Who we are and what this covers
Ayarly is developed and operated by Digitory Studio FZCO. This policy covers the Ayarly app on phones, the web and desktop computers, the admin console, and the website ayarly.app.
The shop that uses Ayarly owns its business data: receipts, stock and customers. We process that data on the shop’s behalf so the software works, and we apply the same rules on every device the shop uses.
What we collect
Every item here has a matching reason in the next section.
- Account details: each staff member’s name, the email address or phone number they sign in with, and their role in the shop (owner, salesperson and so on). Anyone can open a 14-day trial shop in the app or on the web; the form asks for the shop’s name, country and currency, the owner’s name, a WhatsApp number and an email address. Other accounts are added by the shop owner from the app, or by the Ayarly team together with the owner.
- An optional device PIN: if the shop turns on quick sign-in with a PIN, we store a one-way hash of it that cannot be turned back into the PIN, plus a count of failed attempts so we can lock the account temporarily.
- Shop records: categories, karats and weights, stock movements and stock-takes, receipts and returns, supplier and trader accounts, and the gram rates the shop sets. If a staff member writes a customer’s name or phone number on a receipt, it is stored with that receipt, exactly as it would be on paper.
- Item photos: if a staff member photographs a piece, or picks a picture on the phone, to attach it to a receipt line, the photo is uploaded and kept with that receipt. The app asks for the camera or the photo library only at that moment.
- Device details: an identifier for each device registered to the shop, with its name and platform (iPhone, Android or web), so receipts written offline upload correctly and the shop can see which device made which entry. If a staff member allows notifications, the device’s push notification token.
- App usage: which screens are opened and which actions are taken, such as issuing a receipt or saving a stock-take, together with the shop’s country and currency, the app language and whether the user is the shop owner. In the phone app this is tied to an internal account number, never to a name, email or phone number, and Google Firebase Analytics adds the device model, system version and an approximate location (city or country) worked out from the internet address. The web app counts pages and actions in the same way with Google Analytics.
- Your country: before you sign in, the app guesses your country from your internet address so it starts in your currency, phone format and dialect. The guess stays on your device, our servers do not keep it, and you can change the country yourself.
- Sign-in codes: a one-time code sent by email. We keep only a hashed copy, for a few minutes, until it is confirmed or expires.
- Support conversations: if you contact us on WhatsApp or by email, we keep the conversation so we can follow up on your question.
Why we use it
- So staff can sign in and work, and the shop knows who did what.
- So receipts are priced and printed, stock is updated, and reports add up.
- So devices stay in sync and receipts written without internet are never lost.
- So the shop receives its notifications, such as a new receipt or a change in the gram rate.
- So a trial shop opens from one form in the right country, and our team can reach its owner on the WhatsApp number they gave.
- So we can see which parts of the app are used and where people get stuck, and make them better.
- So accounts stay protected: we detect repeated failed attempts and stop unauthorised use.
- So we can answer support requests and fix faults.
- So we can write the AI summary of the reports when the shop owner asks for one from the reports screen.
We do not use the data for advertising, for building profiles of customers, or for any purpose other than running and improving the software for the shop.
Who else sees it
We do not sell, rent or share data with advertisers, and we do not track you across other companies’ apps or websites. The only parties that receive any of it are providers that perform one specific job for us, and each receives only what that job requires:
- Hosting our servers and databases with a hosting provider we contract with; data is encrypted in transit.
- Storing item photos with Amazon Web Services (Amazon S3, in the EU): it holds the photo files, and the app shows them through private links that expire after an hour.
- Delivering sign-in codes by email through Amazon Web Services (Amazon SES): it receives the email address and the code.
- Delivering push notifications and app updates through Expo, which hands each notification to Apple or Google to reach the phone: they receive the notification token and text, and Expo sees the device’s internet address when an update is downloaded.
- Measuring app usage with Google Firebase Analytics on phones and Google Analytics in the web app: Google receives the usage details described above. Advertising features are switched off and the advertising ID is not collected.
- Writing the optional report summary through Anthropic (the Claude model): when the shop owner asks for a summary, the totals of sales, returns and weights by day, salesperson, category and karat are sent, with the shop’s country and currency. Staff names are swapped for codes such as S1 and S2 before anything is sent and put back only on our server, so Anthropic sees figures, not people. Customer names and numbers are never sent, and the data is not used to train models.
We may disclose data if the law requires it through a formal order, and in that case we tell the shop owner where the law allows.
How long we keep it
Shop records stay for as long as the shop uses Ayarly, because they are the shop’s own books: last year’s receipts have to remain available for stock-takes and audits. When a 14-day trial ends, the trial shop pauses with its data kept as it was, so the shop can carry on where it left off.
Sign-in codes are deleted after a few minutes. Sessions expire on their own and must be renewed. Google Analytics deletes detailed usage data on its own after 14 months at most. Support conversations are kept until the question is closed and for a reasonable period afterwards.
You can delete your account at any time in the app: Home → Delete account. You can also ask for deletion without the app at ayarly.app/delete-account. When the shop owner’s account is deleted, the shop and all its records and photos go with it. When the contract ends, when an account is deleted, or when the shop owner asks, we delete the data from active systems within 30 days and from backups within their normal cycle. The shop owner can ask for an export before deletion.
How we protect it
All traffic between the app and our servers is encrypted (HTTPS). PINs are never stored as typed, only as one-way hashes. Sign-in uses a one-time code rather than a fixed password, and an account locks temporarily after repeated failed attempts.
Inside the shop, the owner decides what each staff member may do: change a price, void a receipt, see the reports. Every entry is recorded under the name of the person who made it.
No system is perfectly secure. If a breach affects your shop’s data, we will tell you without delay, say what happened, and say what we did about it.
Your rights
A shop owner can at any time ask for a copy of the shop’s data, a correction of wrong data, deletion of a staff account, or deletion of all the shop’s data. Anyone with an account can delete it in the app (Home → Delete account) or ask for its deletion at ayarly.app/delete-account. A staff member can also ask to correct their personal details; we coordinate that with the shop owner, because the account belongs to the shop.
We answer these requests within 30 days. Ask through the contacts below, from the same email address or phone number registered on the account, so we know it is you.
Every step, and exactly what is deleted for a shop owner and for staff, is on the account deletion page.
Children
Ayarly is a work tool for shops and their staff. It is not directed at anyone under 18, and we do not knowingly create accounts for minors.
Changes to this policy
If we change something substantive, we update this page and the date at the top, and we tell shop owners by email or WhatsApp before the change takes effect.