OrderWallet

Privacy Policy

Effective Date: April 11, 2026

OrderWallet ("we," "us," or "our") operates the OrderWallet mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App. Please read this policy carefully. By using OrderWallet, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

We collect information that you provide directly to us, as well as information collected automatically when you use the App.

Personal Information You Provide:

• Account Information: Your name, email address, and phone number when you create an account.
• Order History: Details of your saved restaurant orders, menu item selections, and customizations.
• Payment Information: Payment card details are collected and processed securely through Square. We do not store your full card numbers on our servers.
• Contacts: Information about contacts you add within the App for group order coordination and sharing.

Information Collected Automatically:

• Device Tokens: Push notification tokens used to deliver order updates and group order notifications to your device.
• Location Data: Location information to help you find nearby restaurants and stores.
• Device Information: Device type, operating system version, and app version for troubleshooting and service improvement.

2. How We Use Your Information

We use the information we collect to:

• Account Management: Create and manage your account, authenticate your identity, and maintain your profile.
• Order Processing: Save your restaurant orders, process payments through Square, and manage your order history.
• Group Order Coordination: Facilitate group orders, allowing you to create, join, and manage shared orders with friends and contacts.
• Contact Sharing: Enable you to share orders and connect with other OrderWallet users based on your privacy preferences.
• Push Notifications: Send you order updates, group order invitations, and other relevant notifications.
• SMS Verification: Send a one-time SMS verification code at signup, delivered via Twilio Verify. This is the only SMS OrderWallet itself sends. Group-order invitations to people who aren't on OrderWallet yet are not A2P — they are sent peer-to-peer through your phone's standard Messages app: OrderWallet pre-fills the message and recipient, you tap Send.
• Service Improvement: Analyze usage patterns (in anonymized form) to improve the App and develop new features.

3. Third-Party Services

We use the following third-party services to operate the App:

• Square: We use Square to process payments and manage payment card information. When you add a payment card or make a purchase, your payment data is handled by Square in accordance with their Privacy Policy. We do not store your full payment card details on our servers.
• Twilio: We use Twilio Verify solely to deliver the one-time SMS verification code that confirms ownership of your phone number at signup. Your phone number is shared with Twilio for that single transactional purpose in accordance with their Privacy Policy. We do not run an A2P 10DLC messaging campaign and we do not use Twilio to deliver group-order invitations.
• Supabase: We use Supabase for user authentication and secure data storage. Your account credentials are managed by Supabase in accordance with their Privacy Policy.

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• With Your Consent: When you enable contact sharing in your privacy settings, other OrderWallet users may find and connect with you.
• Anonymized Data: You may opt in to sharing anonymized usage data through your privacy settings. This data is aggregated and cannot be used to identify you personally.
• Service Providers: With the third-party services listed above (Square, Twilio, Supabase) as necessary to operate the App.
• Legal Requirements: When required by law, regulation, legal process, or governmental request.
• Safety: When we believe disclosure is necessary to protect the rights, safety, or property of OrderWallet, our users, or the public.

SMS Opt-In and Mobile Information Sharing: No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing with subcontractors in support of our services (e.g. Twilio for SMS delivery) is permitted. All other use-case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

How SMS Consent is Collected: OrderWallet itself sends one type of SMS to one user at one moment: a one-time verification code, delivered via Twilio Verify, when a new user enters a phone number at signup and taps “Send code”. The signup screen displays a consent paragraph immediately above the button telling the user exactly that, with links to this Privacy Policy and our SMS Terms. Tapping Send code is the affirmative consent act; the user must enter the 6-digit code received by SMS to finish account creation. Group-order invitations to people who are not yet on OrderWallet are not sent by OrderWallet through any A2P campaign or carrier — they are handed off to the inviter's standard iOS Messages app, pre-filled with the recipient and the message, and the inviter taps Send themselves. The text leaves from the inviter's personal phone number, peer-to-peer. OrderWallet does not run an A2P 10DLC messaging program. See our SMS Terms for full disclosures.

5. Your Privacy Controls

OrderWallet provides you with controls to manage your privacy preferences within the App:

• Contact Sharing: Toggle whether other users can find you and send you order invitations.
• Order Badges: Control the visibility of order activity badges on your profile.
• Anonymized Data Sharing: Choose whether to contribute anonymized usage data to help improve OrderWallet.
• Push Notifications: Manage notification preferences through your device settings.

You can access and update these settings at any time from the Privacy section within Account Settings in the App.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our services. If you request deletion of your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes. Anonymized and aggregated data that cannot identify you may be retained indefinitely for analytical purposes.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Payment information is processed securely through Square and is never stored on our servers in an unencrypted form. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

8. Children's Privacy

OrderWallet is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us at support@orderwallet.net.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy within the App and updating the "Effective Date" at the top of this page. You are advised to review this Privacy Policy periodically for any changes. Continued use of the App after changes are posted constitutes your acceptance of the revised policy.

10. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

OrderWallet
Email: support@orderwallet.net