This policy covers the iikoDash mobile app (Android and iOS) and the https://iikodash.amusoft.uz website. It explains what data we collect, why we use it and what rights you have. By using iikoDash you agree to this policy.
Who we are
iikoDash is a reporting service for owners and managers of restaurants that run on iiko. The service is operated by Amusoft (Uzbekistan). Data is processed in line with the Law of the Republic of Uzbekistan "On Personal Data".
What data we collect
We collect only what the service needs to work:
- Account data: name, phone number, restaurant (company) name, chosen language and password. The password is stored only as a hash — even we cannot see it.
- iiko connection: iiko server address, login and password. The password is stored encrypted and is used only to read reports.
- Business data from iiko: sales, checks, dishes, payment types, branches, stock levels and movements, sales by hall and kitchen, staff names from iiko for the waiter ranking, and the guest card number with its owner's name for guest analysis (when iiko keeps cards).
- Device data: push notification token, platform (Android or iOS), device name and app version.
- Technical data: IP address, request times and error logs — for security and troubleshooting.
- Payments: invoices, amount and payment status. We never receive or store bank card details — payment is made on the Click payment page.
- Website request form: name, phone number, restaurant name, number of branches, comment, plus IP address, browser type and campaign tag (utm).
What we do not collect
The app does not access your location, contacts, camera, microphone, photos or files. The app has no ads or advertising identifiers and uses no third-party analytics tools. We do not sell your data.
How we use data
- To create your account, sign you in and verify you by SMS code.
- To fetch reports from your iiko and show them in the app.
- To send notifications: the daily summary, subscription and payment reminders.
- To manage subscriptions and payments.
- To provide support, keep the service secure and fix errors.
- To contact you about a request left on the website.
Storage and protection
Traffic between the app and the server is encrypted (HTTPS). Passwords are hashed and the iiko password is stored encrypted. Each customer's data is separated from everyone else's, and a manager sees only the branches assigned to them. The sign-in token is kept in your device's secure storage.
iikoDash only reads data from your iiko and changes nothing in it.
How long data is kept
Data is kept while your account exists. After the account is deleted, it is removed within 30 days. Payment documents may be kept for as long as accounting and tax law requires. Website requests are kept for up to 12 months after they are handled.
Your rights
- See the data we hold about you and ask for a copy.
- Ask us to correct wrong data.
- Ask us to delete your data and stop processing it.
- Turn notifications off in your device settings.
- Sign out of all devices in the Profile section.
Deleting your account and data
To delete your account, write to one of the contacts below and give the phone number the account is registered to. Once we confirm the request, within 30 days we delete the account, the iiko connection (login and password), all loaded report data, staff accounts and device tokens.
Only payment documents required by law are kept until the required period ends. A restaurant owner can delete a staff (manager) account themselves in the Staff section of the app.
Children
iikoDash is made for businesses and is not directed at anyone under 18. We do not knowingly collect children's data.
Changes to this policy
This policy may be updated. The new version is published on this page with its date shown at the top. We will tell you about important changes in the app or by SMS.
Contact
Amusoft — For privacy questions and account deletion requests: