Privacy Policy

1. Who operates Orderly

Orderly is operated by the individual developer identified in the app-store or distribution listing where you obtained the app (“we” or “us”). Contact us at support@askorderly.com.

2. Information Orderly handles

• Taste profile information you choose to enter, including food preferences, spice tolerance, budget, dietary preferences, and allergies.
• Menu photographs, detected and corrected menu text, recommendations, and questions you ask in menu chat.
• A random installation identifier used for service limits and abuse prevention. It is not an advertising identifier.
• Technical request information such as IP address, request time, response status, and a random request identifier.
• Privacy-minimized product events when analytics is configured, such as whether onboarding or a scan step succeeded and coarse duration or failure categories.
• Camera and photo-library content only when you choose those features and grant permission.
• For an optional account, account identifiers, masked email display, login provider, sessions, preferences, synchronized taste profile, and sanitized saved analyses.

3. How information is used

• To read menus, personalize dish recommendations, answer menu questions, and store your profile and recent scans.
• If you sign in, to synchronize settings, taste profile, and sanitized saved analyses across devices.
• To operate, secure, troubleshoot, measure reliability, and apply service limits.
• To comply with law and protect users and providers.

4. Connected analysis

Orderly uses a connected backend. It may send a resized and compressed menu image, your taste profile, confirmed menu corrections, or your chat message and relevant analyzed menu to the Orderly API for the feature you request.

5. Service providers and AI processing

Cloudflare hosts the connected API and protects it from abuse. Google Gemini and Cloudflare Workers AI process menu images or text, taste-profile details (including dietary preferences and allergies), menu corrections, and follow-up questions to read menus and generate recommendations. AI Gateway prompt caching and request logging are disabled for Cloudflare AI requests.

When configured, PostHog processes narrowly defined product events. Session replay, automatic screen and interaction capture, content capture, person profiles, precise location enrichment, and persistent analytics identifiers are disabled.

Optional accounts use Supabase for authentication and synchronized data. Purchases use RevenueCat and the applicable app store. Those providers may process information under their own policies.

We do not sell personal information or use menu requests for targeted advertising. Providers may process information in countries other than your own under applicable safeguards.

6. Storage and retention

Your taste profile and up to 20 recent analyses are stored on your device. You can remove scans or local data in the app or through device controls.

The connected API does not write raw menu images, taste profiles, allergy details, raw IP addresses, or raw installation identifiers to Orderly application logs. IP addresses and installation identifiers are pseudonymized for rate limiting; expired records are removed during later maintenance.

Synchronized account data excludes original menu images, chat messages, analytics identifiers, email addresses, OAuth identities, and tokens.

7. Legal bases and your choices

Where required, we process information to provide the feature you request, for legitimate interests in securing and improving the service, with consent where required, and to meet legal obligations.

You choose whether to provide a profile, allergy information, menu image, chat message, or optional account. You may revoke camera or photo access in device settings. Some features will not work without the information they need.

Before the first live scan, correction reranking, or AI question, Orderly asks for explicit permission to share the relevant content with Google Gemini and Cloudflare. You can decline and use the local sample menu, or reset AI permission in Settings to require a new decision before the next request. Resetting permission does not recall requests already sent. Your permission is stored on your device and is requested again if the disclosed processing changes.

8. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object, request portability, withdraw consent, appeal a decision, or complain to a data-protection authority. Email support@askorderly.com to make a request. We may need enough information to verify and respond to it.

9. Children

Orderly is for adults aged 18 and older, or the higher minimum age where local law requires it. We do not knowingly collect personal information from a child below that age.

10. Security

We use reasonable technical and organizational safeguards, including encrypted transport, pseudonymized rate-limit keys, restricted provider credentials, and data-minimizing logs. No storage or transmission method is completely secure.

11. Changes and contact

We may update this policy as Orderly changes. We will revise the effective date and provide additional notice where required. Questions and requests may be sent to support@askorderly.com.