privacy policy

Account info. You sign in with your phone number. We send a one-time code by SMS (through our provider Prelude) to verify it's you, and we store your phone number to create and secure your account. If you set a profile photo or username, we store those too.

Dietary profile. Your goal (for example more protein, lighter plates, real food) and dietary restrictions, which you enter during onboarding. We use them to curate restaurants and menu items for you. We do not store your weight or other body measurements on our servers.

Location. With your permission, your device location while you use the app, to show spots near you and improve search relevance. We never collect location in the background. Location sent to our analytics is rounded to roughly 1 kilometer and is never precise. The map itself is drawn with tiles from Mapbox. To load them, Mapbox receives the map area you view, along with device diagnostics, under its own privacy policy. Mapbox's telemetry has no switch in the app.

Health data. With your permission, we read activity and nutrition data from Apple Health to personalize your experience. Health data is used only to provide these features. We never use Apple Health data for advertising or marketing and never share it with third parties for their purposes, in line with Apple's HealthKit requirements.

Content you create.Saved spots, lists, notes, and photos you upload. Photos are stored with our storage provider (Cloudflare). Notes, photos and videos you send through feedback or a report about the map or a place are stored with our providers too. A map report also includes the map area you were viewing, so we can find the spot you mean. When you send feedback or a report, our team gets an alert on Telegram with what you wrote, the place or map area it's about, your city and app version, and how many photos or videos you attached. We don't add your name, phone number or the files themselves. If you share a link into the app (for example from TikTok or Instagram), we process that link to import the place it points to.

Usage and device data. We use PostHog (servers in the United States) to understand how the app is used: screens viewed, features used, device model, OS version. We strip authentication tokens and similar secrets before any event leaves your device. We do not use advertising identifiers and we do not track you across other companies' apps or websites.

Website measurement. We also use PostHog to measure visits to our website, campaign sources, QR code visibility, and clicks to the App Store or the app. It runs without cookies or any other browser storage: PostHog counts visits with a code it rebuilds every day from your IP address and browser, and does not store your IP address. The campaign that started your visit is kept in the open page only and is gone when you close or reload it. A random link identifier can travel with an ORDER link when you continue on your phone. It helps connect those link actions; it does not identify your account or prove that you installed the app. We remove URL query strings and fragments from analytics URL fields and collect only the campaign parameters used for this measurement. You can turn website measurement off, and see everything the site stores on your device, on our cookies page. If your browser sends Global Privacy Control, it is off already.

Purchases. Subscriptions are processed by Apple and managed through RevenueCat. We receive your subscription status, never your payment details.

Link-click attribution. When you open an ORDER link someone shared with you, we briefly process a truncated version of your IP address, your language, timezone, and OS version into an anonymous short-lived code (kept for about an hour). If you install the app and sign up shortly after, we use it to credit the person who shared with you. It is not used to track your browsing. When you view a restaurant page on our website, we match that page to your install the same way, using the same network and device details, for up to an hour, so the app can open on that place.

Referrals and invites. Your personal referral code, so we can credit you when someone you invited joins. Lists and invites are shared by link, we never ask for the contact details of the people you share with.

Shared lists. When you join or share a list, your username, profile photo, and the spots and notes you add are visible to the other members of that list. Leaving a list stops future sharing; content you added stays unless you remove it.

We use AI providers (Anthropic, Google Gemini, Perplexity, OpenAI) to extract and analyze restaurant menus and estimate nutrition. What we send them is restaurant and menu content from public sources — not your personal account data.

• We don't sell your data.
• We don't show third-party ads or share data with ad networks.
• We don't use your Apple Health data for anything except the features described above.

We rely on a small set of providers to run ORDER. Each receives only what it needs to do its job:

Your data is stored and processed by the providers above, primarily in the United States and the European Union. Where data is transferred internationally, our providers rely on recognized safeguards such as standard contractual clauses.

For as long as you have an account. Delete your account in the app (Profile → Delete Account) and we permanently delete your account and associated data — including your profile, dietary preferences, lists, and uploaded photos — immediately, with no grace period. You can also email us to request deletion.

Depending on where you live (for example under the GDPR or CCPA), you may have the right to access, correct, export, or delete your data, to object to or restrict processing, and to withdraw consent. Email us at support@order.inc and we'll handle it. You also have the right to complain to your local data protection authority.

ORDER is not directed at children under 13 (or the equivalent minimum age in your region), and we don't knowingly collect their data. If you believe a child has provided us data, contact us and we'll delete it.

If we materially change this policy we'll update this page and the date above, and notify you in the app when appropriate. The operator of the service may change (for example if the business becomes a company); if so, we'll update this page.