Русский
Қазақша
УкраїнськаPrivacy Policy
This policy explains what data the Ayanly app, its App Clip and the ayanly.app website (together, the “service”) collect, why, where it is stored and who it is shared with. The service is built and run by Anton Tymokhov (“we”), a private individual. If a translation of this policy differs from the English version, the English version applies.
In short
- A loyalty card needs only your first name, last name and phone number.
- We don't sell data, show ads or track you across other apps and websites.
- The app has no third-party analytics or advertising SDKs.
- You can delete your account and all its data in the app.
1. Account
Your account is created with your phone number: we send an SMS code to it. The account stores your phone number, first name and last name. You can also add a date of birth and a profile photo. Owners and staff of the places where you have a card can see the photo.
2. Loyalty cards
When you get a place's card through the App Clip or the app, the place receives your first name, last name and phone number, plus your date of birth and photo if you added them. For each card we store the balance, visits and the history of operations: points added, rewards redeemed and adjustments, with the date, time and the staff member who made them.
When scanning, the cashier sees your name and the last four digits of your phone number. The card's barcode contains no phone number or other personal data, only a random code.
A place's owner can export the list of their customers to a file and send notifications to their cards in Apple Wallet. The place is responsible for how it uses this data outside Ayanly.
3. Business and staff data
An owner enters the business name, category, address and map location, optionally a phone number and logo, and sets up the program and card design. We store the phone numbers and names of invited staff, the text of messages to customers and the operations log.
The Business subscription is bought through the App Store. Apple tells us about the purchase and the subscription period, and we link them to your account. Apple handles the payment details; we never receive them.
4. Device permissions
- Camera is used to scan QR codes and cards. Camera images are not saved or sent anywhere.
- Location is used only when a business owner taps “My location” while choosing the address on the map. We don't track where you are.
- Notifications tell you about points on your cards and bring messages from the Ayanly team. For this we store the device's notification token.
- Photos are picked in the iOS system picker. We receive only the photo you choose, scaled down to 512×512.
5. Apple Wallet
The card in Wallet shows the place's name, your name, the balance and the place's address. To keep the card up to date, Wallet sends our server a technical device identifier and a notification token. The “You're nearby” hint on the lock screen is shown by iOS itself from the place's address: your location is not sent to us.
6. Website
If you join the waitlist, we store your email address, the page language, the part of the site (customer or business), the date and your consent. We use the address only for the Ayanly launch email. To prevent spam, we keep a hash of your IP address for about two hours. The website uses no advertising or analytics cookies; your browser only remembers the language you chose.
7. Why we use data
- To run the service: sign-in, cards, points, notifications, subscription. Legal basis: our contract with you (the terms of use).
- To protect the service from fraud, spam and abuse. Legal basis: our legitimate interest.
- To send the launch email. Legal basis: your consent, which you can withdraw at any time.
- To meet legal obligations that apply to us.
8. Where data is stored and who processes it
Data is stored on servers in the European Union (Germany). These providers process it on our behalf:
- Supabase — database, sign-in with a code, storage of photos and logos;
- Hetzner — our server, which updates cards in Wallet and sends notifications;
- an SMS provider — sending sign-in codes to your number;
- Apple — App Store, purchases and subscriptions, Apple Wallet, notification delivery;
- Google Maps, and 2GIS for businesses in Kazakhstan — address search and the place's map;
- the website's hosting provider.
Some of these companies may process data outside the EU under their own data protection safeguards. We may also disclose data where the law requires it.
9. How long we keep data
- Account and card data is kept for as long as the account exists.
- After an account or business is deleted, personal data is erased within 30 days.
- Waitlist addresses are deleted after the launch email, and in any case no later than 12 months after sign-up.
10. Your rights
You can ask what data we hold about you, correct it, delete it, get a copy, restrict or object to its processing, and withdraw your consent. You can change your name, phone number, date of birth and photo in the app: Account → profile card. “Delete account” is at the bottom of the profile. To remove your address from the waitlist or use any other right, write to hello@ayanly.app. You may also complain to the data protection authority in your country.
11. Security
Data travels only over encrypted connections. Sign-in codes are stored as hashes, and the keys that sign cards and notifications stay on the server. The app changes data only through our server, which checks the user's permissions.
12. Children
The service is not meant for children under 16. If you learn that a child has given us their data, write to us and we will delete it.
13. Changes
We may update this policy at any time. The new version is published on this page and the date at the top changes. We will tell you about significant changes in the app. By using the service after an update, you accept the new version.