Skip to content
afus 30-day free trial

Privacy policy

Last updated: 31 October 2026

This policy explains what data the Afus app and the afus.app website process, why, and what your rights are under Moroccan Law no. 09-08.

1. Data controller

Tisnel LLC, publisher of Afus, 30 N Gould St Ste R, Sheridan, WY 82801, USA. Contact: contact@afus.app.

For the data of the customers a shop records in Afus, the shop decides how it is used; Afus stores it on the shop's behalf.

2. Data processed

In the Afus app

  • Your account: email address, name, shop name and country, language.
  • Your shop's data: products, stock, sales, till, suppliers, expenses, and the customers you record (name, phone, credit, loyalty points).
  • Devices: an installation identifier created by Afus and the device name.
  • Anonymous device fingerprint: a one-way code (SHA-256 hash), computed on the device and impossible to turn back into the identifier, used to grant only one free trial per device. The device's technical identifier never leaves the device.
  • Advanced invoice reading with AI (Pro and Business plans): only when you ask for it, the photo of the supplier invoice is sent to Anthropic, in the United States, to be read. Standard reading happens on the device, with nothing sent.
  • WhatsApp messages: Afus prepares the message and opens WhatsApp; you are the one who sends it. Afus does not read your conversations.
  • Errors and support: when the app hits an error, its technical message, the screen concerned, the Afus version and the system are sent to the publisher so it can be fixed. “Report a problem” sends your message and, only if you attach it, a screenshot.
  • Payment (not open yet): it will be handled by Polar; Afus will never see your bank details.

On the afus.app website

  • No cookies, no audience measurement, no advertising (see the Cookies and storage page).
  • The Pricing, Catalogue, New password and Welcome pages contact Supabase, which then sees your device's IP address.
  • The website host keeps technical logs (IP address, page requested, date and time).
  • If you write to us, we receive your message and contact details.

3. Purposes

  • Providing the service: sign-in, checkout, stock, sharing data between the shop's devices.
  • Managing the licence: free trial, plan, number of devices.
  • Sending account-related emails (for example password reset).
  • Answering your messages.
  • Keeping the website and the service secure.

Your data is never sold or rented, and is not used for any advertising.

4. Legal bases

Under article 4 of Law no. 09-08:

  • performance of the contract (these terms) for the account, shop data, devices and licence;
  • the publisher's legitimate interest for the anonymous fingerprint (preventing repeated trials) and security logs;
  • your consent for advanced AI reading, sent only when you ask for it.

The email and shop name are required to create an account; without them, sign-up is not possible.

5. Recipients and processors

  • The publisher of Afus, for support and licence management.
  • Within your shop: the administrator and staff, according to their rights (staff never see purchase prices or margins).
  • Supabase (Supabase Pte. Ltd., Singapore): database, accounts and sign-in emails, on Amazon Web Services servers in Ireland (eu-west-1 region).
  • Hostinger International Limited (Cyprus): hosting of the afus.app website.
  • Anthropic (United States): advanced invoice reading, only at your request.
  • Polar: online payment, once it opens.

6. Transfers outside Morocco

App data is stored in Ireland and the website is hosted by a company based in Cyprus. Both countries are on the list of countries with an adequate level of protection drawn up by the CNDP (deliberation no. 236-2015). Supabase is a Singapore company. The photo sent for advanced AI reading is processed in the United States, only when you ask for it.

7. Retention

Account and shop data are kept for as long as the account exists. You can ask for your account and your shop's data to be deleted by writing to contact@afus.app; remember to download a backup first. Messages you send us are kept for as long as needed to answer you and follow up on your request.

8. Security

  • Encrypted connections between the app, the website and the server.
  • Strict separation of each shop's data, enforced by the server.
  • Sessions kept in the system's secure vault (Windows, Android).
  • Backups encrypted with a password you choose.
  • No secret key in the app.

9. Your rights

Law no. 09-08 gives you the following rights:

  • information about the processing of your data (article 5): that is the purpose of this page;
  • access to your data (article 7);
  • rectification, erasure or blocking of inaccurate or incomplete data (article 8);
  • objection, on legitimate grounds, and free of charge to direct marketing (article 9).

To exercise these rights, write to contact@afus.app with proof of your identity. The app also lets you download a full backup of your shop at any time.

10. CNDP

You can refer a matter to the CNDP (Commission nationale de contrôle de la protection des données à caractère personnel), Morocco's data protection authority: www.cndp.ma.

Official sources