Privacy

The short version

If you make a Slicio account, we keep your first name and email, and the things you do with the account: crusts, votes, slice ratings and taste test ratings. You can also add a last name, a phone number, a birthday month and day, and a nearest store, and none of them is needed. We never ask for a birth year. We don’t run ads, and the app has no analytics. This website counts visits anonymously with Umami: no cookies, no personal data and no tracking across other sites. We won’t sell your information. We keep what we store until you delete your account or ask us to, and deleting your account removes it (see How long we keep it).

What we store

When you sign in to the Slicio app, or on this website (the taste test page and the My Slicio page), we store:

• Your first name and email. They come from Apple or Google when you sign in, or you type them when you make an account with an email and a password. If you use Apple’s Hide My Email, we get Apple’s private relay address instead of your real one.
• Your password, if you make an account with an email and a password. Supabase, which runs our sign-in service, keeps only a scrambled version of it (a hash). We never see your password and can’t read it back.
• Optional details, only if you add them when you make your account or later on My Slicio or in the app. You can change or clear any of them.
  • Your last name, kept next to your first name.
  • Your phone number. We use it only to reach you about Slicio.
  • Your birthday month and day. We never ask for the year. We use it only for the birthday slice, a free slice planned for when Slicio opens (see the draft terms), and for nothing else. Nothing uses it yet. We also keep the date you saved it, because the birthday slice needs your birthday saved 3 months ahead.
  • Your nearest store or pop-up. You pick it from a list the team keeps, so it tells us roughly where you are. The list is empty until Slicio has places to pick, so nothing is collected yet.
• Your member code and account ID. A short code and an ID that we make for you, so the team can find your Crust Club at the counter and the app knows which account is yours.
• Your crusts and paid slices. Each crust or free slice added to or spent from your account, and the paid slices the team records when you buy at the counter, with the date.
• Your slice ratings. The stars you give a slice on the menu (on the Rate a slice page or in the app), whether you would order it again, and the comment you write, if any. There is one rating per slice and you can change it. Rating a slice does not earn a crust.
• Your taste test ratings. The rating you give a test slice, whether you would buy it, and the comment you write, if any.
• Your Slice of the Month votes. The slice you pick each month, so each member counts once a month.
• What you send from a form in the app or on this website. A pickup request (what you asked for, the planned prices our database worked out, your note, and its status as the team moves it along), a catering inquiry or a waitlist signup, with what you typed in it. The team sees a pickup request with your first name and member code, not your email or phone number.

Apple or Google may send other details when you sign in, such as a profile photo address. Our sign-in service may keep them in its own record. We don’t read them, show them or use them, and deleting your account removes that record.

On the site, the waitlist, catering and vote forms are not open yet. Until they open, those forms collect nothing from you.

How you sign in

You sign in with Apple or Google, with an email and a password, or with an email code where we have switched that on, in the app and on this website. Slicio never sees a password: Supabase keeps only a scrambled version of it. We don’t send an email to check that an address is yours when you make an account. A forgotten password can’t be reset by email yet. When you ask for an email code, we send it from the team’s Gmail address, so Google handles that email too. The database and the sign-in service are run for us by Supabase, which hosts them. Apple and Google follow their own privacy rules for the sign-in step. Through Apple on the website, Apple does not share your name, so My Slicio asks what to call you.

What Apple and Google share when you sign in

Apple and Google send us only the name and email that you allow them to share, and a sign-in token that proves it is you. We use that token to sign you in. If you sign in with Apple in the app, we also keep a token that Apple gives us. It sits in a table that the app and this website cannot read, and we use it only to ask Apple to disconnect Slicio when you delete your account. Deleting your account deletes the token. If you use Google sign-in in the app, Google’s sign-in tool may use your device’s IP address and a device check to prevent fraud, and Google handles that under its own privacy terms. When you delete your account, the app also asks Google to disconnect Slicio. You can remove Slicio yourself at any time in your Apple Account settings (Sign in with Apple) or your Google Account settings.

App updates

The app gets fixes through Expo’s update service. When the app starts, it asks Expo (u.expo.dev) whether there is a newer copy of the app’s code for the version you have installed. That request shows Expo your device’s IP address and the app version. The app sends Expo no account details. Expo handles the request under its own privacy terms.

The taste test page, the Rate a slice page and My Slicio

The taste test page (the one a pizza card’s QR code opens) and the My Slicio page run in your browser. The taste test page asks our database for the pizza’s name and, if you rate the slice, saves your rating there. The Rate a slice page asks our database which slices you can rate and saves your stars, your answer and your comment there. My Slicio asks our database for your own name, optional details, member code, crusts and ratings and shows them to you only, after you sign in. It also lets you change your details. When you tap Continue with Apple or Continue with Google, they send you to Apple or Google to sign in and bring you back. To keep you signed in, they save your sign-in in your browser’s local storage on your own device. They also save your answer to “I am 13 or older” there, and that answer is never sent to us. They don’t set cookies. Sign out clears the sign-in. Clear this site’s data in your browser settings to clear the age answer.

Tasting tables

At a class or an event the team sometimes sets up a tasting table: one phone or tablet, signed in to a team account, where each taster taps stars for a pizza and can add a short comment. Nobody signs up, and the ratings have no name, account or email on them. We do not ask a taster for a name or an age at the table, and the team tells tasters not to write their name or any contact details in a comment. We keep the pizza, the taste test, the stars, the answer and the comment, the time, the name the team gave the device (like “iPad A”), and which team account entered it. Ratings from paper tally sheets that the team types in later are kept the same way, and a person on the team should not type a taster’s name or contact details from a sheet.

A comment at a tasting table is free text typed by an anonymous taster, and a taster can be any age. The Slicio team reads these comments and nobody else sees them. Because they are not tied to any account, deleting your account does not remove them, and we cannot tell which comment is yours.

What we don’t collect

No birth years, home addresses or payment details. A phone number, a birthday month and day, and a nearest store are optional, as described above. This site loads its fonts and code from its own files, not from other companies. The company that hosts this site may keep standard server logs, the way most hosts do.

How we use it

To run the Crust Club, count votes, learn which slices and test slices people liked, answer catering inquiries, and tell you when we open. If you add a birthday, to work out your birthday slice.

Who can see it

The Slicio team can see your account and what you did with it. Your slice and taste test comments are seen only by the Slicio team. The results screens show each pizza’s numbers and comments without names, but our database does record which account gave which rating. Once at least 5 members have rated a slice, a member who has rated it can see its average, and no one sees anyone else’s comment. Supabase hosts that database for us. We’ll name the service that stores any site form before that form opens.

Apart from the team, the services that handle your information are Supabase (our database and sign-in service), Apple and Google (when you sign in with them, and Google also for email we send from the team’s Gmail address) and Expo (app updates). Each of them handles it under its own privacy terms, which we rely on to give it the same protection we describe on this page. We don’t sell it or share it for ads.

Ages

A tasting table is the one place where nobody signs up, so nobody is asked to confirm an age there: a taster of any age can tap stars and may type a comment, and the ratings are not tied to a person or an account.

The Slicio Crust Club, the taste test page and the waitlist are for ages 13 and up. The taste test page asks you to check a box that says you are 13 or older. If you are under 13, please don’t send us anything. If we learn that we collected information from someone under 13, we’ll delete it.

How long we keep it

We keep your information until you delete your account or ask us to delete it. We don’t delete accounts, ratings or votes automatically after a set time. When your account is deleted, your votes, slice ratings, taste test ratings and comments, crusts and the rest of the account’s records are deleted with it, not kept in a form without your name. The one exception is a rating made at a tasting table: it has no account on it, so it stays (see Tasting tables above).

Delete your account

• In the app: Account, then Delete account.
• On the web: sign in on My Slicio or the taste test page, then use Delete my account at the bottom of the page. The page asks you to confirm before it deletes anything.

Deleting removes your name, email, optional details, member code, crusts, votes, slice ratings, taste test ratings and comments, requests you sent from the app, the Apple token described above if we kept one, and the sign-in record. It can’t be undone. If you signed in with Apple in the app, deleting also asks Apple to disconnect Slicio. If you signed in with Apple or Google on the website, it doesn’t remove Slicio from the list of connected apps in your Apple or Google account. If you want it gone from that list, remove Slicio in your Apple or Google account settings too.

Contact

Questions, or something that doesn’t work? Email sliciopizza@gmail.com. If you can’t use the delete options above, email us and ask us to delete your account. To take back your consent to what we store, delete your account or email us.

Crust Club draft terms