Privacy policy

• We only process the data needed to run your till, your account and your licence.
• No advertising, no tracking, no analytics or crash-reporting tools — and we never sell data.
• The sample data of the demo shop stays on your device. With an offline licence, your shop's data stays on your device too.
• You can delete your account yourself at any time — in the app or on the web.

Kashir is operated by Jafinity (“we”, “us”). We are responsible for your account data and for running the service. For the data your shop records about its own customers, your shop is responsible — we only process it on your behalf to provide Kashir.

Questions about your data? Write to us at [email protected] — all contact options are at the end of this page.

When you create an account, we store:

• your name, the shop name and the type of shop;
• your phone number and email address;
• your password — only as a secure hash, so nobody can read it, not even us;
• your language and, if you add them, your address and a profile picture.

We use this to sign you in, to set up your shop and licence and to contact you about your account. When a new shop registers, we receive a short notice with the shop name, your name, email, phone and country so that we can help with activation.

Staff accounts that an owner creates contain a name, the role, a PIN — also stored only as a hash — and, optionally, an email address.

Kashir stores what your shop enters while working:

• products, prices, stock, product photos and the shop logo;
• sales, receipts, returns, payments and cash shifts;
• staff, their roles, PINs and salary records;
• your own customers — name, phone, address and notes — and their entries in the debt book;
• tables, orders and reservations.

This data always lives on your device. It is stored on our server only when your shop uses the cloud — see the next section. We use it solely to provide Kashir to you, never for advertising or anything else.

That depends on how you use Kashir:

• Demo shop: it is created on your device. Nothing from it is sent to us.
• Offline licence activated with a code: all shop data stays on the device.
• Offline licence with an account: your account, the device and the shop's basic settings (name, currencies, exchange rates) are stored on our server — plus products, categories and product photos, unless the owner turns off “Back up items & categories in the cloud”. Sales, customers, the debt book, staff, shifts and reservations stay on the device.
• Cloud licence and the 14-day trial: the shop's data is synced with our server so that several devices and the web version share it and you have a backup.
• Web version in the browser: the data is stored on our server. The browser itself only keeps small settings, such as the language, printer settings and an unfinished cart.

In every mode, the app checks for updates. For this it sends only the platform, the app version and a device identifier — nothing from your shop.

When a device signs in to your account, we store a device identifier (calculated from hardware features), the platform, the device name, the app and system version and when the device was last online.

We need this to activate your licence, to count the devices it covers, to block a lost or stolen device and to offer each device the right update.

When you start the demo in the app, the app sends us your details from the demo form and some device data:

• Contact: name, phone and email (optional on the iPhone), the type of shop you chose and, if you like, a referral code and how you found KASHIR.
• Device: platform, model, manufacturer, system and app version, language and a hashed device identifier.
• Usage numbers: how often the demo was opened and how many sales, items and customers were created in it — never their contents.
• The sample data of the demo shop itself stays on your device.

We use these details only to advise you about KASHIR. To delete them: in the app “End demo” → “Also delete my details at KASHIR”, or write to us: [email protected].

For accounts we also store where the sign-up came from (app or web, platform, device, language, how you found KASHIR) and, as reported by your devices, usage numbers: how many items, categories, customers and orders there are, and import and export events.

This helps us support you with the setup and shows us where KASHIR has to become simpler. The contents of your items, customers and sales are not part of these numbers.

If you entered the code of a KASHIR partner (sales rep) when signing up or in the demo, they are your contact person. They see your name, your contact details, the type of shop, the status of your licence and the numbers above — for your account or your demo.

They never see your items, customers, sales, payments or licence codes, and they cannot change anything in your account.

To protect your account, each sign-in stores the IP address and the type of browser or device. You see this list in your profile and can sign out anything you don't recognise. To stop password guessing, we count sign-in attempts per IP address for a short time. Our activity log stores the IP address only in scrambled (hashed) form, and the server keeps short technical logs to find errors and fend off attacks.

All connections are encrypted (HTTPS). Passwords and PINs are stored only as hashes, and a cashier account never receives purchase prices or profits.

We only send emails about your account: confirming your email address, resetting your password, notices when your email or password changes, invitations for staff and reminders before your licence expires. No newsletters and no advertising.

Emails are delivered through Google (Gmail). Emails with a one-time link are blanked in our database after sending, and sent emails are deleted from it after about a week.

The app only asks for these permissions when you use the matching feature:

• Camera — to scan barcodes and licence codes and to take product photos.
• Photos — to choose a product photo, and to save a receipt image only when you choose to.
• Bluetooth and local network — to find and use receipt and kitchen printers.

Camera images and scans are processed on your device. A photo only leaves the device when you save it as a product photo or logo and your shop uses the cloud.

Kashir contains no advertising and no tracking, analytics or crash-reporting tools from other companies. We do not sell or rent out data, and we do not share it for advertising.

The website only uses necessary cookies: to keep you signed in, to protect forms and to remember settings such as your language.

We work with only a few service providers, and they process data only on our behalf:

• Our server — runs the web version, the database and the backups.
• Amazon Web Services (S3, EU region) — private storage for product photos and shop logos.
• Google (Gmail) — delivers our emails.

We do not pass data on to anyone else unless the law requires us to.

• Account and shop: as long as the account exists.
• Sales in the cloud: depending on the licence, 6 to 60 months (12 months by default). Older sales are removed from the server — your devices keep their history.
• Server backups: daily backups are kept for 14 days, weekly ones for 4 weeks. Deleted data therefore also disappears from the backups after four weeks at the latest.
• Sign-ins, attempt counters and sent emails: deleted automatically after one day to a few weeks.
• Licence and payment records: as long as we need them for billing and legal reasons.
• Demo details: the contact and device data of a demo that has not been opened for 24 months and did not become an account are erased.

You can delete your account yourself at any time:

• In the app: Settings → My account → Delete account.
• On the web: Profile → Delete account.

If you are the only owner of your shop, the shop and all of its data on our server are deleted as well. You are signed out on every device, and when you delete in the app, the data on that device is removed too. We keep only the licence and payment records we need for billing. You can also ask us to delete your account: [email protected].

Deleting an account also erases where the sign-up came from and the contact details of an earlier demo of this account.

You can ask us at any time which data we hold about you, have it corrected or deleted, restrict its use or object to it, and receive a copy. Much of this you can do yourself in the app or in your profile — shop owners can download a full copy of their shop's data under Data & backup.

For anything else, write to us — we will reply as quickly as we can. You also have the right to complain to a data protection authority.

Kashir is a tool for businesses and is not directed at children. We do not knowingly collect data from children.

If the way we process data changes, we update this page and the date at the top. We will tell you about important changes in the app or by email.

For questions about your data or this policy, reach us here: