Back to Home

Privacy Policy

MoroccoNaut Mobile Application

November 21, 2025 Version 1.0 CNDP: 300303773
1

Introduction

Welcome to MoroccoNaut

This Privacy Policy explains how MoroccoNaut collects, uses, shares, and protects your personal information when you use our mobile application.

We are committed to protecting your privacy and complying with:

  • Moroccan Law No. 09-08 on Personal Data Protection (2009)
  • Law No. 31-08 on Consumer Protection (2011, amended 2024)
  • Law No. 05-20 on Cybersecurity (2020)
  • CNDP Regulations

Your Consent

By using MoroccoNaut, you agree to the collection and use of information in accordance with this Privacy Policy.

2

Data Controller & Legal Basis

Who is responsible for your data

Information Details
Company Name United Behavioral and Cognitive Group SARL
Address RES JAWHARA, RUE IMAM CHAFII, Quartier Hivernage, Marrakech 40020, Morocco
Email [email protected]
Phone +212 524 401 007
CNDP Registration 300303773
DPO [email protected]

Legal Basis for Processing

  • Consent - You explicitly agree to processing for specific purposes
  • Contract Performance - Processing necessary to provide APP services
  • Legal Obligations - Compliance with Moroccan law
  • Legitimate Interest - Fraud prevention, security, and service improvement
3

Scope & Purpose

What this policy covers

This Privacy Policy applies to the MoroccoNaut Mobile Application, available on:

  • iOS devices (Apple App Store)
  • Android devices (Google Play Store)

The APP serves as a digital travel companion for Morocco, providing tourist information, service provider directories, safety features, and community functions.

4

Data Collection

What information we collect

Account Information

  • Full name, email address, password (encrypted)
  • Phone number (optional), profile photo (optional)
  • Preferred language (English, French, German, Spanish, Arabic)

Location Data (With Permission)

  • Precise GPS coordinates (when location services are enabled)
  • City and region information
  • Distance to points of interest

Device Information

  • Device type and model
  • Operating system version
  • Unique device identifiers (for security)

Payment Security

We work with trusted payment processors. We NEVER store your complete credit card details on our servers.

5

How We Use Your Data

Purpose of data processing

  • Display personalized content and recommendations
  • Enable booking features and process payments
  • Provide customer support
  • Send security alerts and travel advisories
  • Improve APP features and performance
  • Comply with legal obligations
6

Data Sharing & Third Parties

Who we share data with

Service Purpose
Google Maps Platform Display maps, directions, points of interest
Firebase (Google) Authentication, analytics, crash reports
Cloudflare Content delivery, security, DDoS protection
Amazon Web Services Cloud hosting, data storage

What We NEVER Do

  • We NEVER sell your personal data to third parties
  • We NEVER share your data with advertisers for targeting
  • We NEVER provide your data to data brokers
7

Data Retention

How long we keep your data

Data Type Duration
Account Data Until account deletion (30-day grace period)
Transaction Records 10 years (Moroccan tax law requirement)
Location History 12 months (rolling)
Analytics Data 26 months (Firebase standard)
Technical Logs 90 days
8

Your Rights Under Moroccan Law

Law No. 09-08

Right of Access (Art. 8)

Request a copy of all personal data we hold about you.

Right of Rectification (Art. 9)

Correct inaccurate or incomplete personal data.

Right to Erasure (Art. 10)

Request deletion of your personal data ("Right to be Forgotten").

Right of Objection (Art. 11)

Object to processing of your data for specific purposes.

Right to Data Portability (Art. 13)

Receive your data in a structured, machine-readable format (JSON).

9

Children's Privacy

Protection of minors

Age Requirement

The APP is intended for users aged 13 years or older.

Users between 13-18 years must obtain parental or legal guardian consent before registration.

If you discover that your child (under 13) has created an account without consent, contact us at [email protected] for immediate account deletion.

10

Security Measures

How we protect your data

Encryption

  • TLS 1.3 for data in transit
  • AES-256 for data at rest
  • End-to-end encryption for payment data

Infrastructure

  • AWS data centers in EU (Frankfurt) with ISO 27001 certification
  • DDoS protection via Cloudflare
  • 24/7 security monitoring
11

International Data Transfers

Where your data is stored

Data Location

  • Primary Storage: European Union (Frankfurt, Germany - AWS)
  • Backup Storage: European Union (Ireland - AWS)

All international data transfers include Standard Contractual Clauses (SCCs) approved by the CNDP.

12

Cultural & Religious Considerations

Respecting Moroccan values

  • Ramadan Mode: Restaurant recommendations adjusted for Iftar/Suhoor times
  • Modest Content Standards: All user-generated content moderated
  • Prayer Time Features: Optional notifications and nearby mosque locator
  • Halal Certification: Restaurant halal status displayed
13

Cookies & Tracking Technologies

What we use

Type Purpose Can Disable?
Essential Cookies Authentication, security, APP functionality No (required)
Analytics Cookies Understanding APP usage patterns Yes
Preference Cookies Remember your settings (language, theme) Yes

No Third-Party Tracking

We do NOT use advertising tracking pixels, social media tracking, or cross-site tracking.

14

Changes to This Policy

How we notify you

When we make changes to this Privacy Policy:

  • We will notify you via in-app notification
  • We will send an email to your registered address
  • We will update the "Last Updated" date
  • Significant changes require your acceptance

Changes typically take effect 30 days after notification.

15

Contact Us

Get in touch

General Inquiries

[email protected]

Privacy Requests

[email protected]

Data Protection Officer

[email protected]

Phone

+212 524 401 007

Postal Address

United Behavioral and Cognitive Group SARL
RES JAWHARA, RUE IMAM CHAFII
Quartier Hivernage
Marrakech 40020, Morocco

16

Regulatory Authority

CNDP supervision

CNDP Registration

Registration Number: 300303773

Contact CNDP

Commission Nationale de contrôle de la protection des Données à caractère Personnel

Right to File a Complaint

If you believe your privacy rights have been violated, you have the right to file a complaint with the CNDP at any time.