Privacy Policy

How AlyOps handles your data: what stays on your device, what leaves it, and the control you have over both.

Privacy Policy

This policy explains the exceptions: what leaves your device, when, why, and what control you have over it.

In plain terms

AlyOps is built to work offline. Most of what you create in it — your calibrations, inventory records, costings, wastage logs and operating figures — is stored on your own device, in your own browser, and is never sent to us.

This policy explains the exceptions: what leaves your device, when, why, and what control you have over it.

If you only read one paragraph, read that one.

Who is responsible for your data

AlyOps is operated by Mostafa Aly, acting in his personal capacity, referred to in this policy as "we", "us" or "AlyOps".

Contact for any question about your data: mostafa@mostafaaly.com

We do not publish a postal address. All correspondence is by email.

What this policy covers

This policy covers the website and application at mostafaaly.com and any subdomain of it.

It does not cover websites we link to. When you follow an external link, that site's own policy applies.

Data that stays on your device

AlyOps stores the following in your browser, using local database and storage technologies. Unless you turn on cloud backup — which is off by default, and is described in Section 4.1 — this data is not transmitted anywhere and we cannot read it.

• Calibration, grinder and extraction records
• Recipes, ingredients, costings and menu pricing
• Inventory items, delivery batches and discard records
• Food-safety records: temperature logs, opening and closing checklists, and shift handover notes — including any person's name or free-text note you enter into them
• Maintenance tasks, their completion history and task reminders
• Bean records and water test results
• Sales periods, wastage, labour hours and operating expense records
• Learning progress and assessment attempts
• Your language, theme and display preferences
• Cached pages and content, so the application works without an internet connection

This data remains on your device until you clear it, clear your browser data, or uninstall the application. If you lose the device, we cannot recover this data for you, because we never had it.

Data that leaves your device

Backup

AlyOps includes an optional backup feature. It is off unless you turn it on. When you turn it on, a copy of the records listed in Section 3 is transmitted to our backend and stored there so that you can restore it on another device.

If you do not turn it on, none of that data leaves your device. You can turn it off, and delete what has been stored, at any time from within the application.

Information you send us directly

If you contact us — by email, or through any form on the site — we receive whatever you choose to include: your name, your email address, your organisation, and the content of your message. We use it to answer you and nothing else.

Technical information collected automatically

When you visit the site, our hosting provider records standard server information: your internet address, the pages requested, the date and time, your browser and device type, and the page that referred you. This is ordinary web server logging. It is used to keep the service running and secure, and to diagnose faults.

We do not use analytics, advertising, or tracking services of any kind. We do not build a profile of you, and we do not measure your behaviour on the site.

Accounts

Every part of AlyOps works without an account, and nothing asks you to register in order to use it. Cloud backup is the single optional feature that requires one.

If you choose to use it, you enter an email address and we send a single-use sign-in link to it. No password is created and none is stored. While you are signed in, our backup provider (see Section 6) holds your email address, the sign-in session, and one backup record belonging to your account. Signing out ends the session on your device.

If you never sign in, no account exists for you and no email address is held.

Cookies and similar technologies

AlyOps does not use advertising cookies or third-party tracking cookies. It does not use cookies at all for tracking purposes.

We use browser storage for the following purposes only:

• Purpose
• Technology
• Can it be refused?

• Remembering your language and display preferences
• Local storage
• Yes, by clearing site data

• Storing your operational records offline
• Local database
• Yes, by clearing site data. The application then loses your records

• Making the application work offline
• Service worker cache
• Yes, by uninstalling the application

• Keeping you signed in for cloud backup — only if you have signed in
• Local storage
• Yes, by signing out, or by clearing site data

Who we share data with

We do not sell your data. We do not share it for advertising. We do not share it with anyone for any purpose other than operating the service.

We use the following service providers, who process data on our behalf and only on our instructions:

• Provider
• Purpose
• Where processed

• Hostinger
• Website hosting and server logs
• As stated in Hostinger's own policy

• Supabase
• Backup storage
• As stated in Supabase's own policy

We may also disclose data where we are legally required to do so, or where it is necessary to protect the safety of a person or the integrity of the service.

Where your data is processed

Some of the providers above process data outside the Kingdom of Saudi Arabia. Where that occurs, we rely on the provider's own contractual data protection commitments.

Data held on your own device is processed only on your device, wherever you are.

How long we keep data

We keep data only for as long as it serves the purpose it was collected for.

• Category
• Retention

• Data on your device
• Until you delete it. We have no access to it and no control over it

• Backup data
• Retained while the backup feature is in use. Deleted when you delete it, or when you disable backup

• Correspondence
• Retained while needed to answer you and to keep a record of the exchange. Deleted on request

• Server logs
• Retained by our hosting provider under its own retention policy. We do not control this

Your rights

Under the Personal Data Protection Law of the Kingdom of Saudi Arabia, and equivalent laws elsewhere, you have the right to:

• Be informed of what data we hold about you and why
• Access a copy of it
• Correct it if it is inaccurate or incomplete
• Request deletion of it
• Withdraw consent where our processing relies on your consent
• Object to processing in defined circumstances
• Complain to the competent supervisory authority

Most of your data is on your device, and you already have complete control over it. You can view it, export it, and delete it at any time from within the application, without asking us.

For anything we hold, write to mostafa@mostafaaly.com. We will acknowledge your request and respond as promptly as we reasonably can. AlyOps is operated by one person, and we will tell you honestly if a request will take time.

We may ask you to confirm your identity before acting on a request, to prevent someone else obtaining your data.

Security

We take reasonable technical and organisational measures to protect data we hold, including encrypted transmission and access controls.

Two things you should know, stated plainly rather than buried:

• Data on your device is protected by your device. If your device is unlocked, lost, or shared, that data is accessible to whoever holds it. We cannot protect it remotely.
• No system is completely secure. If a breach occurs that affects your data, we will inform you and the competent authority as required by law.

Age

AlyOps is a professional tool, intended for use by people aged 18 or over. It is not directed at children and we do not knowingly collect data from anyone under 18.

If you believe someone under 18 has provided us with data, write to mostafa@mostafaaly.com and we will delete it.

Changes to this policy

We may update this policy. The version number and effective date at the top of this page always tell you which version applies.

If we make a material change — one that affects what data we collect, how we use it, or who we share it with — we will publish the updated policy before the change takes effect.

Governing law

This policy, and any dispute arising from it, is governed by the laws of the Kingdom of Saudi Arabia.

Contact

Questions, requests or complaints about your data:

mostafa@mostafaaly.com

If you are not satisfied with our response, you may complain to the competent data protection authority.