Your data stays yours.

Everything you enter in Boutik (products, stock, sales, preorders, credits, purchase prices, photos, shop name) is stored in a local database, on your device. Nothing is sent to the publisher or to third parties. The app works without an Internet connection.

The account protects your pass and lets you recover your data when you change phones. It is identified by your WhatsApp phone number. We then process, to provide the service and nothing else:

• your number (account identifier, verified by a WhatsApp code);
• the display name you choose (optional, shown only to confirm a payment if you enable visibility);
• your pass and payment history (amount, date, operator reference, never your card details or your mobile money PIN, which are handled by FedaPay, pawaPay, Apple or Google);
• if you pay by mobile money on our page with FedaPay: the operator you chose and the number that pays (yours or a relative's), sent to FedaPay so that it sends the payment request to that phone. We erase this number as soon as the payment goes through or fails, after 3 days at most; only its last 4 digits stay in the payment history;
• if you ask to be told when mobile money payment opens in your country: that country, the date you asked and the date the message was sent. Nothing else; the request goes with the account;
• your connected devices (platform, app version, last activity);
• a technical notification token if you accept notifications;
• usage counts for your shop, sent with the daily check of your pass: numbers only (shops, products, sales over the last 7 and 30 days and in total, days since the last sale, open credits and pre-orders, age of the shop, whether a printer is set up). Never a product name, a price or a customer.
• from the phone of the account holder and of its invited owners only (never a seller's), each shop's totals: the amount sold and the amount collected today, yesterday, over the last 7 and 30 days, in the shop's currency. Only these totals, with no detail of any sale, product or customer. They help the Boutik team follow the service; they are never shown to other merchants, sold, or used for advertising.

These counts tell us whether the app is really being used, so we can help at the right time. They are neither sold nor shared, and a phone without an account sends none.

The page where a pass or codes are paid (pay.boutik.algorithme.services) keeps only two pieces of information in your browser, as technical cookies, with no advertising or audience measurement: your latest personal link, for 45 days, to find your page again; and, if you choose it, the language of the page (French or English), for one year. Nothing else.

If you turn it on, during the trial as with a pass, your shop's data (products, stock, sales, customer commitments, photos) is backed up on our servers so it can be restored on a new phone and shared across your devices. It is encrypted in transit (TLS) and hosted in the European Union (Railway, daily backups).

A clear commitment: the publisher never opens the contents of your shop. Our internal tools only show counters (backup size, number and weight of photos, number of devices, last activity). One exception: if you open an online shop, our servers automatically read, in your backup, the products you choose to show there (see below). You can turn off backup at any time in Settings.

When you sell on credit, as a pre-order or to be delivered later, the app asks for the customer's name and, if you wish, their phone number. The number is optional: you can also add, correct or erase it later from the sheet.

This information stays on your phone. If Internet backup is on, it is also backed up and shared with the other phones of your account, including your sellers' phones, on the sheets they already see. It is part of the backups you export, and it disappears when you erase the shop.

Boutik never writes to this number itself and uses it for nothing else: the « WhatsApp » and « Call » buttons open your phone's messaging or phone app, and you are the one who sends. The publisher never opens this information.

If you open the online shop of one of your shops, a public page is created at boutik.algorithme.services/b/ followed by the name you choose. Anyone with the link can see it, without an account.

What is published: the shop's name, the pick-up and delivery options and delivery terms you write, and, for each product you leave on display, its number (“No. 27”), name, brand, description, category, photo, the price of each item and a label “In stock”, “Sold out” or “In store only”.

Most popular ranking: your visitors can sort the shop window by “Most popular”. This order follows the units of each product sold over the last 30 days, and the first three carry the label “Popular”. No sales figure is shown or sent to the page: only the order and this label come from it.

What is never published: stock quantities, purchase prices, your sales figures, your customers, your credits, the names of your phones, your number (unless you write it yourself in a text of the shop window).

The shop window is built by our servers from your Internet backup: it costs you no extra mobile data and follows your changes at the next backup. Photos are reduced to thumbnails, kept with your photos on our servers.

You stay in control: by category, product or item, you choose what is shown, shown without online ordering, or hidden; you close the shop window whenever you want. Closed, it shows no product at all. The shop window is not indexed by search engines: people reach it through the link you share. If you rename it, the old link points to the new one for 90 days. Deleting your account deletes your shop windows and their thumbnails. The online shop terms say what you may publish there.

The online shop history:our servers keep every step of your online orders and every change of your shop window, with who did it (the name of the shop's phone, "the client", "automatic" or "Boutik support"), when, and the amount if there is one. For the shop window's payment methods, your WhatsApp number and the shop window's address, we keep the old and the new value. This history is sent only to the phones of the account's owners (the holder and invited owners), never to sellers or clients, for the app's activity journal. It holds neither the name nor the number of your clients (for a blocked number, only its last two digits). An order's steps stay with it, without the client's data once that is erased; the whole history is deleted with your account.

Visiting a shop window needs no account and no installation. Shop window pages include no audience measurement, advertising or tracking tool, nor any third-party resource. They set a cookie only if you choose to: the language or display (light or dark) you pick at the bottom of the page, kept for a year on your device.

Your cart and the « My orders » list stay in your browser (local storage); we do not receive them. Clearing the browser's data removes them; your tracking links stay valid.

Like any website, our servers record the IP address and the page requested in their technical logs, for security and to keep the service running. These logs are kept for 30 days at most and are used for nothing else.

Every shop window has a “Report” link. A report holds the reason chosen (prohibited or dangerous goods, scam, offensive content, another reason) and, if you wish, a comment. We also keep an encrypted fingerprint of your IP address (never the address itself), to spot mass sending. The shop does not know who reported it. Reports are reviewed by the Boutik team, which may suspend the shop window. They are kept for 12 months.

To order, a client gives their name, their phone number, how they will get the order (pickup or delivery, with an address or neighbourhood for a delivery) and, if they wish, a note. This data is used only to handle the order:

• it is passed to the shop, and only to its phones (the holder, the invited owners and the sellers this shop is entrusted to). The shop uses it to prepare, confirm and hand over the order, and to contact the client about it;
• we host it on the shop's behalf; the Boutik team sees only counts (orders per day);
• the shop's phones receive notifications about its orders: the name the client gave, the items in short, the amount, the pickup or delivery choice and the order number, so the shop can act without opening the app. They never contain the client's phone number, address, note or a payment number. These notifications go through Apple's (iPhone) and Google's (Android) notification services, via our provider Expo; the merchant can hide their content on the lock screen in the phone's settings;
• it is deleted from our servers 12 months after the order ends (handed over, refused, expired or cancelled). A confirmed order becomes a sale of the shop: the client's name, number and handover then stay in the merchant's sales, on their phones and in their backup, like a counter sale.

The client follows their order through a personal link, which is its only key: anyone with the link sees the order. They can cancel it until the shop has received it.

WhatsApp updates: by sending the order, the client agrees to receive updates on WhatsApp, from Boutik's number and in the shop's name (order received, payment requested, confirmed, refused, expired, refund). Replying STOP ends these messages; the tracking link stays valid. These messages go through our WhatsApp providers (Gupshup, and Twilio as a fallback).

Payment: Boutik neither receives nor passes on money. The client pays the shop directly (cash, mobile money). If they say they have paid, their statement (number and amount) is passed to the shop, with no value as a payment.

Numbers kept at a distance: a shop may mark a number that placed an order with it "to watch", or block it, and add a short note (for example "never came to collect"). For this we keep a fingerprint of the number (never the number itself), its last four digits and the note. They are visible only to that shop's phones, never to the client, and disappear when the shop removes the note. Orders from a blocked number stay visible to the shop for 30 days, then follow the rule of all other orders.

Your rights: to access, correct or delete your order data before that date, contact the shop, or us: contact@algorithme.services.

Boutik can fill in your product cards from a spoken description of a delivery. You use it only if you choose to, after a notice shown before the first recording.

When you send a dictation:

• the recording of your voice is sent to our servers (Railway, European Union), together with the category you picked and, if you correct a card by voice, the card being corrected;
• it is transcribed to text by Groq (Whisper model), which is bound not to use this content to train its models and to keep it only for the duration of processing;
• the text is turned into cards by a language model (GLM, by Z.AI) through OpenRouter. OpenRouter does not use this content to train models and does not keep it beyond processing; Z.AI states it does not store content sent through its API, and processes data in Singapore.

None of these providers receives your phone number, your name or the rest of your shop: only the recording, its transcript, and the names of products already in your shop, which help understand your words.

Retention: the recording, its transcript and the draft cards are kept for 14 days on our servers, so you can review and add the cards, then deleted automatically. A copy of the recording stays on the phone that made it, never longer than 14 days. Per account, we only keep the number of seconds dictated each month, to apply the 60-minute cap. The recording is used only to produce your cards: never to identify you, never for advertising, never to train a model.

The account number receives service messages on WhatsApp: verification codes, pass confirmations, expiry reminders. Reminders can be turned off at any time by replying STOP.

You can export a backup (a .zip file containing your data and photos). This export is triggered only by you, and you choose where to send it (WhatsApp, Google Drive, email…). The file is not encrypted: treat it as a confidential document.

• Camera: scan QR codes and barcodes, photograph your products if you wish.
• Photos: pick a product image.
• Microphone: only to dictate a delivery, when you tap “Record”. Nothing is captured outside the recording you start and stop yourself.
• Notifications: only if you accept them (reminders, sync across your phones, dictated cards ready).
• Face ID / Touch ID / passcode: lock access to the app and to the Profits page. Verification is done by the system; Boutik never sees or stores your biometric data.

We do not sell or rent your data, and we never share it for advertising purposes. It is entrusted only to the providers strictly required to run the service, each contractually bound to apply a level of protection at least equivalent to the one described on this page, and solely for the stated purpose:

• Railway (European Union): hosting of the database, backups and photos.
• Gupshup and Twilio: delivery of WhatsApp messages (verification codes, confirmations, reminders, replies to your messages). Twilio is only used as a backup, when Gupshup cannot send a message.
• FedaPay, pawaPay, Apple and Google: payment processing. pawaPay receives the amount, the currency, the country and what is paid for (« Boutik 1 month pass »), never your Boutik account number or your name; you type your mobile money number directly on its page. FedaPay receives the amount, the currency and what is paid for, and, if you pay on our page, the operator and the number that pays; otherwise you type that number directly on its page. These providers receive only the information required for the transaction; we never see your card details or your mobile money PIN.
• Expo: sending notifications, if you accepted them.
• Groq, OpenRouter and Z.AI: processing dictations, as described above.
• Sentry (European Union): crash reports, see below.

No third-party advertising, tracking or analytics tool is embedded in the app. The usage counts described above only go to our own servers.

Account deletion is done from the app (Settings → Manage account). It immediately makes the online backup data inaccessible, then permanently purged within 30 days; the number is anonymised. Dictations (recordings, transcripts, drafts) are erased immediately. Without an account, deleting the app deletes all its data from the device (except backups you exported yourself). The data of an online shop's clients is erased from our servers 12 months after their order ends; shop window reports, 12 months after they are received.

To improve stability, the app and our servers may send a technical report when something crashes (via Sentry, hosted in the European Union): error type, device model, OS and app version. These reports contain neither your shop data nor your identity, and are never used for advertising or tracking.

Boutik is a professional shop-management tool and is not directed at children.

Boutik is published by Algorithme. For any question or to exercise your rights (access, correction, export, deletion): contact@algorithme.services.

Version française