Terms and conditions

Version of 1 November 2026

General part

This English version is a translation provided for convenience. The French version is the only binding one.

The general part governs contracts concluded with Aroneus by professional customers: subscriptions to its software and services. Each product then has its own part, which supplements it and prevails over it in case of conflict. The part of a product made available free of charge to the public specifies what applies to its users.

1. Parties and scope

The provider is Aroneus SRL, Rue de Hodimont 51, 4800 Verviers, Belgium, company number (CBE) and VAT BE 0730.644.283 (“Aroneus”).

Aroneus’s subscriptions and services are for professionals only (the “Customer”): they are not offered to consumers.

The Customer accepts these terms by opening an account, subscribing, accepting a quote or paying an invoice. They prevail over the Customer’s own terms.

2. Custom services

Development and IT services are described in a quote or contract accepted by both parties. That document prevails over these terms on the points it covers; these terms apply to the rest.

3. Prices

Prices are in euros, excluding VAT. Subscription prices are set out in each product’s part; service prices, in the quote.

Aroneus may change the price of a subscription. The Customer is informed by email at least 30 days before it applies; if it refuses it, it may terminate before that date at no cost.

4. Payment and invoicing

Online payments are made through Stripe, by card or direct debit. The corresponding invoices are issued by Stripe in the name of Aroneus SRL and remain available in the billing portal. Services are paid as set out in the quote.

Belgian VAT applies. A Customer registered for VAT in another EU Member State that provides a valid VAT number is invoiced without VAT under the reverse-charge mechanism.

The Customer keeps its billing details and payment method up to date.

5. Non-payment

In case of non-payment, Aroneus informs the Customer and reserves the right to suspend access to the product or performance of the service until the situation is resolved. This right is an option: it is neither automatic nor immediate.

6. Intellectual property

Aroneus’s software, products, trademarks and content remain its exclusive property. A subscription gives the Customer, for its term, a non-exclusive, non-transferable right of use for its own needs. Rights in custom developments are set by the quote or contract.

7. Confidentiality

Each party keeps confidential the other’s non-public information it learns during the contract, and uses it only to perform the contract.

8. Personal data

The processing for which Aroneus is the controller is described in its privacy policy. When Aroneus processes personal data on the Customer’s behalf, it acts as a processor within the meaning of GDPR Article 28, under the terms of the relevant product’s part or of the service contract.

9. Liability

Aroneus has an obligation of means. It is not liable for indirect damage, such as loss of revenue, clientele or profit, for damage caused by non-compliant use of its products, or for third-party services the Customer uses under its own contract.

Aroneus’s total liability under a contract is limited to the amount paid by the Customer under that contract in the twelve months preceding the event giving rise to it.

These limits do not apply in case of fraud or intentional misconduct, or where the law prohibits them. Neither party is liable for a failure due to force majeure.

10. Changes to these terms

Aroneus may change these terms. The Customer is informed by email at least 30 days before they take effect. If it refuses them, it may terminate its subscription before that date at no cost; otherwise, the new terms apply. A change required by law may take effect sooner. A service in progress remains governed by the version in force when it was accepted.

The version in force is the one published on this page, dated at the top.

11. Governing law and disputes

Contracts are governed by Belgian law. The parties first seek an amicable solution. Failing that, the courts of the judicial district of Liège, Verviers division, have exclusive jurisdiction.

If a clause is held invalid, the others remain in force. Failure to enforce a clause is not a waiver of it.

12. Contact

Aroneus: hello@aroneus.com.

Careways

This part applies to the subscription to Careways, online management software for beauty salons and institutes, published and operated by Aroneus. It supplements the general part and prevails over it in case of conflict. Careways is for companies operating one or more salons.

C.1 Definitions

Service: Careways, available on the web (app.careways.eu) and through the iPhone and iPad app.
Customer: the customer company, holder of the subscription, operating one or more Centres.
Centre: a salon or institute of the Customer, managed in the Service.
User: a member of the Customer’s team who has been given access to the Service.
Practitioner: a User with the practitioner role in at least one Centre.
Clients: the clients of a Centre whose data is recorded in the Service.
Customer Data: all data that the Customer and its Users enter in the Service, or that it receives for them (in particular through the online booking page).

C.2 The Service

Careways includes in particular: calendar, client records, point of sale, stock, treatment records, online booking, optional Google Calendar sync, and card payments via Stripe, including Tap to Pay on iPhone.

Aroneus develops the Service over time: features are added, others change. A change that would remove an essential feature is announced to the Customer in advance, like a change to these terms (section 10 of the general part).

C.3 Account, team and roles

The account is opened in the Customer’s name, and one or more Centres can be attached to it. Team members are added to the company, then given a role in each Centre where they work: owner, management, practitioner, front desk, cashier, accountant or read-only. At company level, the roles are owner, director and accountant.

The Customer decides who accesses the Service and with which role. It ensures that each User keeps their sign-in means and PIN to themselves, and it is responsible for acts carried out with the access it has granted. It informs Aroneus without delay if it suspects unauthorised access.

C.4 Free trial

Opening an account gives a free 30-day trial, with no commitment. Aroneus may extend it.

At the end of the trial, the app tells the Customer that a subscription is required. Without a subscription, Aroneus may suspend access (section C.7), then, after notifying the Customer, terminate the contract: section C.9 then applies to its data.

C.5 Plans and prices

The subscription is monthly. Its price, excluding VAT, depends on the number of active practitioners across the whole company, all Centres included:

Solo — 1 to 2 practitioners: €39 per month;
Team (Équipe) — 3 to 5 practitioners: €79 per month;
Institute (Institut) — 6 to 10 practitioners: €129 per month;
above 10: €15 per month per additional practitioner, on top of the Institute plan.

The Customer does not choose its plan: it follows from its headcount and adjusts automatically when that changes. A company that has not yet declared any practitioner is on the Solo plan.

Aroneus may offer a licence to a Customer. It applies for the period and on the terms Aroneus states, and Aroneus notifies the Customer before it ends.

C.6 Payment

The subscription is paid through Stripe, by card or direct debit, at the start of each monthly period. Invoices are available in the billing portal, reachable from the app.

C.7 Non-payment and suspension

If a payment fails, or a trial ends without a subscription, the app informs the Customer. Aroneus then reserves the right to suspend access to the Service until the situation is resolved. This right is an option: it is neither automatic nor immediate.

During a suspension, Customer Data is kept. Access is restored as soon as payment is received.

C.8 Term and termination

The contract is concluded for an indefinite term, in monthly periods.

The Customer may terminate at any time from the app: company space › Subscription › “Manage subscription”, which opens the Stripe portal. Termination takes effect at the end of the period already paid, until which the Service remains available; the current month is not refunded.

Aroneus may terminate the contract for a serious breach by the Customer, in particular persistent non-payment or unlawful use of the Service, if it is not remedied within 15 days of formal notice by email. Aroneus may also discontinue the Service with at least three months’ notice.

C.9 End of contract and data

When the contract ends, for whatever reason:

the Customer may request an export of its data for 30 days;
Customer Data is deleted within 90 days;
backups erase themselves after 35 days.

The Customer’s legal retention obligations, in particular for accounting and tax, remain its own: it must export what it needs to keep before deletion.

C.10 Payments from salon clients

To take payments from its Clients (deposits, card guarantees, payment terminal, Tap to Pay), the Customer connects its own Stripe account, once for all its Centres. It holds that account, opened under its own contract with Stripe.

Aroneus is never in the flow of funds: the money goes directly to the Customer’s Stripe account. Aroneus keeps no key to that account and only drives payments from the Service.

Fees, refunds, disputes and chargebacks are a matter between the Customer and Stripe. The Customer sets its own deposit, cancellation and guarantee rules, and informs its Clients of them.

Only an owner of the company can connect or disconnect the Stripe account.

C.11 Customer obligations

The Customer undertakes to:

use the Service lawfully and for its intended purpose;
enter only data it is entitled to process, inform its Clients about the processing of their data, and obtain their explicit consent before recording health data in a treatment record;
not attempt to access other customers’ data, bypass security measures, copy or decompile the software, or disrupt the operation of the Service.

C.12 Availability and support

Aroneus uses reasonable means to keep the Service available and working properly, without any quantified service level commitment. Interruptions may occur, in particular for maintenance; Aroneus announces them when possible.

Support is provided by email, at contact@careways.eu.

A Careways administrator can enter a centre to assist it. They must give a reason, without which access is refused; the session lasts at most 60 minutes and is recorded in the centre’s log. Treatment records and their photos remain inaccessible to them.

C.13 Customer Data

The Customer remains the owner of its data. Aroneus uses it only to provide the Service.

Aroneus is the controller for User accounts (name, email address, role), licence billing, security and technical logs. For the data the Customer records about its Clients, the Customer is the controller and Aroneus is its processor: the data processing agreement (section C.14) sets out their respective obligations.

C.14 Data processing agreement (GDPR Article 28)

This agreement forms an integral part of the Careways terms. It applies to the personal data the Customer records in Careways about its Clients. The Customer is the controller; Aroneus is its processor.

A.1 Subject matter and description of the processing

Nature and purpose: hosting, storage, organisation, consultation, encryption, backup, transmission (emails and notifications) and deletion of data, for the sole purpose of providing the Service to the Customer.
Duration: the term of the contract, then the periods in section C.9.
Data subjects: the Clients of the Centres, including people who book online.
Data: contact details, appointments, sales and payments, treatment records and their photos, data received through the online booking page.
Special categories: treatment records may contain health data (contraindications, treatments).

A.2 Health data

The Customer obtains its Client’s explicit consent before recording health data (GDPR Article 9(2)(a)); the app records that consent. This data is encrypted, never stored on devices, and excluded from Careways support access.

A.3 Instructions

Aroneus processes the data only on the Customer’s documented instructions: these terms and the Customer’s use of the Service constitute those instructions. Aroneus processes it for no purpose of its own. It informs the Customer if an instruction appears to infringe the GDPR.

A.4 Confidentiality

Persons authorised to process the data for Aroneus are bound by confidentiality.

A.5 Security

Aroneus implements the technical and organisational measures required by GDPR Article 32, including:

encryption of all traffic (TLS);
strict separation of data by centre;
encryption of personal fields, with keys managed in Google Cloud KMS; tokens and secrets never stored in plain text;
personal PIN on shared devices, and locking after 5 minutes of inactivity;
encrypted browser session;
encrypted daily database backup, kept for 35 days;
erasure of a client by destroying their encryption keys (“crypto-shredding”);
Careways administration console protected by a second authentication factor.

A.6 Sub-processors

The Customer authorises Aroneus to use the following sub-processors:

OVH SAS (Roubaix, France) — servers and database, hosted in Gravelines (France).
Cloudflare, Inc. — routing and protection of web traffic (global network).
Google Cloud / Google Ireland Limited — sign-in by email link (Firebase Authentication); encrypted backups and treatment record photos (Cloud Storage, Belgium); encryption keys (Cloud KMS, Frankfurt); Google Calendar, only if a user links it.
Mailgun (Sinch) — email delivery, European Union region.
Stripe Payments Europe Limited (Ireland) — billing of the Careways licence. For payments from salon clients, Stripe acts on behalf of the salon, not Aroneus.
Apple — notifications on iPhone and iPad, and Tap to Pay on iPhone.

Aroneus informs the Customer by email of any intended addition or replacement at least 30 days in advance. The Customer may object on reasonable grounds; if no solution is found, it may terminate at no cost before the change. Aroneus imposes equivalent data protection obligations on each sub-processor and remains liable to the Customer for their compliance.

Some of these providers may transfer data outside the European Union (Cloudflare, Google, Apple). These transfers are governed by the standard contractual clauses adopted by the European Commission and/or the EU–US Data Privacy Framework.

A.7 Assistance to the Customer

The Service lets the Customer handle data subject requests itself: viewing, correcting, exporting and erasing a Client. Aroneus assists it where needed, and with its obligations on security, impact assessment and prior consultation (GDPR Articles 32 to 36), taking into account the nature of the processing and the information available to it.

A.8 Personal data breaches

Aroneus notifies the Customer of any personal data breach without undue delay after becoming aware of it, with the information available, so that the Customer can meet its own notification obligations.

A.9 End of processing

When the contract ends, Aroneus returns the data to the Customer on request (export) and then deletes it, within the periods in section C.9, unless the law requires it to be kept.

A.10 Audits

Aroneus makes available to the Customer the information needed to demonstrate compliance with its obligations. It allows audits, including inspections, carried out by the Customer or an auditor it mandates who is bound by confidentiality, with reasonable notice, at the Customer’s expense and at most once a year, except in case of a data breach or a request from a supervisory authority.

Ardoze

Ardoze, point-of-sale software for restaurants, is in development and not yet on sale. Its own terms will be published here before it goes live.

Spa Connect

Spa Connect is an app for residents of and visitors to Spa, on iPhone, iPad and Android. It is provided free of charge, with no in-app purchases or advertising. This part applies to anyone who uses it; the general part applies to it only as regards intellectual property, governing law and contact.

S.1 Independent app

Spa Connect is an independent app, published by Aroneus SRL. It is neither affiliated with nor published by the City of Spa.

S.2 Information

The information shown (news, events, services, waste collection, hikes…) comes from public sources and partners. It is provided for guidance only: Aroneus guarantees neither its accuracy nor its availability, and cannot be held liable for a decision based solely on it (waste collection times, on-duty pharmacies…). It remains the property of its authors.

S.3 Account

The app works without an account. Users can create one, with Google, with Apple or through a link received by email, to keep their favourites and settings. They can delete it at any time from the app.

S.4 Use

Users receive a personal, non-exclusive and non-transferable right to use the app. During a hike, they remain responsible for their own safety: guidance is an aid, not a guarantee.

They undertake not to:

use the app for illegal or fraudulent purposes;
attempt unauthorised access to systems or data;
disrupt the service or compromise its security;
reproduce or exploit the content beyond the intended personal use.

Aroneus may suspend access in case of breach, and may change the app and these terms. Users may stop using it and delete their account at any time. The app is distributed through the App Store and Google Play, which have their own terms.

Spa Connect is governed by Belgian law, without depriving users acting as consumers of the protection of the mandatory rules of their country of residence. Contact: support@aroneus.com.

EBSP

EBSP shows weather data for the Spa aerodrome (La Sauvenière), on the web (ebsp.app), Android and iOS. The app is free, with no account, no in-app purchases and no advertising. This part applies to anyone who uses it; the general part applies to it only as regards intellectual property, governing law and contact.

E.1 Non-operational use

EBSP does not replace an official briefing (skeyes, NOTAM, AIS). Before any flight, pilots consult the official sources; they alone remain responsible for their decisions.

E.2 Data shown

Weather observations are issued by skeyes and obtained through spa-aviation.be. Derived values (headwind, crosswind, runway into wind, VMC/IMC conditions) are calculated automatically. Aroneus controls neither the content nor the availability of the data. The app is provided as is, without any guarantee of continuous availability; Aroneus may interrupt or change it, in particular for maintenance.

EBSP is governed by Belgian law, without depriving users acting as consumers of the protection of the mandatory rules of their country of residence.

Harbor

Harbor is a Google Chrome extension, distributed through the Chrome Web Store. This part applies to anyone who installs it; the general part applies to it only as regards intellectual property, governing law and contact.

Users receive a personal, non-exclusive right to use the extension. Harbor runs entirely in their browser and requires no account.

Harbor is governed by Belgian law, without depriving users acting as consumers of the protection of the mandatory rules of their country of residence.