Privacy policy

Pilot version, 21 September 2026

This is the policy for the Houston pilot. It is written in plain language and will be reviewed by counsel before public launch. If anything here is unclear, ask us and we will answer plainly.

What Refill Me is

Refill Me lets you schedule regular grocery orders from local stores that have joined the platform, and lets those stores prepare them. The web app and the iPhone app use the same account.

What we collect

Account details: your name, email address and a password (stored only as a secure hash).
Your store choice and the refill schedules you set up: items, quantities, rhythm, dates, pickup or delivery.
Orders: what you ordered, when, the price at the time, the order's status, and the points you earned.
Technical basics needed to run the service, such as when your device last signed in. We do not run advertising trackers.

We do not collect card numbers during the pilot. You pay the store directly when you collect.

How we use it

To place your orders with the store you chose and show you their status.
To run the points programme.
To show you what your store posts: new stock and sales.
To show you your own spending by category.
To help stores stock better, using aggregate, anonymised demand information (for example, "twelve households order palm oil monthly"), never your name.

Who sees your information

The store you order from sees your name, your order, your pickup date and any note you add. They see nothing about your orders at other stores.
Refill Me administrators can see account and order records to run the service and support you.
Our hosting provider (Supabase, on servers in the United States) stores the data on our behalf under their security terms.

We do not sell personal information. We do not share it with advertisers.

How it is protected

Data travels encrypted (TLS) and sits in a database where every table is protected by row level security, meaning the database itself only answers with rows the signed in person is allowed to see. Store staff cannot read customer profiles; they see the order in front of them.

How long we keep it

For as long as you have an account. Order history is kept so your points and your spending view stay correct. Pilot sign up emails are deleted or moved to accounts when the pilot ends.

Your choices

Change your name or store from the You screen.
Pause or delete refills at any time.
Ask for a copy of your data or for your account to be deleted by emailing us. Deletion removes your profile, schedules and personal details; anonymised order lines may be retained for the stores' aggregate statistics. In-app account deletion is coming with the App Store release.

Children

Refill Me is for adults doing household shopping. It is not directed at anyone under 13 and we do not knowingly collect their information.

Changes

When this policy changes we will update the date at the top and, for anything material, tell you in the app.

Contact

Questions about privacy: email us.