Privacy policy

1. Introduction

Welcome to Carte Fidélité Maroc (“the App”). This policy explains how we collect, use and protect your information when you use our mobile loyalty app.

In short: we only collect the data needed to run the App. We do not sell your data, do not display advertising and do not process any payments.

2. Information we collect

2.1 Account & profile (Google Sign-In)

• Email address
• Display name
• Google profile picture (optional)
• Unique identifier (UID)

We never have access to your Google password.

2.2 Usage data (Firebase)

• Screens and features viewed
• Actions (collecting points, offers)
• Session duration and frequency

2.3 Device

• Model, operating system, app version
• Crash logs (Crashlytics)

2.4 Approximate location

With your permission, to show nearby businesses. Not stored on our servers.

What we do NOT collect

• Payment data
• Precise or background GPS
• Contacts, messages, files
• Biometric data

3. How we use your information

• Create and manage your account
• Track your points and rewards
• Show nearby businesses
• Improve and stabilize the app
• Send service notifications

No advertising use or third-party profiling.

4. Data sharing

4.1 Firebase (Google LLC)

Analytics and Crashlytics, governed by Google’s privacy policy.

4.2 Partner businesses

They see your display name and loyalty activity - never your email address.

4.3 Legal requirements · 4.4 Business transfer

Disclosure possible if required by law, or transfer in the event of a merger (with prior notice).

5. Security

• Encryption in transit (TLS / HTTPS)
• Restricted back-end access
• Authentication via Google OAuth
• No password storage

6. Retention & deletion

• Account: until deletion
• Analytics: 14 months
• Crash logs: 90 days
• After deletion: erased within 30 days

7. Your rights

• Access
• Rectification
• Deletion
• Restriction of processing
• Portability
• Objection

Reply within 30 days at [email protected].

8. Account deletion

From the app

Profile → Settings → Delete my account (immediate and permanent).

By email

Subject “Account deletion request” to [email protected] - processed within 7 business days.

9. Protection of minors

The App is intended for users aged 18 and over. We do not knowingly collect data from minors.

10. Cookies and local storage

Our website sets no tracking cookies of its own. The analytics we run ourselves store nothing on your device: they use the tab’s memory, which is cleared as soon as you close it.

10.1 Advertising partners’ cookies

These are set by Google and Meta when their scripts load on our site:

• Google Ads (_gcl_aw, _gcl_au) - measuring sign-ups that came from our ads
• Meta Pixel (_fbp, _fbc) - measuring and optimising our Facebook and Instagram ads

They are governed by Google’s and Meta’s own privacy policies; both receive this data for their own purposes.

10.2 Local storage

Your theme preference (light or dark) is kept in your browser’s local storage. It never leaves your device.

10.3 How to refuse them

You can block or delete these cookies in your browser settings, and turn off personalised advertising in Google’s and Meta’s ad settings. The site remains fully usable.

11. Changes

The “last updated” date will change accordingly. Significant changes are notified in the app.

12. Contact

Carte Fidélité Maroc - Support · [email protected] · reply within 5 business days.