Privacy in Eat RHW
Effective November 5, 2026.
Who to contact
Ravilo apps handles Eat RHW app accounts and privacy or deletion requests. RHW Plant-Based Café & Deli handles food orders, pickup and refunds. Contact either team at hello@eatrhw.com. The app's App Store seller is LionGem Studios.
This notice covers the Eat RHW app, including its beta versions. Features and payment availability can differ between versions. Beta checkout uses test payments; test purchases do not place paid food orders for fulfillment.
Your account and preferences
We use your email address, sign-in results and account identifiers to provide and protect your account. You can sign in using an email code or Sign in with Apple. Dedicated review accounts may use an app password. The app keeps a protected signed-in session rather than saving a reusable email code or your entered plaintext password.
You can choose to save a display name, ZIP code, birthday month and day, food preferences, favorites and addresses. We use these details for the account and ordering features you choose. A saved address may include a recipient, telephone number and delivery instructions. Saving an address does not mean delivery is available. Food preferences are not a guarantee that an item is safe for an allergy.
If you choose to fill an address using your location, the app requests foreground location access and uses the device's address-lookup service. You can review the suggested address before saving it or enter an address manually. The app's saved address record contains the address, not latitude and longitude. The app does not request background location access. On iPhone, Apple’s location and address-lookup services process this request. The app does not send these coordinates to RHW’s backend; only an address you choose to save is sent there.
Orders, payments and rewards
We use your selected items, customizations, order notes, pickup time, status, totals and transaction references to provide ordering, receipts, customer support, refunds and reward adjustments. Authorized RHW staff can access the information needed to handle these tasks.
Stripe handles native card entry and payment processing. RHW's backend keeps amounts, payment outcomes and provider references; it does not store full card numbers or card security codes. If you choose to save a card, Stripe stores its details. The app displays the card's brand, last four digits and expiry so you can recognize or remove it. Removing a saved card does not erase an earlier transaction record.
Stripe's mobile software also processes payment-flow and device information to provide its service, help prevent fraud and improve its products. See Stripe's privacy policy for its practices.
App gift cards use separate balances from website or Clover gift cards. We retain gift purchases, balances, use and refund history, buyer and holder identifiers, and the recipient email and optional message you supply. The recipient must verify the matching email to claim a gift. The buyer shares the invitation; automatic gift emails are not enabled. Gift and reward records help prevent duplicate credit and reconcile refunds.
Optional app protection and notifications
If you enable Face ID or phone-passcode protection, your device performs authentication. Eat RHW receives the result, not your biometric template or phone passcode. Your unlock preference and checkout-recovery details may be kept in protected device storage.
If you allow notifications, we use a device notification token, account and installation identifiers, and delivery status to send order alerts. Authorized staff can also receive new-order alerts. You can turn notifications off in device settings and continue checking orders in the app. Registration is retired when the app learns that the session has ended, the token is invalid or the account is no longer eligible. Retired token values are cleared; remaining inactive registration metadata is eligible for cleanup after 30 days. Delivery-history retention is separate. A notification may appear on your locked device or paired Mac according to your device settings.
Support and service providers
If you contact us, we use the message, attachments and relevant account or order information to help you. Please do not send passwords, sign-in codes, full card numbers, security codes or unnecessary medical details. The support email draft opens in your email app; you decide whether to send it.
The app uses Supabase for account and backend services, Stripe for payments, Resend for sign-in email delivery, Expo and Apple for notifications, and Apple for Apple sign-in, device authentication and address lookup. Support email is handled in Gmail / Google Workspace. The app backend is hosted in the United States; providers may process information in the United States and other locations where they operate. Providers may handle the information needed to operate, secure and maintain their services under their own policies. Information may also be retained or disclosed when needed to meet a legal obligation or respond to a lawful request.
How long information stays
We keep account details while needed to provide the service and handle account requests. Different records have different retention needs:
Resolved support cases enter review 30 days after closure. An operator checks for outstanding issues or holds and performs any email deletion manually. The app does not automatically erase Gmail messages or attachments.
Minimum necessary order, payment, refund, gift and reward accounting records enter retention review after seven years from the end of the transaction year. A dispute, outstanding gift obligation, security investigation or applicable recordkeeping obligation can require longer retention. This is a review schedule, not a promise that all records disappear on that date.
We review app-managed security, delivery and operational records after 30 days and keep information longer when needed for an unresolved issue, financial reconciliation or a documented hold. Provider-operated logs follow their own service settings and retention rules.
Encrypted database backup copies are reviewed after 30 days. An older copy may be retained while needed for safe recovery, an unresolved incident or a documented hold. These copies are access-restricted and are not used as an active customer database. Account deletion does not promise immediate removal of every provider or backup copy.
We separate optional account information from the financial evidence needed to investigate transactions and outstanding balances. Contact us for help understanding what remains in relation to your account.
Your choices and account deletion
You can edit supported profile fields, remove saved addresses and favorites, remove saved cards, change notification or app-lock preferences, and sign out. Some fields, such as a saved birthday, cannot be changed directly in the app; contact support for help.
To request account deletion, open Account → Delete account. You can also contact hello@eatrhw.com if you cannot access the app. We may need to verify that the request belongs to you. An unresolved order or payment can prevent immediate deletion; we will explain what needs attention. Our operational target is to process a verified, unblocked request within 14 days and let you know if more time is needed.
For an Apple-linked account, the app also attempts to disconnect its Sign in with Apple authorization. This does not delete your Apple account, iCloud data or other apps. If that disconnection cannot be completed, the app explains the failure and any separate cleanup option.
Deletion removes the account and supported profile records. Transaction and audit evidence, outstanding gift obligations and provider cleanup may remain as described above. A new account using the same email does not automatically inherit gifts held by a deleted account; contact support for ownership review. Deleting an account does not cancel an order or request a refund. Deleting the app from your phone alone does not delete your account.
Privacy requests
You can contact hello@eatrhw.com to request access to or a copy of your app information, correction, deletion, or review of a privacy decision. Tell us which app account and request you mean; do not send a password, sign-in code or identity document unless we explain why additional verification is necessary. We will verify requests proportionately, explain any limits or retained records, and respond through the verified contact. Applicable privacy rights can depend on where you live.
The app is not designed as a children’s service. If you believe a child has provided personal information without appropriate permission, contact us so we can review it. The App Store age rating describes content and does not establish that an account holder’s age has been verified.
Updates
We will update this notice when the app's practices change. Contact hello@eatrhw.com with a privacy question or request.