Privacy Policy

Last updated: 24 October 2026

Afiyet Console is the staff app for restaurants that use the Afiyet ordering platform. It is used by restaurant owners, managers and staff who already have an Afiyet account, and it shows them their own restaurant's orders and takings. This policy covers that app and this website.

What we collect

• Your email address and password, to sign you in. The password is checked and stored, hashed, by our authentication provider. We never see it.
• A session on your device, so you are not asked to sign in every time. It is deleted when you sign out.
• Your phone's notification token and model name (for example "Xiaomi Redmi 9C"), so a new order can ring the alarm on that phone and so you can tell your phones apart when muting one. Deleted when you sign out.

That is everything. The app has no advertising, no analytics, no tracking and no advertising identifier. It does not use your location, contacts, photos, microphone or camera.

Your restaurant's data

Once signed in, you see your own restaurant's orders, menu, customers and figures. Orders include the customer's name, phone number and delivery address, because that is what an order is. That information was collected by your restaurant's ordering website and already belongs to your restaurant; the app only shows it back to you and sends back the actions you take.

We process it on your restaurant's behalf. We do not sell it and never use it for advertising. Each account can only ever reach its own restaurant's data, enforced by the database on every request.

What is stored on your phone

A copy of what you last viewed — recent orders, today's figures, the menu — is kept on the device so the app still works when the signal drops. It is deleted when you sign out or uninstall the app.

Who else is involved

We use these providers only to run the service: Supabase (database and sign-in), Google Firebase Cloud Messaging (delivers new-order alerts to your phone), and our own server. We share data with no one else.

Security and deletion

All traffic uses HTTPS. Signing out removes the phone's alert registration and its local copy of your data. Your restaurant's orders are kept as its own trading record for as long as the account is open. To delete a staff account, ask the restaurant owner to remove it; to close a restaurant account and delete its data, email us and we will act within 3 working days.

Children

The app is a tool for restaurant staff. It is not directed at children and we do not knowingly collect their data.

Changes

If this policy changes we will update this page and the date above.

Contact