Privacy Policy — Rotily
Fresh Rotis Delivered Daily
Effective date: July 3, 2026 Operator: ZenTech Innovations LLC ("we," "us," "our"), operating the Rotily roti-delivery service ("the App" / "the Service"). Contact: support@rotily.com · [BUSINESS MAILING ADDRESS]
1. Introduction
This Privacy Policy explains what personal information we collect when you use the Rotily app, how we use it, who we share it with, and the choices and rights you have. By using the App, you agree to the practices described here.
2. Information you provide to us
When you create an account and use the Service, you provide:
- Account information: your name, email address, phone number, and a password (your password is stored only in a securely hashed form and is never kept or transmitted in readable form).
- Delivery address: street address, apartment/unit, city, and ZIP code.
- Household member information: if you choose to add household members, the names and phone numbers you enter for up to two additional people. Please only provide other people's information if you are authorized to do so.
- Order information: the items you order, pack quantities, your selected delivery date, and any delivery notes you write.
- Payment card information: when you add a card, you enter the cardholder name, card number, expiry date, and security code (CVV). We do not store or transmit your full card number or CVV. Only your card's brand, last four digits, expiry, and cardholder name — together with a secure payment token from Stripe — are stored on our servers to enable saved-card functionality. Payments are processed through Stripe (see Section 5).
- Support communications: the contents of any support or issue reports you submit.
3. Information collected automatically
- Location information: We do not access your device's GPS or precise location. We derive approximate location (latitude/longitude and census area) from the delivery address you type, in order to route deliveries.
- Device and connection information: As with any internet service, our servers and service providers receive your device's IP address as a normal part of handling secure (HTTPS) requests.
- On-device storage: We store authentication tokens, a remembered email (if you opt in), biometric sign-in preferences, and your saved card's last-four/brand on your device. This is cleared when you sign out or delete your account.
We do not use analytics, advertising, tracking, or crash-reporting SDKs, and we do not collect a device advertising identifier.
4. How we use your information
We use your information to:
- create and manage your account and authenticate you (including optional biometric sign-in);
- process, schedule, and deliver your orders;
- process payments;
- send you transactional messages about your orders (by SMS and email);
- respond to support requests;
- operate, secure, and improve the Service; and
- comply with legal, tax, and accounting obligations.
5. Third parties we share information with
We share information only with service providers that help us run the Service, and only as needed:
| Provider | What is shared | Purpose |
|---|---|---|
| Stripe | Order amount and order ID (no card number) | Payment processing |
| Google Maps Geocoding | Your delivery address | Convert address to coordinates for routing |
| Mapbox | Address fragments as you type | Address autocomplete |
| Zippopotam.us | ZIP code | ZIP-to-city lookup |
| Resend | Email address and message content | Transactional email (e.g., password reset) |
| Twilio | Phone number and message content | SMS notifications |
| Railway | Service data, as hosted | Application and database hosting |
We do not sell your personal information, and we do not share it with advertisers or data brokers.
6. Payment information detail
Card entry is handled securely by Stripe. Your full card number is never visible to Rotily and is never stored on our servers. If you choose to save a card for future payments, Stripe securely stores your card details under Stripe's own privacy practices. Rotily retains only a secure token and card metadata (brand, last four digits, expiry and cardholder name) on our servers solely to enable saved card functionality. You can remove saved cards at any time from your profile.
7. Data retention and account deletion
You can delete your account from within the App. When you delete your account:
- Your personal information — including your name, email, phone number, address, and any household-member information — is removed or anonymized, and your account is disabled so it can no longer be used to sign in.
- Any saved delivery preferences are deleted.
- We retain limited financial records — such as order amounts, dates, order numbers, and payment-processor transaction identifiers — for accounting, tax, and dispute-resolution purposes as required or permitted by law. These records are no longer linked to information that identifies you.
- Information stored locally on your device is cleared.
8. Security
We protect your information using industry-standard measures, including hashing passwords (bcrypt), storing authentication tokens in your device's secure keychain, and transmitting data over encrypted (HTTPS) connections. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
9. Your rights and choices
Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information, and to object to or restrict certain processing. You can exercise account deletion in-app, and you can contact us at support@rotily.com for other requests.
10. Children's privacy
The Service is not directed to children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect personal information from them.
11. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version with a new effective date and, where appropriate, notify you.
12. Contact us
Questions about this policy or your information: support@rotily.com · ZenTech Innovations LLC · [BUSINESS MAILING ADDRESS].
Last updated: July 3, 2026