Privacy Policy

Orderitz is operated by BIGSMS Pty Ltd(“Orderitz”, “we”, “us”), an Australian company. We are the data controller for the personal information described in this policy. For any privacy request, contact our Privacy Officer at privacy@orderitz.com.

We collect only what we need to make ordering effortless:

• Account data - name, email, phone number and a secure password hash when you create an account.
• Order history - the venues you visit, items you order, modifications, and timestamps. This is the core signal that powers predictions.
• Dietary & allergy profile - allergens and dietary preferences you choose to save. This is treated as sensitive health-related information and given extra protection (see Section 6).
• Contextual signals - approximate location of the venue, local time, and local weather at the time of ordering. We do not track your continuous background location.
• Device & usage data - device type, app version, and anonymised interaction events used to improve reliability.
• Payment data - processed by our PCI-DSS compliant payment providers. Orderitz never stores full card numbers.

We do not read minds.“MRS” is our branded name for a predictive model. It uses the data above and aggregate trends - never biometrics, microphones, cameras, or neural signals.

• To predict and pre-fill your likely order at a given venue.
• To screen out items that conflict with your allergies.
• To send your order to the correct kitchen or bar station.
• To personalise recommendations based on time, weather and history.
• To operate, secure, and improve the Orderitz service.
• To comply with legal, tax and food-safety obligations.

We never sell your personal data. We do not use your identifiable order history for third-party advertising.

Where the GDPR or similar laws apply, we rely on: your consent (e.g. saving allergy data and enabling predictions), performance of a contract (fulfilling your orders), our legitimate interests (securing and improving the service), and legal obligation (record keeping). You may withdraw consent at any time.

Our prediction model scores each menu item against five signals - your history, time & weather, learned taste affinities, your stated mood, and aggregate popularity across our network. It only ever recommends items on the menu in front of you, and it applies your allergy profile as a hard filter before any suggestion is shown. Predictions are assistive only - you always confirm before an order is placed, and you can ignore or override any suggestion.

Your allergy and dietary information is encrypted at rest, access is strictly limited, and it is used solely to protect you during ordering. While Orderitz filters menus using venue-provided data, we cannot guarantee a venue’s kitchen is free from cross-contamination. Always confirm severe allergies directly with venue staff.

We share data only as needed to deliver the service:

• Venues receive the order details necessary to prepare and serve it (items, table, relevant allergens).
• Service providers - hosting, payment processing, and analytics - under strict contractual confidentiality.
• Authorities - only where legally required.

We keep your account and order history for as long as your account is active. If you delete your account, we permanently erase your personal data within 30 days, except where we must retain limited records for legal or tax reasons. Data used to train models is anonymised and aggregated so it can no longer identify you.

You are always in control. You may:

• Access a copy of your personal data.
• Correct inaccurate information.
• Export your data in a portable format.
• Permanently delete your account and data - see our Data Deletion page.
• Withdraw consent or object to certain processing.
• Turn personalised predictions off while still using Orderitz.

To exercise any right, email privacy@orderitz.com. We respond within 30 days.

We protect your data with encryption in transit (TLS) and at rest, role-based access controls, continuous monitoring, and regular security reviews. No system is perfectly secure, but we treat your data as if it were our own.

Orderitz is not directed at children under 16, and we do not knowingly collect their data.

Your data may be processed outside your country. Where it is, we use appropriate safeguards such as standard contractual clauses to protect it.

We’ll notify you of material changes in-app or by email before they take effect. Continued use after an update means you accept the revised policy.