--- title: "Privacy Policy" description: "The complete privacy policy for the Ordless app and site." canonical: https://ordless.app/privacy publisher: Ordless content_type: legal language: en last_updated: 2026-08-06 --- Your data # Privacy Policy This policy transparently describes the data processed by Ordless, the data that stays on your device, the providers involved, and how to exercise your rights. Version dated August 17, 2026 — effective August 17, 2026 ## At a glance - Ordless is primarily local: your profile, goals, amounts, and usage history stay on your device. - Your Screen Time selection is stored locally as protected tokens supplied by Apple. It is not sent to an Ordless server. - Superwall processes certain technical, paywall usage, and subscription data to present offers and manage access to the Service. - The website uses a self-hosted Plausible instance to produce aggregate traffic statistics without cookies or persistent identifiers. - Ordless does not sell your data, serve targeted advertising, or monitor your activity inside food-delivery apps. ## 1\. Data controller The data controller for the Ordless mobile app, the [ordless.app](https://ordless.app) website, and support is: Gautier Colasse — sole proprietor French business number (SIRET): 831 668 207 00069 229 rue Solférino, 59000 Lille, France [contactappsgc@gmail.com](mailto:contactappsgc@gmail.com) No data protection officer has been appointed because one is not required for the current processing. The address above is the contact point for all privacy matters. ## 2\. Scope and definitions This policy applies to the Ordless app, its website, and support communications (together, the “Service”). It does not govern processing that Apple, Google, Superwall, or food-delivery apps perform for their own purposes. “Local data” is stored on your device and is not transmitted to Gautier Colasse. “Remote data” is received by Gautier Colasse or by a provider acting for the Service. ## 3\. Data processed | Category | Examples | Location | | --- | --- | --- | | Profile and preferences | Optional first name, language, currency, estimated average order cost, order frequency, preferences, and onboarding progress | Device only | | Goals and activity | Goals, estimated amounts, orders you mark as avoided or placed, selected reasons, sessions, dates, and weekly unlocks | Device only | | Screen Time | Family Controls authorization, opaque Apple tokens, names of selected apps, schedules, and temporary blocking state | Device and Apple app group only | | Subscription and paywall | Pseudonymous Superwall user ID, vendor ID, purchase status and history, receipts or transaction information, paywall views and interactions, and experiment assignments | Apple and Superwall | | Technical data | Device version and model, operating system, app version, language, region, currency, time zone, network type, install date, and approximate area inferred from the IP address | Superwall; website technical logs | | Website audience measurement | Page viewed, referring site, browser, operating system, device type, and approximate geographic area. Plausible briefly processes the IP address and User-Agent to produce a daily identifier without storing either in raw form. | Ordless’s self-hosted Plausible instance | | Support | Email address, message content and, when you use the in-app contact button, app version, build, platform, environment, language, subscription status, and Superwall ID | Gautier Colasse and Google email services | Ordless does not request a delivery-app password, order contents, payment-card details, contacts, photos, microphone, or precise GPS location. Do not include sensitive or payment information in a support message. ## 4\. Data that stays on your device Product data is stored in a local SQLite database. Your Screen Time selection is encoded by Apple Family Controls APIs and stored in Ordless’s protected app group. Apple limits what an app can learn about Screen Time selections; Ordless does not extract your general device activity, usage time, or food-delivery order contents. Gautier Colasse has no user-account system or server capable of viewing, restoring, or exporting this local data. It is used on-device to provide the features you request: blocking, reflection checkpoints, unlocks, calculations, history, and goals. ## 5\. Superwall and in-app purchases Ordless integrates the Superwall SDK, provided by Nest22, Inc., to download and present paywalls, determine the applicable offer, make or restore purchases, verify subscription access, and measure how those screens operate. The SDK automatically creates a pseudonymous identifier and may process the technical, purchase, and interaction data described above. It may also infer an approximate city, region, or country from the IP address received when connecting. Ordless does not send Superwall your in-app first name, goals, amounts, protected apps, or local activity history. Learn more in the [Superwall Privacy Policy](https://superwall.com/legal/privacy-policy) and [Superwall Data Processing Addendum](https://superwall.com/legal/dpa/). ## 6\. Apple and Screen Time Apple provides the App Store, StoreKit, Family Controls, Managed Settings, and Device Activity. Apple processes payments, receipts, refunds, and identifiers associated with your Apple Account under its own terms. Gautier Colasse never receives your card number or Apple Account sign-in credentials. iOS requests Screen Time authorization when you activate protection. It is optional, but blocking cannot operate without it. You may change the selection or revoke authorization through the app and system settings. See the [Apple Privacy Policy](https://www.apple.com/legal/privacy/). ## 7\. Website The Ordless website currently has no account, form, advertising tool, and places no non-essential cookie. A self-hosted instance of Plausible Analytics produces aggregate statistics to understand overall website traffic and improve its content. It uses no cookies, local storage, or persistent identifiers and does not track visitors across websites or days. Plausible measures the page viewed, referring site, browser, operating system, device type, and approximate geographic area. The IP address and User-Agent are processed briefly to calculate an identifier that changes every day, then are not retained in raw form by Plausible. See the [Plausible data policy](https://plausible.io/data-policy). The website host and content-delivery network may separately process the IP address, requested URL, date, time, and security logs strictly needed to deliver and protect the site. ## 8\. Purposes and legal bases | Purpose | Legal basis | | --- | --- | | Provide local features, display offers, process purchases, restore purchases, and verify access | Performance of a contract or pre-contractual steps | | Handle support and privacy requests | Performance of a contract and legal obligations | | Secure the Service, prevent fraud, diagnose errors, and defend legal claims | Legitimate interest in operating a safe, reliable service | | Understand offer and paywall performance through pseudonymous data | Legitimate interest in improving how the Service is marketed, subject to your rights and consent where the law requires it | | Measure aggregate website traffic and improve website content | Legitimate interest in understanding overall website use, without individual profiling or targeted advertising | | Comply with tax, accounting, and legal duties | Legal obligation | A technical permission granted in iOS is not treated as blanket consent for unrelated purposes. No advertising profile is created from your local data. ## 9\. Recipients and processors - **Superwall (Nest22, Inc.)**: paywalls, subscription status, and related analytics; - **Apple**: distribution, purchases, subscriptions, refunds, and Screen Time technologies; - **Google**: hosting the Gmail inbox used for support; - **website and self-managed Plausible instance hosts, and the content-delivery network**: website delivery, aggregate audience measurement, performance, and security; and - professional advisers, authorities, or courts only where needed to defend a right or comply with law. Providers receiving data on Ordless’s behalf are contractually required to provide protection at least equivalent to this policy and applicable rules. Food-delivery apps receive no data from Ordless. ## 10\. International transfers Some providers, including Superwall and Google, are established or use infrastructure in the United States and other countries. Where the GDPR requires it, transfers rely on an applicable adequacy decision, including the EU–US Data Privacy Framework for certified organizations, or European Commission Standard Contractual Clauses supplemented where necessary. Superwall’s DPA incorporates those clauses for relevant transfers. You may request information about safeguards relevant to your situation using the contact address above. ## 11\. Retention - **Local data:** until you delete it in the app, perform the corresponding reset, or the operating system removes the app and its data. - **Screen Time selection:** until changed, authorization is revoked, or associated local data is removed. - **Superwall data:** for as long as needed to operate analyze, and restore the subscription and, at the latest, for the duration of the contractual relationship between the Publisher and Superwall. Following a valid deletion request or at the end of that relationship, it is deleted or returned under Superwall’s DPA, subject to backups, legal duties, and disputes. - **Support:** up to three years after a request is closed, then deleted or anonymized, unless an exchange is needed for a dispute or legal duty. - **Website logs:** for the period strictly needed to deliver and secure the site under the host’s technical cycles, or longer where a documented security event must be retained. - **Plausible audience measurement:** the technical identifier changes every day; aggregate statistics, which do not contain the raw IP address, are retained while they remain useful for analyzing website traffic. - **Any legal or accounting records held:** for the period required by law, which may be up to ten years. Technical backups may remain for a short additional rotation period without being returned to ordinary use. ## 12\. Your choices, deletion, and permission withdrawal - Change protected apps in protection setup and revoke Family Controls in iOS settings. - Delete individual savings events where that option is offered, or remove the app to erase data managed in its local container. - Manage or cancel your subscription in [Apple subscription settings](https://apps.apple.com/account/subscriptions). Deleting the app does not cancel a subscription. - For remote data associated with your Superwall identifier, email [contactappsgc@gmail.com](mailto:contactappsgc@gmail.com) and include the Superwall ID shown in the app’s diagnostic email. Ordless has no user-account system, so there is no remote Ordless account to delete. Gautier Colasse cannot remotely access data that remains exclusively on your device. ## 13\. Your privacy rights Depending on where you live and subject to legal conditions, you may request access, correction, deletion, restriction, objection, and data portability, and may withdraw consent for future processing. French law may also allow instructions concerning your data after death. Email [contactappsgc@gmail.com](mailto:contactappsgc@gmail.com). Proof of identity limited to what is necessary may be requested where there is reasonable doubt. We generally respond within one month. For local-only data, these rights are exercised directly on the device because Gautier Colasse holds no copy. You may complain to the [French Data Protection Authority (CNIL)](https://www.cnil.fr/en/cnil-direct/question/844), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or your local supervisory authority. ## 14\. Children Ordless is not specifically directed to children and does not create accounts for them. A minor should use the Service and purchase a subscription only with a parent or guardian’s authorization where the law requires it. If you believe a child sent data to support, contact us so it can be deleted. ## 15\. Security Ordless limits remote data, uses platform containers and safeguards, encrypted connections supplied by its SDKs, and restricted access to support messages. No system is completely secure. If a breach creates a relevant risk, affected people and authorities will be informed as the law requires. ## 16\. No sale or behavioral advertising Ordless does not sell or rent personal data, does not “share” it for cross-context behavioral advertising under applicable US state laws, and does not use Apple’s advertising identifier to track you across apps or websites owned by other companies. ## 17\. Changes to this policy This policy may be updated when the Service, providers, or law changes. Where required, a material change will be brought to your attention by an appropriate method before it takes effect. The date at the top identifies the applicable version.