Privacy Policy

Last updated: August 6, 2026

This Privacy Policy describes how RMINT Inc ("RMINT," "we," "us," or "our") collects, uses, shares, and protects your personal information when you use our services, including:

• Our website at www.rmint.co (the "Website")
• The RMINT mobile application available on the Apple App Store and Google Play Store (the "App")
• Any other related services, features, or content we offer (collectively, the "Services")

By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy. This Privacy Policy is incorporated into and forms part of our Terms and Conditions. If you do not agree with our practices, please do not use our Services.

1. Information We Collect

Personal Information You Provide

When you create an account, use our Services, or contact us, we may collect the following information that you voluntarily provide:

• Identity information: first name, last name, username
• Contact information: email address, phone number
• Account credentials: password and authentication data
• Profile information: profile photo, dietary preferences, taste profiles
• Payment information: billing address, payment card details (processed and stored by our payment processor, Stripe — we do not store full card numbers)
• Communications: messages you send to us, feedback, support requests
• User-generated content: menu requests, saved items, reviews, bids

Information Collected Automatically

When you access our Services, we automatically collect certain information, including:

• Device information: device type, model, operating system and version, unique device identifiers, mobile network information
• Log and usage data: IP address, browser type and version, pages visited, time and date of visits, time spent on pages, referring URLs, click data, and other diagnostic data
• App usage data: features used, search queries, interactions with AI features, crash reports and performance data
• Location data: with your permission, precise device location, which the App uses to show restaurants and meals near you. You may decline or revoke this permission in your device settings, in which case we use approximate location derived from your IP address instead. We do not track your location in the background.

Information from Third-Party Sources

We may receive information about you from third-party services, including:

• Authentication providers: If you sign up or log in using a third-party service (such as Google, Facebook, or Apple Sign-In), we receive your name, email address, and profile picture as permitted by your settings on that service. Sign-in is handled by Clerk on our website and by Google Firebase Authentication in our mobile app.
• Analytics providers: Aggregated and de-identified usage data from analytics services.

AI Interaction Data

When you use our AI-powered features (such as menu personalization, chat, and recommendations), we collect:

• Your text inputs, prompts, and queries to the AI system
• Menu preferences, taste profile data, and food-related selections
• Your interactions with AI-generated content (views, saves, bids, purchases)
• Feedback you provide on AI recommendations

2. How We Use Your Information

We use the information we collect for the following purposes:

3. AI and Automated Processing

RMINT uses artificial intelligence and machine learning technologies to provide core features of our Services. We believe in transparency about how these technologies work:

How We Use AI

• Menu personalization: AI analyzes your stated preferences, past interactions, and taste profile to recommend menus and food items tailored to you.
• Chat and conversational features: Our AI chat system processes your text inputs to understand your food requests and generate relevant menu suggestions.
• Content recommendations: AI algorithms determine which content, items, and experiences to surface based on your activity and preferences.

Who Processes Your AI Interactions

Our AI features are powered by Google Gemini models running on Google Cloud (Vertex AI). When you use a feature that relies on AI, the content of your request — which may include your food preferences, dietary restrictions, and the message you send — is transmitted to Google for processing and a response is returned to us. Google processes this data as our service provider under its Cloud Privacy Notice.

Training and Data Use

• Your individual interactions may be used in aggregate, de-identified form to improve our AI models and the quality of recommendations for all users.
• We do not sell your personal AI interaction data to third parties.
• We do not use your personal data to train third-party AI models.

Your Rights Regarding AI

• You may request information about how AI-driven decisions affect your experience.
• You may request human review of any significant decision made solely by automated processing.
• You may opt out of personalized AI recommendations by contacting us at concierge@rmint.co.

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Service providers: We share information with third-party vendors who perform services on our behalf (see Third-Party Services and SDKs below).
• Business transfers: In connection with a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred as part of the transaction. We will notify you of any such change.
• Legal obligations: We may disclose information when required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of RMINT, our users, or the public.
• With your consent: We may share information for any other purpose with your explicit consent.

5. Third-Party Services and SDKs

Our Services integrate with the following third-party services. Each has its own privacy practices:

We may add or change third-party service providers. This section will be updated accordingly, and material changes will be communicated as described in the Changes to This Privacy Policy section.

6. Data Retention

We retain your personal information only as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required by law.

When retention periods expire, we securely delete or anonymize your data. Backup copies may persist for a limited period in accordance with our backup and disaster recovery procedures.

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption of data in transit using TLS/SSL
• Encryption of sensitive data at rest
• Access controls and authentication requirements for personnel
• Regular security assessments and monitoring
• Secure software development practices

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security. You are responsible for maintaining the confidentiality of your account credentials.

8. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete personal information.
• Deletion: Request deletion of your personal information (see Account Deletion).
• Data portability: Request a copy of your data in a structured, machine-readable format.
• Opt-out: Opt out of marketing communications, targeted advertising, or the sale/sharing of your personal information.
• Withdraw consent: Where processing is based on consent, withdraw it at any time without affecting prior lawful processing.
• Non-discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise any of these rights, email us at concierge@rmint.co. We will respond within the timeframe required by applicable law (typically 45 days).

9. Account Deletion

You have the right to delete your account and associated personal data. To request account deletion:

1. In the App: Go to Settings > Account > Delete Account and follow the prompts.
2. On the Website: Visit our account deletion page and confirm the phone number associated with your account.
3. By email: Send a request to concierge@rmint.co from the email address associated with your account.

Upon receiving your deletion request:

• We will deactivate your account within 3 business days.
• Your personal data will be permanently deleted within 30 days, except where retention is required by law (e.g., transaction records for tax compliance).
• Aggregated or de-identified data that cannot identify you may be retained.
• Data stored in backup systems will be deleted in accordance with our backup rotation schedule.
• If you have active subscriptions, we will provide guidance on cancellation before completing deletion.

10. Children's Privacy

Our Services are intended for users who are at least 18 years of age. We do not knowingly collect, use, or disclose personal information from anyone under the age of 18.

If we become aware that we have collected personal information from a person under 18, we will take steps to delete that information promptly. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at concierge@rmint.co, and we will delete the information.

11. Push Notifications and Device Permissions

Our App may request access to certain features on your device. You can manage these permissions through your device settings at any time.

You may disable any optional permission at any time through your device's system settings. Disabling certain permissions may limit functionality of the App.

12. Cookies and Tracking Technologies

Our Website uses cookies and similar tracking technologies to enhance your experience:

• Essential cookies: Required for basic website functionality, authentication, and security. These cannot be disabled.
• Analytics cookies: Used via Google Analytics to understand how visitors interact with our Website. These collect anonymized usage data including pages visited, time on site, and traffic sources.
• Preference cookies: Store your settings and preferences for a better experience on return visits.

For detailed information about the cookies we use, including a full cookie table and how to manage your preferences, see our Cookie Policy.

Google Analytics

We use Google Analytics to analyze Website usage. Google Analytics may use cookies to collect information about your visits. We have enabled IP anonymization so your full IP address is not stored by Google. You may opt out of Google Analytics by:

• Installing the Google Analytics Opt-out Browser Add-on
• Adjusting your ad preferences at Google Ads Settings

For more information, see the Google Privacy & Terms page.

Mobile App Tracking

On iOS, we respect your App Tracking Transparency (ATT) choices. If you deny tracking permission, we will not track your activity across other companies' apps and websites. On Android, you can opt out of personalized advertising through your device settings.

13. US State Privacy Rights

If you are a resident of California, Virginia, Colorado, Connecticut, or Utah, you have specific privacy rights under state law.

Categories of Personal Information We Collect

California Residents (CCPA/CPRA)

Do Not Sell or Share My Personal Information: We do not sell or share your personal information as defined under the CCPA/CPRA. To exercise your right to opt out of any future sale or sharing, or to submit other privacy requests, email concierge@rmint.co.

Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, California residents have the right to:

• Know what personal information we collect, use, disclose, and sell
• Request deletion of personal information
• Opt out of the sale or sharing of personal information
• Limit the use and disclosure of sensitive personal information
• Non-discrimination for exercising privacy rights
• Correct inaccurate personal information

We do not sell or share your personal information as defined under the CCPA/CPRA. We have not sold or shared personal information in the preceding twelve months.

To exercise your rights, email concierge@rmint.co. We will verify your identity before processing your request. If you use an authorized agent, we may require proof of authorization.

Virginia Residents (VCDPA)

Virginia residents have the right to access, correct, delete, and obtain a copy of their personal data, and to opt out of targeted advertising, the sale of personal data, and profiling. To exercise these rights or appeal a decision, email concierge@rmint.co. We will respond within 45 days.

Colorado Residents (CPA)

Colorado residents have the right to access, correct, delete, and obtain a copy of their personal data, and to opt out of targeted advertising, the sale of personal data, and profiling. To exercise these rights or appeal a decision, email concierge@rmint.co. We will respond within 45 days.

Connecticut Residents (CTDPA)

Connecticut residents have the right to access, correct, delete, and obtain a copy of their personal data, and to opt out of targeted advertising, the sale of personal data, and profiling. To exercise these rights or appeal a decision, email concierge@rmint.co. We will respond within 45 days; appeals are addressed within 60 days.

Utah Residents (UCPA)

Utah residents have the right to access and delete their personal data and to opt out of targeted advertising and the sale of personal data. To exercise these rights, email concierge@rmint.co.

14. Do-Not-Track Signals

Some browsers transmit "Do-Not-Track" (DNT) signals. There is currently no uniform standard for interpreting DNT signals. At this time, we do not respond to DNT signals. If a standard is adopted in the future, we will update this Privacy Policy accordingly.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by a revised "Last updated" date at the top of this page. If we make material changes, we will notify you by:

• Posting a prominent notice on our Website and/or within the App
• Sending you an email notification (if we have your email address)
• Displaying an in-app notification

We encourage you to review this Privacy Policy periodically. Your continued use of the Services after changes become effective constitutes your acceptance of the revised Privacy Policy.

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

RMINT Inc
485 Methven Grove Drive
Cary, NC 27519
United States

Email: concierge@rmint.co
Phone: (317) 625-0630

For privacy-specific inquiries, you may also email: b.k@rmint.co