OrderLoop works fully without an account. This page explains what stays on your device, what is sent to our server, and how to delete your account.
Your orders and photos stay on your iPhone
Customers, products, orders, deliveries, notes and photos are stored on your iPhone, and the widget reads that same local store. They are never sent to our server, and we don't sync or back them up. Device backups, where enabled, follow your Apple settings.
Signing in (optional)
You can sign in with Apple or Google. Signing in is optional and the app works the same without it. When you sign in, our server stores:
- Email address: the verified email Apple or Google provides. With Apple this may be a private relay address.
- User id: the account identifier from Apple or Google, an internal user id, and when the account was created.
These are linked to your account and used only to run it. For Apple sign-ins the server also stores an encrypted Apple token so it can revoke your Apple sign-in when you delete your account. The app keeps its session token in the device Keychain; the server keeps only a hash of it. The data is stored in a Cloudflare D1 database. We don't send you marketing email.
Purchases
The one-time unlock is handled by Apple through StoreKit. The app reads your purchase history from Apple on your device to know the unlock is active. We don't see or store your payment details, and deleting your account doesn't cancel or erase an Apple purchase.
Operational logs
Our server runs on Cloudflare. Request logs record the route, status and timing. They don't include your tokens or email.
No tracking
OrderLoop has no ads and no analytics SDKs, and doesn't track you across apps or websites.
Deleting your data
Sign out to clear the app's session; data on this phone stays. Use Delete account in the app's Settings to delete your server account, its session and stored Apple token, and to revoke your Apple sign-in. Delete the app to remove its data from your phone.
Contact
Questions about privacy: hello@digitalanchor.app.