Privacy Policy
Last updated 13 August 2026
Order Na is an independent research project that places food orders on your behalf. This policy explains exactly what we collect, why, and how to remove it. We collect the minimum needed to place an order, and nothing is sold or shared for advertising — ever.
What we collect
| Data | Why |
|---|---|
| Your name | Goes on the delivery order so the rider can find you. |
| Phone number | Required by the restaurant for delivery contact. |
| Delivery address & approximate coordinates | To choose the branch that serves you and to route the rider. |
| Your messages to the bot | To understand your order. Kept only for the current conversation. |
| Order history with Order Na | So you can reorder and to show you what you spent. |
| Telegram user ID | To tell customers apart and enforce access. |
Connecting your email (optional)
You may optionally connect a Google account so Order Na can learn what you like from your past food-delivery receipts. This is entirely optional — Order Na works fully without it.
- What we search: only messages from delivery platforms — Uber Eats, foodpanda, Grab, McDelivery, Jollibee, Deliveroo, Glovo, DoorDash. Every query we run is restricted to that sender list.
- What we store: only the parsed summary of each receipt — restaurant name, total, currency, date. We do not store email bodies, subjects, attachments, contacts, or anything from messages outside that sender list.
- What we never do: we never send email, never modify or delete anything in your mailbox, and never read messages unrelated to food delivery.
Google user data
Order Na requests the gmail.readonly scope. Google does not offer a narrower
"only food receipts" permission, so we constrain access ourselves in code: every request is
filtered to the delivery-sender list above, and each access is written to an internal log.
Order Na's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
- We use Google user data only to provide and improve the ordering and recommendation features you asked for.
- We do not transfer it to others except as needed to provide those features, for security, or to comply with law.
- We do not use it for advertising, and we never sell it.
- We do not allow humans to read it, except with your explicit consent, for security purposes, to comply with law, or where the data is aggregated and anonymised.
How to delete everything
Send /forgetme to the bot. This immediately deletes your stored receipts and taste profile, and revokes Order Na's access token with Google. You can also revoke access at any time from your Google Account permissions page.
How it's stored
Data is held in a local database on the operator's own machine, not on a public cloud database. Access tokens are stored with restricted file permissions. This is a small research preview, not a commercial service — please don't put sensitive information into the chat.
Payments
Order Na is cash-on-delivery only. We never ask for, handle, or store card numbers or any payment credentials.
Sharing
To place your order, the restaurant's ordering system necessarily receives your name, phone number and delivery address — the same details you'd give ordering yourself. Beyond that we don't share your data with anyone.
Children
Order Na is not intended for anyone under 16.
Changes & contact
We'll update this page if the practices change, and update the date at the top. Questions or deletion requests: message the bot, or contact the operator at the address listed on the Google consent screen.