Ordr

Privacy Policy

Last updated 7 August 2026

Ordr stores what your household orders at restaurants. That is all it is for. This policy says exactly what is kept, why, and how to get rid of it.

What Ordr Stores

• Your account: email address and display name. A password hash if you signed up with a password, or an opaque provider ID if you used Sign in with Google or Sign in with Apple.
• Your household: the household name, its invite code, and the people you add to it. People you add are names you type; they do not need accounts.
• Your places and orders: restaurant names, optional addresses and phone numbers you enter, and the free-text order you save for each person.

What Ordr Does Not Do

• No advertising, and no ad trackers or analytics SDKs.
• Your data is never sold, rented, or shared with third parties for marketing.
• No social feed. Nothing you save is public or visible to anyone outside your household.
• No location tracking. Ordr never asks for your location.

Who Can See Your Orders

Anyone signed in to your household can see and edit that household's places and orders. That is the point of a household. If you send someone their personal share link, that link lets whoever holds it read the household's place names and read and edit that one person's orders. You can rotate a person's link at any time from the People screen, which immediately invalidates the old one.

Third Parties

• Sign in with Google / Sign in with Apple, if you choose them. Ordr receives your email address and a provider ID to identify you. Ordr never receives your password.
• Google Places, if you use restaurant name autocomplete. The text you type in that one field is sent to Google to return matching restaurants. Nothing about your orders or your household is sent.
• DreamHost hosts the application and its database in the United States.

Deleting Your Account

Open the app, go to Settings, and choose Delete My Account. This is immediate and permanent. If you are the only person left in your household, the household and all of its places and orders are deleted with it. If other people are still in the household, their data stays and only your account is removed.

If you cannot reach the app, email support@kithold.com from your account's email address and it will be deleted for you.

Security

All traffic is served over HTTPS. Passwords are stored only as bcrypt hashes and are never recoverable, by anyone, including us. Session tokens are random, stored in a cookie that JavaScript cannot read, and expire after 180 days.

Children

Ordr is not directed at children under 13 and does not knowingly collect their information. Adding a child's name and food order to your own household is a note you are keeping about your own family, not an account for them.

Changes

If this policy changes in a way that matters, the date at the top changes and the change is described here.

Contact

support@kithold.com