Your data stays yours.

Everything you enter in Boutik (products, stock, sales, preorders, credits, purchase prices, photos, shop name) is stored in a local database, on your device. Nothing is sent to the publisher or to third parties. The app works without an Internet connection.

The account protects your pass and lets you recover your data when you change phones. It is identified by your WhatsApp phone number. We then process, to provide the service and nothing else:

• your number (account identifier, verified by a WhatsApp code);
• the display name you choose (optional, shown only to confirm a payment if you enable visibility);
• your pass and payment history (amount, date, operator reference, never your card or mobile money details, which are handled by FedaPay, Apple or Google);
• your connected devices (platform, app version, last activity);
• a technical notification token if you accept notifications;
• usage counts for your shop, sent with the daily check of your pass: numbers only (shops, products, sales over the last 7 and 30 days and in total, days since the last sale, open credits and pre-orders, age of the shop, whether a printer is set up). Never a product name, a price, an amount or a customer.

These counts tell us whether the app is really being used, so we can help at the right time. They are neither sold nor shared, and a phone without an account sends none.

If you turn it on, your shop's data (products, stock, sales, customer commitments, photos) is backed up on our servers so it can be restored on a new phone and shared across your devices. It is encrypted in transit (TLS) and hosted in the European Union (Railway, daily backups).

A clear commitment: the publisher never opens the contents of your shop. Our internal tools only show counters (size, number of devices, last activity). You can turn off backup at any time in Settings.

Boutik can fill in your product cards from a spoken description of a delivery. You use it only if you choose to, after a notice shown before the first recording.

When you send a dictation:

• the recording of your voice is sent to our servers (Railway, European Union), together with the category you picked and, if you correct a card by voice, the card being corrected;
• it is transcribed to text by Groq (Whisper model), which is bound not to use this content to train its models and to keep it only for the duration of processing;
• the text is turned into cards by a language model (GLM, by Z.AI) through OpenRouter. OpenRouter does not use this content to train models and does not keep it beyond processing; Z.AI states it does not store content sent through its API, and processes data in Singapore.

None of these providers receives your phone number, your name or the rest of your shop: only the recording, its transcript, and the names of products already in your shop, which help understand your words.

Retention: the recording, its transcript and the draft cards are kept for 14 days on our servers, so you can review and add the cards, then deleted automatically. A copy of the recording stays on the phone that made it, never longer than 14 days. Per account, we only keep the number of seconds dictated each month, to apply the 60-minute cap. The recording is used only to produce your cards: never to identify you, never for advertising, never to train a model.

The account number receives service messages on WhatsApp: verification codes, pass confirmations, expiry reminders. Reminders can be turned off at any time by replying STOP.

You can export a backup (a .zip file containing your data and photos). This export is triggered only by you, and you choose where to send it (WhatsApp, Google Drive, email…). The file is not encrypted: treat it as a confidential document.

• Camera: scan QR codes and barcodes, photograph your products if you wish.
• Photos: pick a product image.
• Microphone: only to dictate a delivery, when you tap “Record”. Nothing is captured outside the recording you start and stop yourself.
• Notifications: only if you accept them (reminders, sync across your phones, dictated cards ready).
• Face ID / Touch ID / passcode: lock access to the app and to the Profits page. Verification is done by the system; Boutik never sees or stores your biometric data.

We do not sell or rent your data, and we never share it for advertising purposes. It is entrusted only to the providers strictly required to run the service, each contractually bound to apply a level of protection at least equivalent to the one described on this page, and solely for the stated purpose:

• Railway (European Union): hosting of the database, backups and photos.
• Gupshup and Twilio: delivery of WhatsApp messages (verification codes, confirmations, reminders, replies to your messages). Twilio is only used as a backup, when Gupshup cannot send a message.
• FedaPay, Apple and Google: payment processing. These providers receive only the information required for the transaction; we never see your card or mobile money details.
• Expo: sending notifications, if you accepted them.
• Groq, OpenRouter and Z.AI: processing dictations, as described above.
• Sentry (European Union): crash reports, see below.

No third-party advertising, tracking or analytics tool is embedded in the app. The usage counts described above only go to our own servers.

Account deletion is done from the app (Settings → Manage account). It immediately makes the online backup data inaccessible, then permanently purged within 30 days; the number is anonymised. Dictations (recordings, transcripts, drafts) are erased immediately. Without an account, deleting the app deletes all its data from the device (except backups you exported yourself).

To improve stability, the app and our servers may send a technical report when something crashes (via Sentry, hosted in the European Union): error type, device model, OS and app version. These reports contain neither your shop data nor your identity, and are never used for advertising or tracking.

Boutik is a professional shop-management tool and is not directed at children.

Boutik is published by Algorithme. For any question or to exercise your rights (access, correction, export, deletion): contact@algorithme.services.

Version française