Privacy Policy
Effective 15 August 2026
The short version. Ordo has no accounts and no tracking. We do not sell or share your data, we do not run ads or analytics, and everything you save stays on your own device.
No account, no sign-up
Ordo does not ask you to register, log in, or provide an email address, name, phone number, or date of birth. We do not build a profile of you.
Menu photos
When you scan a menu, the photograph is sent over an encrypted connection to our server, which forwards it to Anthropic's Claude API to read the dishes and their likely ingredients. The photograph is used for that single analysis and nothing else. It is not used to train any AI model, it is not stored in our systems after the analysis completes, and it is never shown to another user or published anywhere.
What stays on your device
Your scan history, chosen language, better-order count, and any scan credits you have bought are stored in your device's local storage. They are not uploaded to us. Deleting the app removes them.
What our server handles
- IP address — held briefly in memory to limit automated abuse of the scanning endpoint. It is not written to a database, not linked to any scan, and not retained.
- Cached results — an analysis may be cached for up to 90 days under a key derived from the menu's own content, so that scanning the same menu again is instant and cheaper to run. The cache holds dish information only. It contains no photographs and nothing that identifies you or your device.
Purchases
Scan packs are sold through Apple's In-App Purchase system. Apple processes the payment; we never see or receive your card details, billing address, or Apple ID. We use RevenueCat to confirm that a purchase happened and to restore it if you reinstall the app; RevenueCat receives an anonymous identifier and the transaction record, not your identity.
Packs are one-time purchases. There is no subscription, no free trial, and nothing renews automatically.
What we do not do
- No advertising and no advertising identifiers.
- No third-party analytics or tracking SDKs.
- No App Tracking Transparency prompt, because we do not track you.
- No selling, renting, or sharing of personal data. Ever.
- No access to your contacts, location, microphone, or health data.
Children
Ordo is a general-audience wellness tool and is not directed at children under 13. We do not knowingly collect information from children.
Your choices
Clearing the app's data or deleting the app erases everything held on your device. Because we do not hold an account for you, there is no server-side profile to delete. If you have a question about data associated with a purchase, contact us and we will help.
Not medical advice
Ordo provides general wellness information to help you choose between dishes. It does not diagnose, treat, or prevent any disease, and it is not a substitute for advice from a qualified health professional.
Changes
If this policy changes materially, we will update the effective date at the top of this page.