BIONE
Privacy Policy
This policy explains what personal data Bione collects, why, who it reaches, how long we keep it, and what you can do about it. It describes the service as it actually works — including the parts people usually gloss over, like exactly what we hold about your payment card (section 3.4) and what survives when you delete your account (section 8).
1. Who we are
Bione is operated by “BITO” mas’uliyati cheklangan jamiyati (“BITO” MChJ), a company registered in the Republic of Uzbekistan at Toshkent shahri, Yakkasaroy tumani, Shota Rustaveli ko‘chasi, 53-uy, taxpayer identification number (STIR) 308393645.
For questions about this policy or about your data, write to support@bione.uz.
This policy covers the Bione mobile apps for Android and iOS, the Bione website, the Bione Telegram Mini App and bot, and the Bione company panel used by the shops on the platform.
2. Who is responsible for what
Bione is a platform connecting you with independent shops. Two organisations handle your data and they are responsible for different parts of it.
We are responsible for your Bione account, your saved addresses and cards, your order history on the platform, your cashback balances and ledger, your reviews, your notification preferences, and the technical records of your use of our apps.
Each shop is separately responsible for the copy of your order it receives and holds in its own business system, and for anything it then does with it. Shops run their own systems, keep their own customer records, and have their own privacy practices. When you order from a shop, you are dealing with that shop as well as with us. Deleting your Bione account does not reach the shop's own copy — see section 8.4.
3. Data we collect
3.1 Account and identity
Your first and last name, your display name, and — depending on how you signed up — your phone number and/or email address, together with the date each was confirmed. Optionally, if you choose to add them to your profile: your date of birth, your gender, your profile photo, and your preferred language.
Not every field is required. An account created with a phone number has no email address on it unless you add one.
3.2 Sign-in methods
Where you sign in with an outside account, we store the identifier that service gives us so we can recognise you next time:
- Google — your Google account identifier, and the name and email address Google releases to us.
- Apple — the stable subject identifier Apple issues for your use of Bione, and the name you release on first sign-in. If you use Apple's Hide My Email, we do not store the relay address; we identify you by Apple's identifier alone.
- Telegram — your Telegram user id, first and last name, username where set, profile photo, and interface language. If you use the Telegram Mini App and choose to share your contact, we also receive your phone number.
Where an account uses a password (the company panel and our internal staff panel), we store only a one-way Argon2id hash of it. We cannot read your password. Where two-factor authentication is enabled, we store the authenticator secret encrypted.
We store one-time codes sent by SMS or email only for the few minutes they are valid.
3.3 Delivery addresses and location
Addresses you save: label, street, and where you enter them, entrance, floor, apartment, and door code, together with map coordinates for the address so couriers and shops can find it. We use your device's location only while you are actively choosing an address on the map or looking at shops near you, and only with your permission. Bione does not track your location in the background.
3.4 Payment cards
Read this section rather than assuming. Most apps say they never store card numbers. We do store yours, encrypted, and this explains why.
We never ask for and never store your card's CVV/CVC security code.
When you save a card, we store the card brand, the last four digits, the expiry month and year, and any label you give it, so you can recognise the card in the app. We also store, encrypted, the full card number and the binding identifiers our payment gateway returns for that card.
The encrypted card number exists for one purpose: to authorise a payment hold with our payment gateway when you pay for an order. It is encrypted at rest using AES-256-GCM under a key held separately from the database, it is decrypted only inside our servers at the moment a payment is being initiated, and it is never returned to the app, never shown to a shop, and never written to our logs or support tools. In the app and to shops, your card appears only as its brand, its last four digits, and its expiry.
Deleting a saved card removes it from your account and unbinds it at the gateway.
3.5 Orders, payments and cashback
What you ordered, from which shop and branch, quantities and prices, the delivery address or collection choice, order status over time, refunds and cancellations, and the payment method used. For each shop you buy from, your cashback balance with that shop and a ledger entry for every change to it — earned, spent, reversed — along with your tier where the shop runs tiers.
Where you are part of a shop's referral programme, we record who invited whom and the rewards that resulted.
3.6 Reviews and photos
Ratings, review text, and photos you attach, along with your display name and profile photo as shown next to them. Reviews containing text or photos pass through moderation before publication.
3.7 Notifications
Your per-channel and per-category notification preferences, and a record of notifications sent to you. Where your Telegram account is linked, the chat identifier we need to deliver a message.
3.8 Technical and usage data
For each sign-in session: the IP address and browser or device description it was created from, and when it was created, refreshed, and ended. We keep an audit record of security-sensitive actions such as sign-ins, account changes, and administrative actions taken on an account. We record which promotional stories you have seen and which of their buttons you tapped, so we do not show you the same thing repeatedly.
In the Bione merchant app, and on our servers, we also record how the service is used and where it fails, so we can find and fix problems before a shop reports them and learn which features are worth improving. This covers which screens of the merchant app are opened, business events such as a sale completed or a delivery received (identified by account, shop and branch identifiers, never by name), how long a sale takes at the till, and error reports. An error report contains the technical details of the failure and, for a server error, the request that caused it with passwords, codes, tokens and card data removed and names, phone numbers, addresses and notes masked. We do not record session replays or screen contents. These records are kept on our own servers in Tashkent, Uzbekistan (section 11).
3.9 What we do not collect
- Your card's CVV/CVC.
- Your location in the background, or any location when the app is closed.
- Your contacts, call history, SMS messages, photos other than the ones you deliberately attach, or files on your device.
- Biometric data. Where you unlock the app with a fingerprint or face, that check happens on your device and its result never reaches us.
- Health data, or any data revealing political opinions, religious beliefs, or trade-union membership.
4. How we use your data
- To run your account — create it, sign you in, recognise you across devices, keep it secure, and let you recover access.
- To process orders — pass the order to the shop, take payment, track status, handle refunds.
- To operate cashback — calculate what you earn, hold it as pending until an order is paid, let you spend it, and reverse it when an order is cancelled or refunded.
- To communicate with you — one-time codes, order updates, and, where you have not turned them off, notifications about cashback and offers from shops you use.
- To show relevant content — shops near you, your order history, stories you have not seen yet.
- To keep the platform safe — detect and prevent fraud, duplicate accounts, cashback abuse, and unauthorised access.
- To meet legal obligations — accounting and tax records, and responses to lawful requests from authorities.
- To improve the service — understand which parts are used and where they fail, in aggregate.
We do not sell your personal data. We do not share it with advertising networks or data brokers, and we do not use it to build advertising profiles for third parties.
5. Legal bases for processing
We process your personal data under the Law of the Republic of Uzbekistan "On Personal Data" and related legislation, on the following bases:
| Purpose | Basis |
|---|---|
| Creating and running your account; processing orders you place | Performance of the contract between you and us (our Terms of Service) |
| Sending one-time codes and order updates | Performance of the contract |
| Marketing notifications about offers and cashback | Your consent, which you can withdraw at any time in notification settings |
| Using your device location | Your consent, given through your device's permission prompt and withdrawable in device settings |
| Fraud prevention and platform security | Our legitimate interest in protecting the platform, its users, and the shops on it |
| Keeping accounting and tax records | Compliance with our legal obligations |
6. Who we share data with
We share personal data only where it is needed to run the service, and only what is needed.
6.1 The shops you order from
When you place an order, the shop receives your name, your phone number, the order contents, and — for delivery orders — your delivery address. Where you take part in a shop's cashback or referral programme, that shop can see your balance, your tier, and your purchase history with them. A shop can only ever see its own customers and its own orders; it cannot see your activity at any other shop.
Shops receive this through their own Bito ERP business system, which is where their customer and sales records live. That copy belongs to the shop.
6.2 Service providers
| Provider | What it receives | Why |
|---|---|---|
| ATMOS (payment gateway, Uzbekistan) | Card number, expiry, amount, order reference; confirmation codes during card binding | Binding your card and taking payment |
| Eskiz (SMS gateway, Uzbekistan) | Your phone number and the message text | Delivering one-time codes and order SMS |
| Telegram | Your Telegram identifier and the message content | Telegram sign-in, the Mini App, and bot notifications |
| Nothing is sent by us; we receive your identity from Google when you choose that sign-in | Sign in with Google | |
| Apple | Nothing is sent by us; we receive your identity from Apple when you choose that sign-in | Sign in with Apple |
| Resend (email delivery, United States) | Your email address and the message content | Emailed one-time codes and notifications |
| Tasnif (State Tax Committee) | Product tax classification data only — no personal data | Correct tax treatment on receipts |
These providers act on our instructions and are not permitted to use your data for their own purposes, except where they are independent controllers in their own right — Google, Apple, Telegram, and ATMOS each have their own privacy policies covering their own use of data you have with them directly.
6.3 Legal and corporate
We disclose data where we are legally required to, in response to a lawful request from a court or a competent authority, or where necessary to establish, exercise, or defend legal claims. If our business is transferred to another organisation, your data may transfer with it; we will tell you if that happens.
7. Security
- All traffic between your device and our servers is encrypted in transit (TLS).
- Passwords are stored only as one-way Argon2id hashes and cannot be read by us.
- Card numbers and two-factor secrets are encrypted at rest with AES-256-GCM, under keys managed separately from the database.
- Sign-in sessions in browsers use cookies that JavaScript cannot read. Refresh tokens are stored as hashes, rotate on every use, and a reused token invalidates the whole session family.
- Sensitive actions — adding a card, changing account details, deleting an account — are confirmed with a one-time code.
- Staff access is limited to what a role requires, and administrative actions are recorded in an audit log.
No system is perfectly secure. If a breach affects your personal data, we will notify you and the competent authority as required by law.
8. How long we keep data, and deleting your account
8.1 While your account is open
We keep your account data for as long as your account exists. One-time codes last minutes. Sign-in sessions expire and are cleared after they do.
8.2 When you ask us to delete your account
You can request deletion in the app, or read how at bione.uz/account-deletion. When you do:
- Your sessions are revoked immediately and you are signed out everywhere.
- For thirty days you can change your mind by signing in and choosing to restore the account. Signing in on its own does not cancel the deletion — you have to choose it deliberately.
- After thirty days we erase your personal details: your name, phone number, email address, date of birth, gender, profile photo, saved addresses, saved cards, notification preferences, and the identifiers of any Google, Apple, or Telegram account you signed in with.
8.3 What survives erasure, and why
Some records remain after erasure, in a form that no longer identifies you:
- Completed orders and their cashback ledger entries, because shops need them to account for sales that really happened and because a cashback ledger is an append-only financial record. We are also required to retain accounting records for five years under Uzbek law.
- Published reviews, because other customers and the shop rely on them. Your name and photo are removed from them.
After erasure none of these records is connected to your name, contact details, or sign-in accounts. If you sign up again afterwards, you get a new account — your previous orders, cashback, and addresses do not come back.
8.4 What we cannot delete
Each shop you ordered from holds its own record of that sale in its own business system, under its own responsibility. Deleting your Bione account does not reach that copy. To have it removed, contact the shop directly.
9. Your rights
Under Uzbek personal-data law you have the right to:
- know whether we hold personal data about you, and obtain a copy of it;
- have inaccurate or incomplete data corrected — most of it you can edit yourself in the app;
- have your data erased, as described in section 8;
- withdraw consent where we rely on it, including turning off marketing notifications or revoking the location permission, without affecting anything done before you withdrew it;
- object to processing based on our legitimate interests;
- complain to the authorised body for personal-data protection of the Republic of Uzbekistan.
To exercise any of these, write to support@bione.uz. We will respond within the period required by law. We may need to confirm your identity first, so that we do not hand your data to someone else.
10. Children
Bione is not intended for children under 18. We do not knowingly collect personal data from them. If you believe a child has given us personal data, write to us and we will delete it.
11. Where your data is processed
Your personal data is stored and processed on servers located in Tashkent, Uzbekistan. Some of the providers in section 6.2 operate outside Uzbekistan. Google, Apple, and Telegram process the data you exchange with them directly, under their own policies. Resend receives your email address and the content of the messages we send you, and processes it in the United States on our instructions.
The usage events and error reports described in section 3.8 are processed with PostHog, analytics software we run on our own servers in Tashkent, Uzbekistan. They are not sent to PostHog Inc. or any other third party.
12. Changes to this policy
We may update this policy. When we make a material change we publish the updated version with a new effective date and show it to you in the app so you can see what changed. You do not have to agree to a privacy policy — it is a statement of what we do, not a contract — but we do ask you to confirm you have seen it.
Minor corrections that do not change what we collect or how we use it are published without prompting you.
13. Contact us
- Email: support@bione.uz
- Postal address: Toshkent shahri, Yakkasaroy tumani, Shota Rustaveli ko‘chasi, 53-uy
- In the app: Profile → Support