App privacy

The Alinero Live app (shown as “Alinero” on your phone) is published by ALINERO DIGITAL (10 Rue de l'Île de Rhodes, 3ème étage Bureau A1, Immeuble Henda, 1053 Les Berges du Lac 2, Tunis, Tunisie). It serves two types of users:

• buyers and viewers, who watch live sales, visit shops and order with cash on delivery, with or without an account;
• sellers (merchants), who manage their shop, broadcast lives and process their orders.

For any question about your data: donnees@alinero.com. The app is available in French and Arabic: its buttons are quoted below as they appear in French, with their meaning in brackets.

ALINERO DIGITAL is responsible for the app’s accounts (buyer account, seller account), the chat, reviews, notifications and the security of the service.

When you order from a shop, it is the seller of that shop who uses your contact details to call you, prepare and deliver your order. For this data, the seller is the controller and ALINERO DIGITAL acts as a technical provider: we host and secure this data on the seller’s behalf, without using it for ourselves.

You can watch lives and visit shops without creating an account. In that case:

• to count the viewers of a live, the app sends a temporary random identifier, renewed at least every time the app is launched, which is linked neither to your account, nor to your identity, nor to your device;
• if you order from a shop, you enter your phone number, your name, your governorate, your address (delegation, town) and, if you wish, a note for the seller yourself. This information is passed on to the seller for home delivery;
• “call me back” order: when you enter a valid number in the order form, the seller may receive a call-back request containing this number, the name entered and the product chosen, even if you have not yet confirmed. A note under the phone field reminds you of this. It allows the seller to call you back to complete the order. If you do not want to be called back, tell the seller or write to us: the request will be deleted;
• “Me prévenir des lives” (notify me of lives): if you tap this button on a shop’s page and accept the text shown, the app records on our servers your phone’s notification token (see article 7), its type (Android or iOS) and the app language, linked to that shop, with no account or identity. They are used only to notify you when the shop starts a live and to announce its scheduled lives (the evening before, from 7 pm, then 15 minutes before the start). To stop, tap “Prévenu ✓” (notified) on the shop’s page: the sign-up is deleted. If you then log in to a buyer account on this phone, these shops join the shops followed by that account, with live alerts turned on, unless you had turned them off in that account;
• reports: if you report a live or a shop, the reason chosen and the details you write are passed on to the ALINERO DIGITAL team, which reviews them.

If you create a buyer account, we record:

• your name (the one you choose) and your phone number, which serves as your identifier;
• your PIN code, stored only in encrypted (irreversible) form: no one, including at ALINERO DIGITAL, can read it;
• the date on which you accepted the terms of use;
• your orders: products, options, amount, delivery address and status tracking;
• your activity during lives: chat messages, likes, bids in auctions, giveaway entries;
• the shops you follow, the reviews you leave (rating and comment), the accounts you block and the content you report (message, live or shop, with the reason and your details).

Presence in a live: when you watch a live while logged in, the app attaches your account’s login token to the presence signal it sends regularly. Our server then adds your phone number to a temporary list specific to that live. Your number is automatically removed from it about 2 minutes after your last presence signal, and at the latest shortly after the end of the live. This list is used only so as not to send you a notification when an auction or giveaway starts in a live you are already watching (article 7). The identifier used to count viewers (article 3) remains random and is not linked to your account.

• account: name, email address, phone, password (stored only in encrypted form), information about your shops;
• catalogue: products, prices, stock and the photos you choose from your gallery to illustrate them;
• lives: title, products presented, chat messages, likes, number of viewers, auctions and giveaways you launch, scheduled lives;
• orders and customers of your shops (name, phone, delivery address of your buyers), call history, notes and reminders;
• login log (date, IP address, device type), kept for 90 days for the security of your account.

The app only asks for a permission when the feature needs it:

• Camera and microphone (sellers): only to broadcast a live that you start yourself. They stop as soon as the live ends. Nothing is captured outside a live or in the background.
• Photos (sellers): the app opens your phone’s picker and only sends the images you choose for your products. It does not browse your gallery.
• Notifications (buyers and sellers, optional): see article 7. The “Me rappeler” (remind me) reminder for a scheduled live is scheduled on your phone: nothing is recorded on our servers for it. If our server already notifies you 15 minutes before (a followed shop with live alerts, or “Me prévenir des lives”), the app does not schedule a duplicate reminder.

If you accept notifications, the app records on our servers a notification token (a technical identifier specific to the app on your device), the device type (Android or iOS) and the app language (French or Arabic, to write notifications in your language), linked to your account (or, without an account, to the shop chosen with “Me prévenir des lives”, see article 3). It is used only to send you:

• buyers: the start of a live by a followed shop and the announcement of its scheduled lives (the evening before, then 15 minutes before), an auction or giveaway starting in the live of a followed shop that you are not watching (at most once per live), the tracking of your orders, a review request after an order is delivered (then a single reminder as long as you have not rated it), outbid or won auctions and won giveaways;
• sellers: new orders, reminders (including your scheduled lives, 30 minutes then 5 minutes before), delivery incidents, stock and the status of your lives.

Live alerts (start of a live, scheduled lives, auctions and giveaways starting) are commercial messages: they are only sent if you have accepted them, by following a shop, with “Me prévenir des lives” or in “Mon compte → Notifications et abonnements” (my account → notifications and subscriptions), where you can turn them off.

Notifications go through the Expo service, then through Google (Firebase Cloud Messaging) on Android or Apple (Apple Push Notification service) on iPhone. The token is erased when you log out or delete your account; without an account, a shop’s “Me prévenir des lives” sign-up is deleted when you stop it or when the app is uninstalled. You can turn notifications off at any time in your phone’s settings; sellers can also turn them off in “Paramètres” (settings).

When a seller starts a live, their video and sound are transmitted in real time to our broadcasting server, then relayed to viewers. The video is not recorded: it is no longer available after the live ends. Only statistics are kept (number of viewers, likes, orders).

A live is public: anyone who has the app or the link can watch it, even without an account. Chat messages are visible to all viewers of the live and to the seller, who can hide a message and block its author.

A feature reserved for sellers uses the artificial intelligence of our provider Anthropic (United States). It only runs when the seller presses the corresponding button:

• assistant of the “Optimiser IA” (AI optimisation) screen: pseudonymised order data — for each order analysed, its reference, amount, delivery governorate, age and tracking indicators (priority, order never contacted, incomplete address). The customer’s last name, first name, town and phone are never sent: they stay on our servers and are reinserted into the answer shown to the seller.

This information is used only to produce the answer shown to the seller. Under Anthropic’s commercial terms, it is not used to train its models. Buyers do not use any AI feature.

• creating and securing your account, logging you in;
• broadcasting lives, displaying shops and products;
• passing your orders on to the seller, having them delivered and informing you of their tracking;
• running the chat, auctions, giveaways, reviews and subscriptions;
• sending you the notifications you have accepted;
• preventing fraud and abuse (rate limits, blocking, reports) and complying with our legal obligations.

Only with the following recipients, and only for what is necessary for the service:

Some of these providers are located outside Tunisia (European Union, United States). They are bound by confidentiality and are not allowed to use your data for their own purposes. We may also disclose data to the Tunisian authorities upon lawful request.

All exchanges with the app are encrypted (HTTPS). PIN codes and passwords are stored in irreversible encrypted form. Your session is kept in your phone’s secure vault (Keychain on iPhone, Keystore on Android). Each seller only has access to the data of their own shops, and access is logged.

In the event of an error, the app keeps a short technical log on your phone (with no token, number or email). It is only sent to us if you choose “Envoyer le rapport au support” (send the report to support): your email app then opens with the report, which you review before sending it. Our servers also keep technical logs (IP address, date, request) for security and to fight abuse.

You can at any time access your data, have it corrected, object to processing or request its deletion. In the app, a buyer can change their name in “Mon compte” (my account). For any other request, write to donnees@alinero.com: we reply within 30 days at most. You can also refer the matter to the INPDP.

For an order placed in a shop, you can also contact the seller directly.

Deletion is done directly in the app, without writing to us:

• buyer: on the home screen, tap the profile icon (top right) → “Mon compte” → “Zone dangereuse” → “Supprimer mon compte”, then confirm with your PIN code;
• seller: “Profil” tab → “Paramètres” → “Zone dangereuse” → “Supprimer mon compte”, then confirm with your password.

Without the app, follow the account deletion page or write to support@alinero.com. That page also details what is deleted and what is kept.

Creating an account, orders, auctions and giveaways are reserved for people aged at least 18. We do not knowingly collect data about minors: if you believe a minor has created an account, write to us and we will delete it.

This policy evolves with the app. The version in force is the one published at this address, with its update date. In the event of a significant change, we will let you know in the app.