# Autoafo — Privacy Policy
**Last updated: 6 October 2026**
This policy explains what the Autoafo app (`info.autoafo.app`) does with personal
data: what it holds, where it came from, who else can see it, how long it is
kept, and what you can ask us to do about it.
It is written to be read. Where a section could have been a sentence, it is a
sentence.
## 1. Who is responsible
Autoafo — Armenia — is the controller of the
personal data described here.
Questions, requests and complaints: **info@arevtur.online ] · [+37443138451]
## 2. Who the app is for
Autoafo is not a shop for the general public. It is for people and businesses
that already have an account with Autoafo, and for Autoafo's own staff. There
is no sign-up in the app: accounts are issued by us from our own customer
records, and you sign in with your name as it is written on your account. On
first sign-in the account uses a shared starting password and you immediately
choose your own (at least 8 characters).
## 3. Where your data comes from
Most of it is not something you typed into the app.
Autoafo keeps its sales records in its own workbooks, in the shop's own cloud
folder, as it did before this app existed. Those records — what was bought,
when, at what price, and under which customer name — are read on a schedule by
the shop's own website server, which keeps them in its database and serves them
to the app. The app shows you the record; it does not create it.
What you type into the app yourself is the short list in section 4.2.
## 4. What the app processes
### 4.1 Your account
| Data | Why |
|---|---|
| Your customer name (as written in our records) | Identifies the account and signs you in |
| Your password | Sign-in. Stored by the shop's server as a hash, never as text; we cannot read it |
| Whether you are staff, and whether the account is enrolled or blocked | Decides what the account may see |
| Your chosen language | So automatic messages are written in it |
| Notification preferences (on/off, sound, and per kind) | So we send only what you asked for |
| First and last seen dates | Account housekeeping |
### 4.2 Your details, which you fill in yourself
You can leave these blank and still use the rest of the app. An order can be
placed without them; only an invoice needs them complete.
### 4.3 Your purchases and debt
Product code and name, quantity, unit price, line total, date and time, and the
customer name the sale was recorded under. Where our records carry a phone
number against a sale, that comes across too. Debt balances and their movement
come from the same records.
Staff accounts see this for every customer. A customer account sees only its
own rows — enforced by the server, not by the screen.
### 4.4 Orders and invoices
What you ordered and how much of it, any note you wrote, the collection day and
hour you chose, and the price the server worked out. When you submit an order,
your details from section 4.2 are **copied onto it** as they stood at that
moment, so that correcting your address later cannot rewrite an invoice we have
already acted on. An invoice keeps its own copy of the same, for the same
reason.
### 4.5 Messages and notifications
Messages we send you, and a record of which you have read. Only staff can write
one; a customer reads only what is addressed to them or to everyone.
### 4.6 Your device, for notifications only
If you allow notifications, the app registers a Firebase Cloud Messaging token —
an identifier for the installation, not for you — together with the platform name
(`android`). The token belongs to the installation, so signing in moves it to
the account that signed in, and signing out deletes it.
## 5. What the app does not do
- **No advertising, no advertising identifiers, no ad networks.**
- **No analytics and no crash reporting.** Nothing measures how you use the app.
- **No tracking across other apps or websites.**
- **We do not sell personal data, and we do not share it for anyone else's
marketing.**
- **No account is created by the app.** Nothing about you enters our records
because you installed it.
The app asks Android for exactly two permissions: internet access, and permission
to show notifications. It does not ask for your location, camera, microphone,
contacts, files, or phone identity — it has no code that could use them. The map
in the address screen is one you pan and tap yourself; the app never reads where
the phone actually is.
## 6. Why we process it, and on what basis
- **To perform our contract with you** — showing your account, taking orders,
issuing invoices, answering about a debt.
- **To comply with the law** — Armenian accounting and tax obligations require us
to keep records of sales and invoices, regardless of the app.
- **Because you consented** — notifications. You may withdraw this at any time in
Settings, or in Android's own settings, without losing anything else. A
notification switched off does not delete the message; it is still waiting for
you in the app.
- **Our legitimate interest** — keeping the service secure and working.
## 7. Who else sees it
The app talks to one server only: the shop's own website, `arevtur.online`.
Beyond it, these services are involved. Each is listed with what actually
reaches it.
| Service | What reaches it | Where |
|---|---|---|
| **The shop's website** (`arevtur.online`) | Everything in section 4: this is the app's own server and its database | The hosting the shop rents |
| **Supabase Storage** (cloud storage) | Nothing but the app's emergency copies, see below | Data centres of the Supabase platform, outside Armenia |
| **Google Firebase Cloud Messaging** | Your device token, and the title, body, id and kind of a notification — nothing else | Google's infrastructure |
| **OpenStreetMap** (map tiles, and Nominatim for address search) | Only when you open the address screen: your device's IP address, the part of the map you are looking at, and the address text you type or the point you tap. Your name and account are not sent | OpenStreetMap Foundation |
| **Image hosts** (e.g. ibb.co) | Product photographs are held wherever Autoafo already keeps them. Your phone fetches the picture directly, so the host sees your IP address. Nothing about you is sent | Third-party hosts |
| **Google Play** | Distributes and updates the app under Google's own terms | Google |
**The emergency copy.** So that a phone is not blind when the website cannot be
reached, the shop's server keeps, in a private Supabase Storage bucket, a
compressed copy of each account's own emergency data: recent orders, debts,
purchases, invoices and messages. It is refreshed about once a day, written only
by our server, and the phone may download its own copy through a URL the server
signed for it alone. Nobody can list the bucket or read a copy without a signed
URL. When an account is closed, its copy is deleted.
Beyond these, personal data may be disclosed to our accountants, auditors and
professional advisers where they need it, and to a public authority where the law
requires it.
**Sharing an invoice is your own action.** When you send an invoice out of the app
as a picture or a spreadsheet file, it goes through Android's share sheet to
whichever app you pick. From that moment it is in that app's hands and this
policy no longer covers it.
## 8. What stays on your phone
| Kept | Where | Cleared |
|---|---|---|
| Your name, and your password if you ticked "remember me" | Encrypted storage backed by the Android hardware keystore, not ordinary preferences | Signing out clears the password and keeps the name; "forget" clears both; uninstalling clears everything |
| Language, notification choices, basket contents, which messages you have read or deleted | App preferences | Uninstalling |
| Product photographs | A cache of files | On the schedule you choose in Settings — a day, a month, a number of days of your own, or never until you press clear |
| Invoices you have kept | App files | When you delete the invoice, or on uninstall. An invoice the server has forgotten is marked "only a copy on this phone" |
| The emergency copy, once downloaded in an outage | An app file, compressed | Replaced by the next download; removed on uninstall |
| Staff only: the full workbook snapshot | An app file | At the end of the day, on the next launch |
## 9. How long we keep it
- **Notifications:** deleted from the server after 14 days at the latest. A
message to everyone goes sooner once every enrolled customer has read it.
- **Invoices:** three months on the server. Your own copy stays on your phone
until you delete it.
- **Orders:** an order that has been handed over is kept for two weeks and then
deleted, not archived — the sale itself comes back through our sales records,
and that is the record.
- **The emergency copy:** refreshed about once a day, so it is at most a day
old; deleted when the account is closed.
- **Device tokens:** deleted when you sign out, and dropped when Google reports
the token as dead.
- **Account, purchases, invoices and debt:** for as long as you are a customer,
and afterwards for as long as Armenian accounting and tax law requires us to
keep the underlying records.
## 10. How it is protected
The app talks only to the shop's own server, over HTTPS, and access is decided
by that server per row, not by what the app chooses to display: a customer
account cannot read another customer's rows even with a modified app. Prices are
always decided on the server and never accepted from a phone. Saved passwords
sit in Android's encrypted storage with the key in the hardware keystore. The
emergency copies sit in a private bucket reachable only through URLs our server
signs. Staff access is limited to the people who need it for their work.
No system is perfect, and we do not claim otherwise. If a breach occurs that is
likely to put your rights at risk, we will inform you and the Personal Data
Protection Agency as the law requires.
## 11. Your rights
Under the Republic of Armenia Law on the Protection of Personal Data you may:
- ask what we hold about you and get a copy;
- have what is wrong corrected — your own details you can correct in the app
yourself, at any time;
- ask for deletion, or for processing to stop;
- withdraw a consent you gave, notifications above all;
- object to processing, and complain to us or to the Personal Data Protection
Agency of the Ministry of Justice of the Republic of Armenia.
Write to **[CONTACT EMAIL]**. We answer within the period the law sets, and at the
latest within one month.
One limit, stated plainly: we can close your account and stop showing you things
in the app, but we cannot delete the sales and invoice records the law requires us
to keep for accounting and tax. Those stay in our books for as long as that
obligation lasts, and no longer.
## 12. Children
The app is for account holders and staff. It is not directed at children, and we
do not knowingly hold data about them.
## 13. Changes to this policy
If we change it, the date at the top changes, and a change that matters to you
will be announced in the app before it takes effect.
## 14. Contact
[AUTOAFO]
info@arevtur.online ] · [+37443138451]