Privacy policy

Your account. Your email address, an optional display name, and an account ID. Sign-in is handled by Google Firebase Authentication. We never see or store your password.

What you choose to tell us. An optional age range and home neighborhood, and whether personalization is on.

What you do on EOLA Today. The places, events and locals you save or follow, the posts you like, and anything you post, including photos.

Orders. When you order, we keep your name, what you ordered, your notes and special instructions, the totals, the order's status, and the chat between you and the business. For delivery we also collect what we need to bring it to you: your address, delivery instructions and phone number. Card payments go straight to Stripe, our payment processor. We never see or store your full card number.

Page views and taps. We count which pages are viewed and which buttons are tapped (call, directions, website, tickets and similar). The counting runs on our own server. To count unique visitors without cookies, we combine your IP address and browser type with a random value that changes every day, then scramble the result so it can't be reversed. We never store your IP address itself. This data is linked to your account only when you're signed in with personalization on.

Delivery waitlist. Your email, your neighborhood, and the restaurant you'd like to see, if you name one.

The business app. If you use EOLA Today for Business, we also keep the businesses you belong to, your role at each one, and your device's push notification token so we can alert you to new orders and messages.

We don't use advertising trackers, third-party analytics or tracking cookies. Signing in keeps a sign-in token in your browser's storage so you stay signed in. That token is required for your account to work, and it isn't used to track you.

• To run EOLA Today: your account, favorites, follows, posts and orders.
• To send your order to the business, and to email you a message from the kitchen if you haven’t read it in the app.
• To suggest places and events in “Picked for you,” based on what you view, save and order from. An order counts only as the place you ordered from, not the dishes or the delivery address. You can see these interests, remove them, or switch personalization off on your interests page.
• To show businesses, locals and sponsors how they’re doing, as totals only: how many people viewed a listing, called, or asked for directions. Never names, emails, or who did what.
• To keep the service safe, fix problems, and enforce our terms.
• To tell you about delivery when it reaches your neighborhood, if you joined the waitlist.

We never sell your data, and we never share it for advertising.

• Businesses you order from see your name, your order, your notes, and your chat with them.
• Everyone can see your posts, and the name of the place or local you post as. Your favorites, follows and interests are private.
• Service providers who run parts of EOLA Today for us, and only to do that work: Google Firebase (sign-in, photo storage, scheduled jobs), Neon (our database), DigitalOcean (hosting), Cloudflare (image delivery), Resend (email), Expo (push notifications for the business app), and our payment processor once payments launch.
• The law. We will share data if the law requires it, or to protect someone's safety.
• A new owner. If EOLA Today is ever sold or merged, this policy will continue to apply to your data.

• Raw page views and taps are deleted after 90 days. After that, we keep only daily totals that can’t be traced back to anyone.
• Your interests fade over time on their own, and they’re deleted right away if you clear them or switch personalization off.
• Your account data stays until you delete your account.
• Order records are kept as long as we need them for accounting, tax and dispute purposes, even after you delete your account.

• See, remove or clear your interests, or switch personalization off, on your interests page.
• Remove a favorite, unfollow, or delete your posts at any time.
• Turn off push notifications in your device settings.
• Ask us for a copy of your data, ask us to correct it, or ask us to delete your account and the data tied to it. Email [email protected] from your account's email address. We will reply within 30 days.

EOLA Today isn't meant for children under 13, and we don't knowingly collect their data. If you believe a child under 13 has given us information, email us and we'll delete it. We never show targeted promotions to anyone who tells us they're under 18.

Data travels over encrypted connections, and access to it is limited to the people and services who need it to run EOLA Today. No system is perfectly secure. If a breach affects your data, we will tell you.

If we change this policy, we'll update the date at the top. For a change that affects how we use data we already have, we will notify you before it takes effect.

Questions about your privacy? Email [email protected]. A person who lives here will answer.