Privacy policy

Who the platform is for

Nurly is business software for shops, restaurants and cafés. Accounts are created by the business (our customer) for its own employees; the Nurly Waiter app cannot be used to sign up. The business decides which staff use the platform and what they enter into it, and we process that data on the business’s behalf.

What we process

• Staff account data: name, role, the PIN code used to sign in on shared devices (stored only as a hash), and for managers a phone number or email used to sign in.
• Business data entered by staff: menu items, prices, tables, orders, kitchen tickets, payments and receipts, together with which employee made each change and when.
• Device data: a random identifier the app generates on first launch, the device name the business gave it in the admin panel, and the time it last connected. We do not read the phone’s hardware identifiers, IMEI, advertising ID or phone number.
• Technical logs: IP address, request time and error details, kept by our servers to keep the service secure and working.
• Settings stored only on the phone: language, theme and the local network address of the venue’s receipt printer. These never leave the device.

What we do not do

• The Nurly Waiter app does not access location, camera, microphone, contacts, photos or files.
• We do not use advertising or third-party analytics SDKs, and we do not track users across apps or websites.
• We do not sell personal data or share it with advertisers.

How the data is used

Only to provide the service the business pays for: taking orders, sending them to the kitchen and the till, printing receipts, producing the business’s reports, controlling which devices and employees have access, and providing support.

Sharing

Data is visible to the business that owns it and to the employees it has granted access to. We use hosting and infrastructure providers to run the servers; they process data only on our instructions. We disclose data to authorities only when the law requires it.

Security

All traffic between the apps and our servers is encrypted with HTTPS. Sign-in PINs and passwords are stored as hashes. Access is limited by role, and a business can revoke a device or an employee at any time from the admin panel, which signs that device out on its next request.

Retention and deletion

Data is kept while the business’s subscription is active, and for as long afterwards as accounting and tax law requires for sales records. A business administrator can deactivate or delete an employee account in the admin panel at any time.

An employee who wants their account or personal data deleted can ask their employer’s administrator, or write to us at support@nurly.uz. We will confirm the request with the business and complete it within 30 days, except for records we are legally required to keep.

Children

The platform is a workplace tool and is not directed at children under 16.

Your rights

Under applicable law, including the Law of the Republic of Uzbekistan “On Personal Data”, you may ask to see, correct or delete your personal data, or object to its processing. Contact us and we will respond within 30 days.

Changes

If this policy changes, we will publish the new version on this page with a new date. Significant changes will also be announced in the admin panel.

Contact

Questions about privacy: support@nurly.uz