected is not disclosed to any other third parties and is used solely for the operation of CFA Play.
MoEngage to help us send push notifications through CFA Play. Any information collected is not disclosed to any other third parties and is used solely for the operation of CFA Play.

We may also disclose children’s personal information to their parents in connection with obtaining parental consent in accordance with applicable law. We do not provide a feature or functionality for children to make their personal information publicly available through CFA Play.

If you are a parent and have any questions about our use of service providers or the information collected from your child, please contact us using the details provided in the “Contact Us” section.

6. Your Privacy Rights

You may have the following rights for yourself, and if you are a parent, for your child subject to applicable law:

The right to confirm whether we process personal information about you or your child and request access to that personal information (including, if applicable, in a portable and readily usable format).
The right to correct inaccuracies in personal information we have about you or your child.
The right to request that we delete personal information we have about you or your child.
The right to request that we stop further collection or use of your child’s personal information.

You may request to exercise these rights by:

Calling us toll-free at Chick-fil-A CARES (1-866-232-2040); or
Completing our privacy rights request form. Please complete the form available here.

If your rights request is denied, you may lodge an appeal with us. The response to your rights request will inform you of any appeal rights you may have and how you may exercise them.

As required under applicable law, we will take steps to verify your identity before granting you access to information or acting on your request to exercise your rights. We may require you to provide your first name, your profile nickname, and your parent’s contact information such as a phone number or email address to verify your identity in response to exercising requests of the above type. If you are submitting a request as a parent or legal guardian of a child, we may require you to also provide your child’s first name, your child’s profile nickname, and your contact information such as a phone number or email address for verification. We may limit our response to your exercise of the above rights as permitted under applicable law. When you submit a request to exercise your rights described above, we will use the information you provide to process your request and to maintain a record of your request and our response, as permitted under applicable law.

Under applicable law, you may designate an authorized agent to make a request on your behalf. You may make such a designation by providing the agent with written permission to act on your behalf. We will require the agent to provide proof of that written permission. To the extent permitted by law, we may require you to verify your own identity in response to a request, even if you choose to use an agent. If you are an authorized agent submitting a request on behalf of a consumer, please contact us using the details provided in the “Contact Us” section.

You also have the right not to receive discriminatory treatment by us for the exercise of privacy rights conferred by applicable law, including the right not to be retaliated against for the exercise of your rights.

Please note the process for handling privacy rights requests described in this section applies only to personal information subject to this Privacy Policy. This process does not extend to personal information collected outside of CFA Play. To learn more about how to exercise privacy rights regarding personal information we handle more generally, please visit the “Additional U.S. State-Specific Privacy Rights Addendum” section or “Your California Privacy Rights” section in the Chick-fil-A Privacy Policy.

7. Information Security

We seek to keep your personal information secure by implementing reasonable technical, administrative, and physical safeguards to help us protect personal information from unauthorized access, use, and disclosure. We also ask our service providers to use reasonable security measures to protect your information from unauthorized access, use and disclosure. However, please be aware that no method of electronically transmitting or storing information is ever completely secure.

8. Do Not Track

We do not currently take actions to respond to “Do Not Track” signals from browsers because a uniform technological standard has not yet been developed. CFA Play is a mobile application, and it does not respond to opt-out preference signals from Global Privacy Control, which is currently offered only as a browser-level technical specification that you can use to inform websites that you opt out of sale or sharing of personal information for cross-context behavioral advertising or targeted advertising. Please note CFA Play does not collect personal information for advertising purposes, and we do not sell or share personal information collected on CFA Play for cross-context behavioral advertising or targeted advertising.

9. Contact Us

If you have any questions or complaints about this Privacy Policy or how we or our service providers collect, use or disclose your personal information, or if you need accessibility assistance, please contact us by visiting the website at https://www.chick-fil-a.com/customer-support/ or calling us at 1-866-232-2040. You may also contact us by email at [email protected] or by mail addressed to: Chick-fil-A, Inc., ATTN: Privacy Team, 5200 Buffington Rd., Atlanta, GA 30349.

Click this link to download the Chick-fil-A Play Privacy Policy.