Privacy Policy

Last updated: 27.08.2026

This policy explains what personal information we collect when you use the Afndena app and this website, why we collect it, who we share it with, and what you can do about it.

The company responsible for that information is אפנדינא בע"מ, company number 516302494, of ברטעה 188, בסמ"ה ("Afndena", "we", "us").

If you do not agree with this policy, please do not use the app.

1. What we collect

1.1 Information you give us

• Your name and phone number. Your phone number is how you sign in: we send a one-time code to it and you enter that code in the app. Customer accounts have no password.
• Your email address, if you choose to give one. It is optional and is used for receipts.
• Delivery addresses you save — street and building, city, an optional label such as "Home" or "Work", and optional notes for the driver such as "ring twice, second floor".
• Your language preference, which also decides the language of the messages we send you.
• Notes you add to an order, such as a request to the kitchen.

1.2 Information created when you order

• What you ordered, from which branch, when, the amount, the payment method, and how the order progressed.
• Your Afndena Coins balance, and the coins earned and spent on each order.
• Any promotional code you used.

We store the product names, prices and options as they were at the moment you ordered. This is deliberate: it means your order history and receipts stay accurate even after the menu or its prices change.

1.3 Device and technical information

• A notification token for each device you sign in on, and whether that device is an iPhone or an Android phone. This is the address your order notifications are sent to. On its own it does not identify you.
• Ordinary technical information produced when your device connects to our servers, such as your IP address and the time of the request. This is used to operate and secure the service.

1.4 Location

If you allow it, the app uses your device's location to help you pick a nearby branch and to place a delivery address on the map. You can refuse, and you can switch it off later in your device settings — the app still works, you simply type addresses in yourself.

When you place a delivery order, the coordinates of the delivery address are stored with that order so the branch can find you.

1.5 What we do not collect

We never receive or store your card details. Card payments are handled by our payment provider on its own secure page. We receive only a confirmation that the payment succeeded or failed, and a reference to it. Your full card number and security code never reach our servers.

We do not ask for identity numbers, health information, or any other sensitive category of personal data, and we do not want you to send them to us.

2. Why we use it

We use this information because it is necessary in order to provide the service you asked for, because we are required to keep certain records by law, and — for marketing messages only — because you agreed to receive them.

3. Messages we send you

We draw a firm line between two kinds of message.

Service messages are part of the order itself. You cannot switch these off while an order is active, because without them you would not know what is happening to your food: the confirmation when we receive your order, a notification while it is being prepared, and a WhatsApp message when it is ready or if it has been cancelled.

Marketing messages are offers and announcements. You can switch these off at any time in the app, and switching them off has no effect on your service messages. We ask separately for your agreement to these, and you can withdraw it whenever you like.

4. Who we share it with

We do not sell your personal information, and we do not share it for anyone else's advertising.

We use a small number of service providers who process information strictly on our instructions:

• A WhatsApp messaging provider, which receives your phone number and the content of the message in order to deliver your sign-in code and your order messages.
• A push notification service, which receives your device's notification token and the content of the notification.
• Our payment provider, which handles the card payment itself. It receives the payment details directly from you; we receive only the result.
• Hosting and database providers, who run the servers and the database on which the service depends. Your information may be stored or processed outside Israel by these providers.
• Meta, for advertising measurement, if you allowed app tracking when your device asked. What is sent is app activity — such as that an order was placed, the branch name and the menu type — not your name, phone number or address. If you declined tracking, this is not sent.

Beyond that:

• Branch staff see the details of your order and, for a delivery, the address and phone number needed to bring it to you.
• We may disclose information where the law requires it, or where it is necessary to establish or defend a legal claim.

5. How long we keep it

• Your account details — for as long as your account exists.
• Your orders — we keep records of orders after an account is deleted, because we are required to retain accounting and tax records. Those records are kept in anonymised form (see section 6).
• Sign-in codes — a few minutes; they are single-use and are stored only as an irreversible hash, never as the code itself.
• Sign-in sessions — until you log out or the session expires.
• Notification tokens — until you log out on that device or delete your account.

6. Deleting your account

You can delete your account from the app at any time. This is not a request that we process by hand — it happens immediately, and this is exactly what it does:

• Your saved addresses are deleted.
• The delivery address and coordinates stored on your past orders are erased.
• All of your sign-in sessions are destroyed, on every device.
• All of your notification tokens are deleted, so we stop sending to your devices.
• Any outstanding sign-in codes for your number are deleted.
• Your name, phone number and email address are removed from your account record, and your Afndena Coins balance is set to zero. Marketing consent is withdrawn.

The order records themselves remain, but with nothing in them that identifies you. We keep them because we are legally required to retain records of sales.

Your Afndena Coins are forfeited when you delete your account. They have no cash value and cannot be paid out or transferred. Please spend them first.

7. Your rights

You may ask us to:

• tell you what personal information we hold about you;
• correct it if it is wrong — you can change your name, email, language and addresses yourself in the app at any time;
• delete your account, as described in section 6;
• stop sending you marketing messages — you can do this yourself in the app.

To make any of these requests, contact us using the details in section 11. We may need to verify that the request comes from you, which we would normally do by confirming control of the phone number on the account.

8. How we protect your information

• Sign-in codes and session tokens are stored only as irreversible hashes, never in a form we could read back.
• Staff and branch accounts have passwords stored using a modern password-hashing algorithm, never in plain text.
• All traffic between the app and our servers is encrypted in transit.
• Each branch can reach only its own orders and its own data.
• We deliberately do not store card numbers, so they cannot be taken from us.

No system is perfectly secure, and we cannot promise that nothing will ever go wrong. If a breach occurs that puts your information at serious risk, we will act as the law requires.

9. Children

The Afndena app is intended for general use and is not directed at children. We do not knowingly create accounts for children under the age at which they can consent on their own under applicable law. If you believe a child has given us personal information, contact us and we will delete it.

10. Changes to this policy

If we change how we handle your information, we will update this page and change the date at the top. If the change is significant, we will tell you in the app before it takes effect.

11. Contact us

For any question about this policy, or to exercise any of the rights in section 7:

• Registered name: אפנדינא בע"מ
• Company number: 516302494
• Address: ברטעה 188, בסמ"ה
• Phone: 0504777710
• Email: ahmed4777710@gmail.com

The registered name and address are recorded in Hebrew at the Registrar of Companies, and are reproduced here as filed rather than translated.