Rafiko privacy policy
Draft v1, not legally reviewed. Version 2026-10.
This policy explains what personal data the Rafiko app and its server collect, why, how long it is kept, who helps us process it, and how you can exercise your rights.
Who is responsible
The data controller is Lanovatic, which publishes Rafiko.
- Email: abed@lanovatic.com
- Phone: +33 6 05 77 05 02
Rafiko is a point-of-sale and inventory app for shops. A shop (the "business") decides what it records in Rafiko: its products, sales, suppliers and team. For data a business enters about other people (its staff, its suppliers, a customer it emails a receipt to), the business decides why it is recorded, and Lanovatic processes it to provide the service.
What we collect and why
| Data | Examples | Why | How long |
|---|---|---|---|
| Owner account | Email address, password (stored only as a one-way hash), name, the terms version you accepted and when, your marketing choice (off unless you turn it on), when your email was verified | To create your account, sign you in and secure it | While the account exists; erased when you delete it (see below) |
| Team members | Display name, role (owner or cashier), stores, language, alert settings and quiet hours | To let a business manage who can do what in which store | While the member belongs to the business; after removal or account deletion, records keep the member under an anonymized name |
| Business and store details | Business name, legal name, legal address, tax identifiers, tax regime, store names and addresses | To run the stores and print the legal details on receipts | For the legal retention period (below) |
| Business records | Sales, receipts, refunds and voids, cash drawer sessions, stock movements, stock counts, purchase orders and receipts of goods, products, prices, suppliers (name and ordering email), and an activity log of which member did what and when | To provide the service and keep the evidence a business must keep | For the legal retention period (below) |
| Notes you write | Notes on cash differences, on sync issues, on deliveries | To record what happened | With the record they belong to |
| Device and installation data | A random installation ID and key created by the app, the device model (for example "samsung SM-A125F"), the app version, the number of operations waiting to upload, and sign-in sessions (stored only as token digests) | To keep each phone's offline work safe, to recover it, and to know which phone sent what | Session digests: removed 30 days after the session ends. Installation record: kept with the records it uploaded |
| Uploaded operations | What a phone recorded while offline (sales, cash, stock), as sent | To post them to the business records and resolve problems | The raw upload is emptied 90 days after it is posted; the posted record stays |
| Receipt email address | An address a cashier types to email one receipt to a customer | To send that receipt | The full address is deleted from our email queue 24 hours after sending (30 days if sending failed); only a masked form stays with the sale. It is never kept as a customer list |
| Security codes | Email verification and password-reset codes, team join codes, owner invitations | To verify your email, reset a password, add a member | Readable codes expire after minutes and are deleted; their hashes are deleted 30 days after use or expiry |
| Abuse protection | Your IP address and the account name you typed, stored only as hashes, with attempt counts | To slow down password guessing | 24 hours after the counting window ends |
| Server logs | IP address, time, address requested, request ID. Never passwords, tokens, codes, email addresses or costs | To operate, secure and debug the service | Target: 30 days |
| Crash and error reports | When the app crashes or the server meets an error: the error and where in the code it happened, the device model and operating system version, the app version, the last technical events before the error, and whether each app session ended normally. A crash of the phone's system layer also carries a random identifier created by the crash-reporting tool. We do not attach your name or account to a report, and before sending we remove sign-in tokens, passwords, email addresses, costs and margins, and the content of requests; a server report may name the store or record concerned by its technical identifier. No screenshots and no performance measurements | To find and fix bugs | Up to 90 days at Sentry |
| Product pictures | A picture of a product, if one is added to a product | To show the product | While the product has it; a replaced picture may stay in storage until a clean-up is built |
| Backups | A copy of the database | To recover from a failure | 30 days |
The app does not collect your location, contacts, advertising identifier or browsing activity. It contains no advertising, no analytics and no tracking. It sends crash reports as described above. It does not register your phone for push notifications in this version; if push notifications are added, this policy will be updated first.
The camera is used only to read barcodes and QR codes on the phone. The camera image is not stored or sent.
The business data the app needs to work offline is also kept on the phone, in the app's own storage, and the sign-in keys are kept in the phone's secure storage. Signing out clears them from the phone once its waiting work has been uploaded.
Legal retention period
Business records (sales, cash, stock, purchasing, business details, the activity log) are evidence a business must keep for accounting and tax purposes. Rafiko does not delete them. The period we are working with is ten years, the period Algerian rules set for accounting books and supporting documents; it has not yet been confirmed by an accountant, and the other periods marked above are our current settings and may change. After a deletion, a copy may remain in backups for up to 30 days.
Who helps us (processors)
- Hosting: the Rafiko server and its database run on a server rented and operated by Lanovatic.
- Amazon Web Services (S3): private, encrypted storage for product pictures and, when enabled, for the recovery journal of the operations the server records.
- Brevo: sends our emails (verification and password codes, security notices, receipts a cashier sends, purchase orders a business sends to its supplier).
- Sentry (Functional Software, Inc., United States): receives the crash and error reports above; they are stored in the United States.
- Apple and Google distribute the app under their own privacy policies.
We do not sell personal data and we do not share it for advertising. We disclose it only to these providers, to the business it belongs to, or when the law requires it. Some providers may process data outside Algeria; we use them only to provide the service.
All traffic between the app and the server is encrypted (HTTPS).
Your rights
Under Algerian law 18-07 on the protection of personal data, you can ask to be informed about, access, correct, and object to the processing of your personal data. If you are in the European Union, you may also have rights under the GDPR, such as erasure, restriction and portability. You can complain to the data protection authority of your country (in Algeria, the ANPDP).
To exercise a right, write to abed@lanovatic.com. We may ask you to prove that you own the account. If your data was entered by a shop you work for or buy from, you can also ask that shop.
Deleting your account
In the app: open your account screen and choose Delete account. Without the app: see rafiko.lanovatic.com/delete-account or write to abed@lanovatic.com.
- Erased at once: your email address, password, sessions and pending codes. Your email address can then be used for a new account.
- Kept: the business records you took part in, under an anonymized name, for the legal retention period, because history cannot be edited.
- If you are the last owner of a business, deleting your account closes the business.
Children
Rafiko is a tool for businesses. It is not intended for children.
Changes
We will publish any new version of this policy at rafiko.lanovatic.com/privacy with a new version label, and tell you in the app before a material change applies.