Terms

ORDERLY BY KURVO

Privacy Policy

Last updated: October 17, 2026

The short version

01Who we are

Orderly is a personal dining companion made by Kurvo (“Kurvo”, “we”, “us”), based in the Philippines. Kurvo also makes MotIQ, SulitSee and CurrenSee, which share one Kurvo account. For the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), Kurvo is the personal information controller for the information described here.

02Information we collect

Your Kurvo account

  • Name and email address, and your password (stored by our sign-in provider as a one-way hash, never in plain text).
  • Passkeys, if you add one: only the public key is stored. Your fingerprint or face never leaves your device.
  • Google sign-in, if you use it: your name and email address from Google.
  • Which versions of these terms you accepted, and when.

Your dining records

  • Dining logs: restaurant, date and time, occasion, number of diners, dishes and prices, discounts and charges, notes, and bill splits (including the names you give your diners).
  • Restaurants and menus you save, including a location if you pin one.
  • Photos you choose to keep: receipt images, meal photos, dish and restaurant photos.
  • Settings such as your budget, currency and notification choices, and which in-app notifications you’ve read.

Kept only on your device

  • The demo account and any sample data.
  • Your Dining Assistant conversation (if “Remember assistant conversations” is on) and an order you’re still building.
  • Your location: it’s read only when you tap a location button, and saved only when you pin a restaurant.
  • Your activity log (sign-ins, changes and exports made in that browser, with the browser and device type) and the restore points saved before Danger zone actions. Each browser keeps its own, and you can clear them in Settings → Danger zone.

03How we use it

  • To run Orderly: your history, budgets, insights, bill splits and reminders are computed from your own records.
  • To keep your records in sync between your devices and keep you signed in.
  • To protect your account (for example, asking you to sign in again before deleting data).
  • To answer you when you contact us.

We process your information to provide the service you asked for, with your consent, and to meet legal obligations. The Dining Assistant runs in your browser on your saved records; no outside AI service receives your data.

04Where your data is stored

Your Kurvo account and Orderly records are stored with Supabase (our database and sign-in provider) in its Singapore region. Photos are private files that only your signed-in account can open; other devices see them through short-lived links. Every table is protected so a signed-in person can reach only their own rows.

Orderly also keeps a working copy in your browser so it opens instantly and works offline. Changes sync when you’re online.

When data moves to our servers

If you used Orderly in a browser before signing in with a Kurvo account, nothing from that browser is uploaded until you choose Upload and sync. You can say “Not now” and turn sync on later in Settings → Sign-in & security.

05Who else is involved

We don’t sell, rent or trade your information. These services help run Orderly:

  • Supabase: database, file storage and sign-in.
  • Cloudflare Turnstile: checks that sign-ups and sign-ins come from a person.
  • Google: only if you choose “Continue with Google”.
  • OpenStreetMap services (Nominatim, Photon, Overpass and the OpenStreetMap map tiles): when you search for places or nearby restaurants, or open a map, the search text or map area is sent to find results and draw the map. They don’t receive your account details.
  • Google Fonts: loads the app’s typeface and sees standard request information like your IP address. Everything else the app needs, including its icons, maps and on-device text recognition (Tesseract), is served by Orderly itself.
  • Unsplash: hosts the photos in the sample data, and sees standard request information when they load.

We may disclose information when Philippine law, a court order or a lawful request requires it.

06How long we keep it

For as long as you use Orderly. Deleting a record deletes it from your account too. Leave Orderly (Settings → Danger zone) erases all your Orderly records and photos from our servers and your browser; your Kurvo account stays for the other apps. Delete your Kurvo account removes your sign-in and data in every Kurvo app; we keep only a minimal record that a deletion happened.

07Your rights

Under the Data Privacy Act you can be informed, access, correct, object, have data erased or blocked, get a copy (data portability), and claim damages. You can do most of this yourself in Orderly: edit any record, export a JSON or CSV backup in Settings → Data & export, and leave or delete your account in Settings → Danger zone. You can also complain to the National Privacy Commission (privacy.gov.ph).

08Cookies and local storage

Orderly uses your browser’s local and session storage to keep you signed in (until you close the browser, unless you choose “Remember me”), to hold the working copy of your records, and to remember preferences such as dark mode. We don’t use advertising cookies.

09Children

Orderly is meant for people 18 and older, or younger people using it with a parent or guardian.

10Changes and contact

When this policy changes in a meaningful way we’ll update the date above and ask you to accept the new version in the app. For privacy questions or requests, email kurvo2026@gmail.com from the address on your Kurvo account.