Privacy Policy

Refresh mobile application — iOS and Android

Effective date: June 27, 2026  ·  Last updated: June 27, 2026

This Privacy Policy explains how Refresh (“Refresh,” “we,” “us,” or “our”) collects, uses, shares, and protects your information when you use the Refresh mobile application (the “App”) on iOS and Android, and any related services (together, the “Services”).

By downloading, accessing, or using the App, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the App.

1. Information we collect

a. Information you provide to us (account information)

When you create an account or use the App, we collect the information you give us directly, which may include:

  • Account details — your name, email address, phone number, and a password (stored in encrypted/hashed form).
  • Business information — details about your store, products, sales, and team that you enter to operate the App.
  • Communications — information you provide when you contact our support team, submit feedback, or report a problem.

If you sign in using a third-party provider (for example, Sign in with Apple or Sign in with Google), we receive basic account information from that provider, such as your name and email address, in accordance with that provider's policies and your settings.

b. Information collected automatically

When you use the App, certain information is collected automatically to help us operate, secure, and improve the Services:

  • Device information — device model, operating system and version, language, time zone, and unique device or installation identifiers.
  • Usage data — features you use, screens you view, actions you take, and the dates and times of your interactions.
  • Diagnostic and crash data — crash logs, error reports, and performance data that help us diagnose problems and improve stability.
  • Approximate network information — IP address and general network details, which may indicate coarse, city-level location. The App does not collect precise GPS location.

2. How we use your information

We use the information we collect to:

  • Create and manage your account and authenticate you when you sign in.
  • Provide, maintain, and operate the App's features and functionality.
  • Send you service-related communications, including push notifications and important account or security notices.
  • Monitor and analyze usage and trends to understand how the App is used and to improve it.
  • Detect, investigate, and prevent fraud, abuse, security incidents, and other harmful or unauthorized activity.
  • Diagnose technical problems, fix bugs, and improve performance and reliability.
  • Comply with legal obligations and enforce our terms.

We do not sell your personal information, and we do not use your account information for third-party advertising.

If you are located in the European Economic Area or the United Kingdom, we process your personal data under the following legal bases of the GDPR / UK GDPR:

  • Performance of a contract — to provide the App and the account you requested.
  • Legitimate interests — to secure, maintain, analyze, and improve the App, where those interests are not overridden by your rights.
  • Consent — where required, for example for certain optional analytics or push notifications. You may withdraw consent at any time.
  • Legal obligation — to comply with applicable laws and respond to lawful requests.

4. Third-party services

We use trusted third-party providers to operate the App. They process data only to perform services for us, for the purposes described here, and under appropriate confidentiality and data-protection obligations. These providers include:

  • Cloud hosting and infrastructure — to host and process the data and backend services that power the App.
  • Analytics — to understand how the App is used and improve its features.
  • Crash and performance reporting — to capture crash and error reports and improve stability.
  • Push notifications — to deliver the notifications you have enabled.
  • Authentication — including Apple and Google for Sign in with Apple and Sign in with Google.

We will provide the current list of our sub-processors on request — contact us at info@refresh.tj. We encourage you to review the privacy policies of these providers; we are not responsible for the privacy practices of third parties.

5. How we share information

We do not sell your personal information. We share information only in these limited circumstances:

  • Service providers — with the vendors described above who process data on our behalf under appropriate confidentiality and data-protection obligations.
  • Legal and safety — when required by law, subpoena, or other legal process, or to protect the rights, property, or safety of our users, the public, or us.
  • Business transfers — in connection with a merger, acquisition, financing, or sale of assets, in which case we will notify you of any change in ownership or use of your information.
  • With your consent — in any other case, with your direction or permission.

6. Data retention

We retain your personal information for as long as your account is active or as needed to provide the Services. We will delete or anonymize your information when it is no longer needed for the purposes described in this policy, unless a longer retention period is required or permitted by law (for example, for security, dispute resolution, or legal compliance). When you delete your account, we delete or anonymize your associated personal data within a reasonable period, subject to these exceptions.

7. Data security

We use administrative, technical, and organizational measures designed to protect your information, including encryption of data in transit, restricted access controls, and secure storage of credentials. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

8. Your privacy rights

a. Access, correction, and deletion

You can review and update your account information in the App at any time. You may also request a copy of your data, correction of inaccurate data, or deletion of your account by contacting us at info@refresh.tj.

b. EEA/UK rights (GDPR)

If you are in the EEA or UK, you have the right to access, correct, delete, restrict, or object to our processing of your personal data, the right to data portability, and the right to withdraw consent. You also have the right to lodge a complaint with your local data protection authority.

c. California rights (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect and how we use it, the right to request deletion or correction, and the right to opt out of the “sale” or “sharing” of personal information. We do not sell or share personal information as those terms are defined under California law. We will not discriminate against you for exercising your rights.

To exercise any of these rights, contact us at info@refresh.tj. We will respond within the time required by applicable law and may need to verify your identity before fulfilling your request.

9. Children's privacy

The App is not directed to children under the age of 13 (or the minimum age required in your country), and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at info@refresh.tj and we will take steps to delete it.

10. International data transfers

We are based in the Republic of Tajikistan, and your information may be processed and stored in Tajikistan as well as in other countries where we or our service providers operate. Where we transfer personal data internationally, we use appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms required by applicable law.

11. Apple & Google platform terms

Your use of the App is also subject to the terms and privacy practices of the platform you downloaded it from:

  • Apple App Store (iOS) — see Apple's Privacy Policy. Our App Store privacy “nutrition label” reflects the data described in this policy.
  • Google Play (Android) — see Google's Privacy Policy. Our Google Play Data Safety section reflects the data described in this policy.

The data categories disclosed in our store listings are consistent with Sections 1 and 4 above. If you access the App through one of these stores, that platform may also collect information in accordance with its own policies.

12. Push notifications

With your permission, we may send push notifications to your device for service-related updates and features. You can disable push notifications at any time in your device's settings.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you through the App or by other means. Your continued use of the App after an update means you accept the revised policy.

14. Contact us

If you have questions, requests, or concerns about this Privacy Policy or your information, contact us at: