Privacy Policy

Last updated: 18.10.2026

This policy explains what personal information we collect when you use the Afndena app and this website, why we collect it, who we share it with, and what you can do about it.

The company responsible for that information is אפנדינא בע"מ, company number 516302494, of ברטעה 188, בסמ"ה ("Afndena", "we", "us").

If you do not agree with this policy, please do not use the app.

1. What we collect

1.1 Information you give us

• Your name and phone number. Your phone number is how you sign in: we send a one-time code to it and you enter that code in the app. Customer accounts have no password.
• Your email address, if you choose to give one. It is optional.
• Delivery addresses you save — street and building, city, an optional label such as "Home" or "Work", and optional notes for the driver such as "ring twice, second floor".
• Your language preference, which also decides the language of the messages we send you.
• Notes you add to an order, such as a request to the kitchen.

1.2 Information created when you order

• What you ordered, from which branch, when, the amount, the payment method, and how the order progressed.
• Your Afndena Coins balance, and the coins earned and spent on each order.
• Any promotional code you used.
• For online payments, a tax invoice, issued through our payment provider PayPlus. If you have given us an email address, it is emailed to you. Orders paid in cash at the branch are invoiced by the branch itself, not by us.

We store the product names, prices and options as they were at the moment you ordered. This is deliberate: it means your order history stays accurate even after the menu or its prices change.

1.3 Device and technical information

• A notification token for each device you sign in on, and whether that device is an iPhone or an Android phone. This is the address your order notifications are sent to. On its own it does not identify you.
• Ordinary technical information produced when your device connects to our servers, such as your IP address and the time of the request. This is used to operate and secure the service.

1.4 Location

The app does not request access to your device's location and does not collect it. The delivery address you type in is stored with the order, so the branch can reach you.

1.5 Ad measurement

We advertise Afndena on Facebook and Instagram. To know whether those adverts work, the app reports a small number of events to Meta — such as opening the app, viewing an item, adding one to the cart, starting checkout, and completing a purchase. These events never carry your name, phone number or address. A purchase event carries the order value, the currency, the order number, the branch and the menu items ordered.

On iPhone and iPad, iOS asks you first. Apple's App Tracking Transparency prompt controls one thing: whether the event may carry your device's advertising identifier.

• If you allow it, the event carries that identifier, so Meta can connect it to the advert you saw.
• If you decline, the event is still sent, but without your device's advertising identifier, and used by Meta only for aggregated measurement of our adverts.

Either way the event itself is the same small fact. Declining has no effect on your orders, your Afndena Coins, or the messages we send you about an order. On Android you can limit ad personalisation in your Google account settings.

1.6 What we do not collect

We never receive or store your card details. Online payments — credit card, Bit, Apple Pay and Google Pay — are handled entirely by our payment provider, PayPlus, on its own secure page. We receive only a confirmation that the payment succeeded or failed, a reference to it, and the card brand and last four digits that appear on your invoice. Your full card number and security code never reach our servers.

We do not ask for identity numbers, health information, or any other sensitive category of personal data, and we do not want you to send them to us.

2. Why we use it

We use this information because it is necessary in order to provide the service you asked for, because we are required to keep certain records by law, and — for marketing messages — for as long as you have not switched them off.

3. Messages we send you

We draw a firm line between two kinds of message.

Service messages are part of the order itself. You cannot switch these off while an order is active, because without them you would not know what is happening to your food: the confirmation when we receive your order, a notification while it is being prepared, and a WhatsApp message when it is ready or if it has been cancelled.

Marketing messages are offers and announcements. They are on by default, and you can switch them off at any time in the app — switching them off has no effect on your service messages.

4. Who we share it with

We do not sell your personal information, and we do not share it so that other businesses can advertise to you. We do share the limited measurement events described in section 1.5 with Meta, for our own advertising.

We use a small number of service providers who process information strictly on our instructions:

• A WhatsApp messaging provider, which receives your phone number and the content of the message in order to deliver your sign-in code and your order messages.
• A push notification service, which receives your device's notification token and the content of the notification.
• Our payment provider, PayPlus, which handles the online payment itself. It receives the payment details directly from you; we receive only the result. The tax invoice for an online order is also issued through PayPlus and, where you gave us an email address, emailed to you.
• Meta, which receives the measurement events described in section 1.5 — with your device's advertising identifier only where you allowed tracking on iOS; otherwise without one, and used only for aggregated measurement of our adverts.
• Hosting and database providers, who run the servers and the database on which the service depends. Your information may be stored or processed outside Israel by these providers.

Beyond that:

• Branch staff see the details of your order and, for a delivery, the address and phone number needed to bring it to you.
• We may disclose information where the law requires it, or where it is necessary to establish or defend a legal claim.

5. How long we keep it

• Your account details — for as long as your account exists.
• Your orders — we keep records of orders after an account is deleted, because we are required to retain accounting and tax records. Those records are kept in anonymised form (see section 6).
• Sign-in codes — a few minutes; they are single-use and are stored only as an irreversible hash, never as the code itself.
• Sign-in sessions — until you log out or the session expires.
• Notification tokens — until you log out on that device or delete your account.

6. Deleting your account

You can delete your account from the app at any time. This is not a request that we process by hand — it happens immediately, and this is exactly what it does:

• Your saved addresses are deleted.
• The delivery address and coordinates stored on your past orders are erased.
• All of your sign-in sessions are destroyed, on every device.
• All of your notification tokens are deleted, so we stop sending to your devices.
• Any outstanding sign-in codes for your number are deleted.
• Your name, phone number and email address are removed from your account record, and your Afndena Coins balance is set to zero. Marketing messages are switched off.

The order records themselves remain, but with nothing in them that identifies you. We keep them because we are legally required to retain records of sales.

Your Afndena Coins are forfeited when you delete your account. They have no cash value and cannot be paid out or transferred. Please spend them first.

7. Your rights

You may ask us to:

• tell you what personal information we hold about you;
• correct it if it is wrong — you can change your name, email, language and addresses yourself in the app at any time;
• delete your account, as described in section 6;
• stop sending you marketing messages — you can do this yourself in the app.

To make any of these requests, contact us using the details in section 11. We may need to verify that the request comes from you, which we would normally do by confirming control of the phone number on the account.

8. How we protect your information

• Sign-in codes and session tokens are stored only as irreversible hashes, never in a form we could read back.
• Staff and branch accounts have passwords stored using a modern password-hashing algorithm, never in plain text.
• All traffic between the app and our servers is encrypted in transit.
• Each branch can reach only its own orders and its own data.
• We deliberately do not store card numbers, so they cannot be taken from us.

No system is perfectly secure, and we cannot promise that nothing will ever go wrong. If a breach occurs that puts your information at serious risk, we will act as the law requires.

9. Children

The Afndena app is intended for general use and is not directed at children. We do not knowingly create accounts for children under the age at which they can consent on their own under applicable law. If you believe a child has given us personal information, contact us and we will delete it.

10. Changes to this policy

If we change how we handle your information, we will update this page and change the date at the top. If the change is significant, we will tell you in the app before it takes effect.

11. Contact us

For any question about this policy, or to exercise any of the rights in section 7:

• Registered name: אפנדינא בע"מ
• Company number: 516302494
• Address: ברטעה 188, בסמ"ה
• Phone: 1-700-724-433
• Email: ahmed4777710@gmail.com

The registered name and address are recorded in Hebrew at the Registrar of Companies, and are reproduced here as filed rather than translated.