Privacy policy

Akkd (akkd.app) is a platform that helps shops in Egypt run a menu, orders, bookings and payments. This policy explains what data we collect, why, how we protect it, and your rights over it — in line with Egypt's Personal Data Protection Law No. 151 of 2020.

1. Who is responsible for the data

For shop owners and their staff: Akkd is the data controller. For a shop's customers (their name, number and orders): the shop owner is the controller, and Akkd processes that data on the owner's behalf to run the service.

2. The data we collect

• Shop data: the name, logo, photos, menu or services and prices, opening hours, WhatsApp number, address and the payment methods the owner enters.
• The owner's account: email and password (stored encrypted; we never see it).
• The shop's customers: name, mobile number and the order or booking details (and the delivery address for delivery orders).
• Proof of payment: the screenshot of an InstaPay or mobile wallet transfer, and the sender's number and reference if they were entered.
• Staff: name, mobile number and role (the staff code is stored encrypted).
• Feedback: the message and rating, the contact (only if you typed it yourself), and the page you were on.
• Location: only when a customer taps «Use my location» in the cart (section 6).
• Loyalty, promo codes and ratings: loyalty = the customer's mobile number and its counters at the shop (stamps or points counted from their orders, and the rewards taken and on which order); the code used and the discount on the order, and the mobile number with the code when the shop set «once per customer» or «first order only»; the rating (stars and a comment) on the order.
• Sales reps (our sales team): name and mobile number, the shops they brought, their commissions and payouts.
• «Custom preview»: a shop page we or a sales rep make for a shop owner before they sign up — the shop name, logo, colour and 5 to 10 items, the owner's name and number if typed (only to open WhatsApp), who made it and how many times it was opened, and the orders placed on it.
• Technical data: IP address and browser type — to protect the service from abuse and repeats — and small browser files that keep your session, your language and whether you have seen the guided tour.

We don't ask for sensitive data (such as health information or bank cards). There are no card payments on the platform.

3. Why we use it

• To run the menu, orders and bookings and send them to the shop's WhatsApp.
• To confirm payments by hand — by the shop owner or our team.
• To manage subscriptions and invoices and send reminders.
• For support, improving the service and reading users' feedback.
• To protect the platform from abuse and fraud.

We don't sell your data to anyone, and there are no ads based on your data.

4. How long we keep it

• Orders and bookings: after 12 months we remove the customer's name, number, address and notes — only the items and amounts stay, for the shop's numbers.
• Prescription photos and shopping-list photos: deleted after 90 days.
• Payment screenshots: deleted with their details 90 days after the payment is confirmed or refused.
• Sign-in codes and team invitations: deleted as soon as they expire.
• Feedback messages: deleted after 12 months, or earlier at your request.
• Phone notifications: a customer's notifications are tied to one order and deleted after 30 days (or as soon as the order is deleted or you tap «Stop notifications») — without your name or number. Team devices that got no notification for 90 days are removed.
• Team messages: each team member's inbox is deleted after 60 days, the «message to the team» itself after 90 days, and notifications waiting to be sent after 7 days.
• Invoices, shift closes and other financial records: for the period the law requires.
• Loyalty: the mobile number and its counters stay while the customer is a member at the shop; the number leaves the rewards after 12 months like the orders, and all of it is deleted at the customer's or the shop owner's request, or when the shop closes its account.
• Promo codes and ratings: recorded on the order itself, so the customer's name and number leave them with the order after 12 months (the mobile number kept with a code too). A rating shows inside the shop's page without its author's name or number.
• «Custom preview»: if the shop owner does not make it theirs, the page is deleted after 14 days with all its data (their name and number included) and the orders placed on it.
• Sales reps: their data stays while they work with us; commissions and payouts for the period the law requires for financial records, and the rest is deleted at their request once the work ends.
• If a shop owner asks to close their account: we erase the whole shop — its data, its photos and its sign-in account (except the financial records the law requires us to keep).

5. Who sees your data and where it is kept

The platform's data is kept with our infrastructure providers: Supabase (database, sign-in and storage) on AWS eu-central-1 servers in Frankfurt, Germany, Vercel (hosting), Vercel Analytics (visit counts — no cookies and no personal data),Resend (the emails we send to shop owners, such as a password reset) and the browsers' push services (Google, Apple and Mozilla — they only carry the notification to your phone, without your name or number). They act only on our behalf, and their servers are outside Egypt; we deal with them in line with the law's conditions on data transfer. A WhatsApp link opens your own WhatsApp — we don't use a WhatsApp API and we don't read your chats. A shop owner and their authorised staff see only their own shop's data, and the Akkd team accesses data for support, only as far as needed.

The delivery areas' boundaries come from OpenStreetMap data (© OpenStreetMap contributors, ODbL). «Use my location» sends your point to our server only, to find your area and the delivery fee — never to a map service; the shop sees it with the order so the rider can find you.

6. Location

When a customer taps «Use my location» in the cart, the browser asks first; if they agree, we take the coordinates once to find their area and fill in the address. The coordinates are sent to the shop with the order (so the rider can get there); we don't follow your location afterwards or use it for anything else. You can type your address by hand without sharing your location.

7. Data saved on your device

So you don't type the same things every time, the browser on your phone saves, for each shop: the cart (cleared by itself after 24 hours or once the order is sent), your name, mobile number and address, and the page language. This data is on your device only — not with us. Clear it from your browser settings: «Clear site data» for akkd.app, or open the page in a private window.

8. Your rights

At any time you have the right to:

• Know what data we hold about you and get a copy of it (right of access).
• Correct any wrong or incomplete data (right of rectification).
• Ask for your data to be deleted or its use restricted (right of erasure and restriction).
• Withdraw your consent or object to your data being used for a specific purpose.

Send your request on WhatsApp or by email to hello@akkd.app (details below), and we will answer as soon as we can and no later than the period the law sets. If the request is about your data at a particular shop, we may pass it to the shop owner, as they are its controller.

9. Data security

Connections are encrypted (HTTPS), passwords and codes are stored encrypted, payment screenshots are kept in private storage that is not open to the public, and access to data is limited by permissions. If a breach affects you, we will inform you and the competent authority within the legal deadline.

10. Age

Shop owner accounts are for people aged 18 or over. If we learn that a shop account was opened by someone younger, we close it and delete its data.

11. Changes to this policy

We review this policy with a lawyer. Any change will be announced here with a new version number and date, and shop owners will be told before it applies. Continuing to use the service after a change means you accept it.