Privacy Policy
Last updated 10 September 2026 · Applies to romierskitchen.com and the Romier's Kitchen iOS app
The short version
We collect what we need to cook your food and get it to you: your name, how to reach you, and what you ordered. We don't sell it, we don't advertise with it, and we don't track you across other apps or websites. Card details never touch our systems.
What we collect, and why
Your name, phone number and email
So we can confirm an order, tell you when it's ready, and reach you if something changes. Stored when you place an order, send an enquiry, or create an account.
Your order details
What you ordered, the total, whether it's collection or delivery, and the delivery address if you chose delivery. This is the order itself — we can't fulfil it otherwise.
Catering and cake enquiries
The event date, guest count, and anything you write in the message, plus any reference photos you attach. Used to quote and plan the job.
Photos you choose to attach
Only the ones you pick. The app asks for camera and photo access solely so you can show us a cake you'd like recreated. We never browse your library.
Payment confirmations — not card numbers
Card payments are handled entirely by Square. The card fields are Square's own, the details go straight to Square, and what reaches us is a confirmation and a reference number. We never see, hold or store a card number.
A device token, if you turn notifications on
Identifies your phone so we can send order updates. It identifies a device, not a person, and Apple rotates it. Turn notifications off and it stops.
Calendar — only when you ask
If you tap to add a booking, the app writes that one event. The permission we request is write-only. We never read your existing events.
What we don't do
- We don't sell or rent your information to anyone.
- We don't use it for advertising, and we don't track you across other apps or sites.
- We don't collect your location. The app never asks for it.
- We don't build a profile of you beyond your own order history.
Who else handles it
A few services process data on our behalf, and only to do the job we've asked of them:
- Square — takes card payments and issues receipts.
- Supabase — stores the database behind the site and app.
- Netlify and Cloudflare — serve the website.
- Resend — delivers alert emails to our own kitchen inbox.
- Apple — delivers push notifications to your phone.
Our homepage embeds Instagram posts. If those load, Instagram may see your IP address, as it would on any page with an embed. Nothing about your order is shared with them.
Staff sign-in and Face ID
Face ID appears only on the staff login. If a member of staff turns it on, their email and password are kept in that iPhone's Keychain, on that device only, so they aren't typed at the start of every shift. It is never sent to us, never included in an iCloud backup, and removing it is one tap on the same screen. This has nothing to do with customer accounts.
How long we keep it
Orders and invoices are business and tax records, so we keep them. Your account — your name, email and phone — you can delete yourself at any time, in the app under My Orders → Delete my account. When you do, those details are removed for good and past orders stop being linked to you. We keep the orders themselves, unlinked, because we're required to.
Your choices
- Delete your account and personal details from inside the app, at any time.
- Turn notifications off in the app, or in iOS Settings.
- Ask us what we hold about you, or ask us to correct or remove it — just get in touch.
Children
Romier's Kitchen is a catering business. The app and site aren't directed at children, and we don't knowingly collect information from anyone under 13.
Changes
If this policy changes we'll update the date at the top of this page. Material changes will be flagged in the app.
Getting in touch
Questions about any of this, or a request about your own data:
- +1 (336) 567-1110
- [email protected]
- Pflugerville, TX · Austin & Surrounding Areas