Yonga Orders privacy policy

Everything you record in the app is saved on your phone: your customers and their contact details, your orders with their items, days, prices and payments, your notes, your products, the pictures you keep with orders, the words of your messages to customers, and your settings. The messages and notes you bring in to be read are saved there too, with the orders they became.

This data sits in the app’s private storage, which other apps cannot read. We cannot see it, and there is no account that would let us.

If backup is on in your phone’s settings, Android keeps a copy of your order book with your Google account, so that it can come back on a new phone. That copy is held by Google under your own account, not by us. Pictures are left out of it; they move only when you copy one phone to another directly.

Reminders are scheduled by the phone itself. No push service is involved, and nothing is sent anywhere to deliver them.

A message to a customer is filled in by the app from your own words and handed to the app you choose, or copied. Yonga Orders never sends anything to your customers itself. A spreadsheet export is a file saved where you choose.

When you speak a note, your phone’s own speech service turns your voice into text, under that service’s own policy. Yonga Orders does not record audio and receives only the text.

The app uses four permissions:

• Network access, to have messages read once you have allowed that.
• Network state, to tell you when a message is waiting for a connection.
• Notifications, asked for only if you want reminders.
• Running after a restart, so reminders are booked again when the phone restarts.

It does not ask for your location, contacts, camera, microphone, photos or files, and it does not read your advertising ID. Pictures and screenshots reach the app through Android’s own picker or the share menu, and only the ones you choose.

Nothing leaves the phone unless reading is allowed. The app asks the first time you bring in a message or a screenshot, and the choice stays in Settings under “Reading”. Until you allow it, what you bring in waits on the phone.

With reading on, each message, note or screenshot you ask the app to read is sent to our server. The request contains:

• the text of the message or note, or the chat screenshots you chose (three at most), with the date and time you brought them in and whether they were typed, pasted, shared or spoken;
• your product names, and the other names you have taught the app for your customers and products;
• a short summary of the orders that are still open or not yet fully paid: the customer’s name, the items, the day and time, the total and what has been paid, so that a message like “Sarah paid the rest” finds its order;
• your currency and the way your phone writes dates;
• an access key that identifies this installation of the app.

Before a screenshot is sent you see it and can crop it, so that only what the order needs goes out. Screenshots are made smaller on the phone first.

The contact details you saved for customers, your notes, the pictures kept with orders, and orders that are cancelled or finished and paid are not part of a request.

The access key is created at random. It is not your name, email address, phone number or advertising ID, and we have no way of telling who it belongs to.

Two kinds of service handle a request.

Our server. It checks the access key, applies the fair-use limits, passes the request on to be read and checks the answer before it goes back to your phone. It stores nothing you send: your messages, screenshots, product names and order summaries are held in memory while a reading is made, and are never written to its storage or its logs. The result of a reading stays in memory for up to an hour, so that a request repeated after a lost connection is not read twice, and is then gone. What the server does keep is a record of the installation and counts of its requests.

AI service providers. The reading itself is done by third-party AI services: one reads the message or the screenshot, and another checks each part of that reading against the message’s own words. They receive what the request contains, except the access key, and because the request reaches them from our server, they do not see your IP address or anything about your phone.

These providers process a request in order to answer it. Under the terms that apply to us, they do not use what you send to train their models. We also ask them not to keep a request wherever a service offers that choice; they may still retain it for a limited time under their own terms, for example to detect abuse.

We treat which providers we use as business information, but we will name the current ones if you ask: write to [email protected].

Traffic between your phone, our server and these providers also passes through the hosting and network providers that carry it. Our server and the services described here may process data in countries other than the one you live in.

The messages and screenshots you bring in hold your customers’ names and words, and sometimes their addresses or phone numbers. You decide what to bring in. Bring in what an order needs, crop the rest out of a screenshot, and leave out conversations that are not about an order.

You keep your order book for your own business, and you are responsible for handling your customers’ details in line with the rules that apply where you work. If a customer of yours asks us about their data, we will refer them to you: the order book is on your phone, not with us.

• No advertising, and no advertising identifiers.
• No analytics or tracking software in the app.
• We do not sell or rent your data, and we share it with no one except the service providers described above.
• We do not build a profile of you or of your customers from what you bring in, and we do not use it to train AI models.
• We do not send marketing email. The app never asks for your address.
• The app never contacts your customers. A message goes to them only when you send it yourself.

On your phone, your data stays until you delete it. You can delete a single order or customer, or erase every order, customer, payment, product and picture with “Delete everything” in Settings. Uninstalling the app also removes everything it stored on the phone. A chat screenshot is deleted from the app once its order is saved or set aside, unless you choose to keep it with the order.

A copy kept by Android’s backup is managed from your phone’s backup settings and your Google account.

You can stop anything leaving the phone at any time by turning reading off in Settings. What was waiting to be read at that moment stays on the phone.

Our server stores nothing you send, so there is nothing of that kind to delete there. Counts of an installation’s requests are kept for about 40 days, and the installation record itself while the service runs. They are not linked to your identity; if you want them removed, write to [email protected] and we will work out with you which installation is yours.

Requests held by the AI service providers are removed under their own retention rules.

If you write to us, we keep your message so we can answer it and refer back to it if you write again.

Everything the app sends travels over an encrypted connection. On the phone, the access key is stored encrypted with the phone’s own keystore and is left out of backups, and our server keeps only a one-way fingerprint of it. The keys to the AI services stay on our server and are never in the app. No system is perfectly secure; holding very little is the main protection we rely on.

Depending on where you live, for example under the GDPR in Europe or the KVKK in Türkiye, you can ask what data we hold about you, have it corrected or deleted, object to its processing or have it restricted, receive a copy of it, and complain to your data protection authority.

Most of your data is on your phone and under your control. For anything else, write to [email protected]. You will get an answer within 30 days, usually much sooner.

Where the law asks for a legal basis: messages and screenshots are sent for reading on the basis of your consent, which you give by allowing reading and withdraw by turning it off. The request counts are kept on the basis of our legitimate interest in keeping the service available and free of abuse.

Yonga Orders is made for adults who run a small business. It is not directed at children, and we do not knowingly process their data.

Yonga Orders is made by Yonga Works, an independent software developer based in Türkiye and the controller of the data described on this page. The same person writes the code, answers support mail and handles any request about data.

Contact: [email protected].

If this policy changes, the date at the top changes with it. There is no archive; the page you are reading is the current one.

We will not widen what leaves your phone without asking you in the app first.