Privacy policy

1. Data controller

The data controller is ALMA HOLDING LLC, registered in [country / state of registration] under No. [registration number], with its registered office at [address] (“InDeliver”, “we”). [Representative or establishment in Morocco, if any: to be completed.]

Contact for any question about your data: contact@indeliver.ma. [Name of the internal data protection contact, if one is appointed: to be completed.]

2. Legal framework

Our processing is subject to Moroccan Law No. 09-08 on the protection of individuals with regard to the processing of personal data and its implementing Decree No. 2-09-165. It has been [declared to / submitted for authorisation by] the CNDP (Commission Nationale de contrôle de la protection des Données à caractère Personnel) under No. [to be completed].

3. The data we process

Account (customers and drivers)

• Full name, e-mail address, phone number, role (customer or driver), app language, creation date and account status.
• Password, if you create one: it is stored only as a hash (BCrypt). Nobody at InDeliver can read it.

Sign-in with Google or Apple

• With Google: your Google account’s unique identifier, your e-mail address (and whether it is verified) and your name. We do not receive your Google password, your contacts or any other data from your Google account.
• With Apple (“Sign in with Apple”): the unique identifier provided by Apple, your e-mail address and, on your first sign-in only, your name. If you choose “Hide My Email”, we receive a private Apple relay address (…@privaterelay.appleid.com) and our e-mails reach you through Apple. We keep a token provided by Apple for the sole purpose of revoking the app’s access when you delete your account.

Drivers

• Profile name, category and number plate of your vehicle(s), verification status (pending, approved, rejected, suspended) and the team’s decisions with their reason.
• Any information or documents you may be asked for to verify your identity and vehicle [exact list of documents to be completed].
• Free period, any subscription and the fee owed for each completed trip.

Requests, offers and trips

• Pick-up and drop-off addresses, cities and GPS coordinates, date and time, type of goods, free-text description, number of helpers, floors and whether there is a lift.
• Calculated route (distance, duration, path) and recommended price.
• Driver offers (price, estimated duration, optional message of up to 500 characters), agreed price, trip statuses and their history, any cancellation reason.

The app has no chat between users and does not disclose phone numbers to the other party.

Location

• Customers and drivers: if you allow it, your device’s current position is used to fill in an address (“use my location”) and centre the map, only while you are using the app.
• Drivers, during an active trip (trip confirmed, driver on the way, trip in progress): your position (latitude, longitude, heading, speed, accuracy and time) is sent to our servers each time you move about 10 metres, so the customer can follow the vehicle’s arrival.

On Android, this sharing runs through a foreground service: a notification stays visible for as long as sharing lasts, including when the app is in the background or the screen is locked. The app does not request the “Allow all the time” (background location) permission. On iOS, the app requests “While Using the App” permission; during an active trip, sharing continues in the background and iOS shows the blue location indicator. Sharing stops when the trip ends.

Our servers keep only the latest position of each active trip: it is replaced at each update and deleted as soon as the trip is no longer active. We keep no history of your movements. Before an offer is accepted, drivers only see a position rounded to about 1 km, without the exact address or route.

Drivers’ prepaid credit

• Balance and transactions (top-ups, per-trip fees, adjustments and refunds with their reason).
• Top-up declarations: payment method (instant bank transfer), amount, transfer reference, optional note, status, amount credited and, where relevant, the reason for a rejection.
• To match a transfer with your declaration, we use the information our bank gives us about the transfer received (name of the payer, amount, reference). We collect no card numbers and no online banking credentials.

Notifications

• The device’s notification identifier (Firebase Cloud Messaging token), platform (Android or iOS), language and date last used. At most 10 devices per account.

Security, logs and support

• Sessions: sign-in tokens, stored on our servers only as hashes.
• Audit log of sensitive actions (driver verification, top-ups, adjustments, account deletion, linking a Google or Apple account).
• IP address: used temporarily, in memory, to limit repeated sign-in attempts (brute-force protection); it is not stored in our database. Our hosting providers keep technical logs (IP address, date, request) to run and secure the service.
• The e-mails and attachments you send to support.

What we do not collect

• No contacts, photos, camera or microphone access, and no advertising identifier. The app contains no analytics or advertising tools.

4. Why we use your data, and on what basis

• Create and manage your account, sign you in (including with Google or Apple): performance of the terms of use you accept.
• Publish requests, pass on offers, manage trips: performance of the terms of use.
• Calculate the road route and the recommended price: performance of the terms of use.
• Live trip tracking and use of your location: performance of the terms of use and your consent, given through your phone’s location permission and revocable at any time.
• Notifications (new offer, trip status change): your consent, given through the notification permission.
• Verify drivers: user safety (legitimate interest) and performance of the terms of use.
• Manage the credit, top-ups and fees, keep the accounts: performance of the terms of use and legal accounting and tax obligations.
• Security, prevention of fraud and abuse, audit log: legitimate interest and legal obligations.
• Answer support requests and complaints: performance of the terms of use and legitimate interest.
• Answer requests from authorised authorities: legal obligation.

Only one decision is automatic: when a driver’s balance is below the fee of their next trip, they cannot send new offers or confirm a trip until their next top-up. This rule is shown in the app and you can contact support about it.

5. Who can see your data

Other users

• Before an offer is accepted, drivers see the request without the customer’s name or contact details: cities, rounded position, date, type of goods, description, floors, helpers, distance, duration and recommended price.
• The customer sees the offers received (price, estimated duration, the driver’s message and vehicle).
• Once an offer is accepted, the customer and the chosen driver see what the trip needs: names, exact addresses and route, agreed price and, during the trip, the driver’s position.

The InDeliver team

Only authorised team members access data, according to their role (driver verification, top-up validation, support). Their sensitive actions are recorded in an audit log.

Our service providers (processors)

• Render Services, Inc.: hosting of our server (API), data centre in Frankfurt (Germany).
• Neon, Inc.: PostgreSQL database, hosted on Amazon Web Services in Frankfurt (Germany, region eu-central-1).
• Vercel Inc.: hosting of the indeliver.ma website and of our administration console.
• Google: Firebase Cloud Messaging (sending notifications), Google Maps Platform (maps in the app; route calculation: our server sends Google the pick-up and drop-off coordinates, without your name), Google Sign-In if you use it, Google Fonts on the website.
• Apple: Sign in with Apple if you use it, and Apple’s notification service for iPhones.
• OpenStreetMap Foundation (United Kingdom): address search and turning a position into an address (Nominatim service). The text you type or the coordinates are sent directly from the app, with the device’s IP address.
• [E-mail provider for contact@indeliver.ma: to be completed].
• [Bank receiving top-up transfers: to be completed].

If you open Waze or Google Maps from the app for directions, the destination address is passed to that app, which applies its own privacy policy.

Authorities

We may disclose data to judicial or administrative authorities when the law requires it.

We do not sell or rent your data, and we do not share it for advertising.

6. Transfers outside Morocco

Our servers and database are located in the European Union (Germany). Some providers (Google, Apple, Vercel, Render, Neon) are companies established in the United States, and the OpenStreetMap Foundation is established in the United Kingdom, so your data may be processed in those countries.

In accordance with articles 43 and 44 of Law No. 09-08, these transfers [have been authorised by the CNDP under No. to be completed / are the subject of a pending authorisation request]. We rely on the contractual safeguards offered by these providers [to be checked by a lawyer].

7. Retention periods

• Account: while it is active. When it is deleted, your identifying data is erased immediately (see Delete my account).
• A driver’s live position: only during the active trip (latest position only), then deleted.
• Requests, offers, trips and routes: [period to be confirmed] after the trip. If the account is deleted, they are kept in anonymized form, without name, e-mail or phone number.
• Drivers’ credit, top-ups and fees: [10 years, the accounting retention period, to be confirmed], in anonymized form after account deletion.
• Driver verification information: [period to be confirmed].
• Notification tokens: until the device signs out, is replaced or the account is deleted.
• Sessions: 30 days at most.
• Sign in with Apple token: until account deletion, when it is used to revoke access.
• IP addresses used against brute force: a few minutes, in memory only.
• Audit log: [period to be confirmed].
• Hosting providers’ technical logs: [period to be confirmed per provider].
• Support e-mails: [period to be confirmed] after the request is closed.

8. Security

• All communication between the app, the website and our servers is encrypted (HTTPS/TLS).
• Passwords hashed with BCrypt; session tokens stored as hashes; short-lived access tokens (15 minutes) renewed securely.
• On the phone, tokens are kept in the system’s secure storage (Keychain on iOS, Keystore on Android) and automatic backup of the app’s data is disabled on Android.
• Role-based access control (customer, driver, administrator) and an audit log of sensitive actions.
• Sign-in attempt limiting.
• Minimal data shared with drivers before an offer is accepted (rounded position, no route).
• Database hosted in the European Union, encrypted at rest by the provider.

No system is perfectly secure. In the event of a data breach, we will act in accordance with the law [notification procedure to be completed].

9. Your rights

Under Law No. 09-08, you have:

• the right to be informed about the processing (article 5);
• the right to access your data (article 7);
• the right to have inaccurate or incomplete data rectified, updated or erased (article 8);
• the right to object, on legitimate grounds, to the processing of your data, and to object free of charge to its use for marketing (article 9).

You can also withdraw the location and notification permissions at any time in your phone’s settings, and delete your account (see below).

To exercise your rights, write to contact@indeliver.ma, preferably from your account’s e-mail address. We may ask you to prove your identity [proof to be specified]. We reply within [time limit to be confirmed].

If you believe your rights are not respected, you can contact the CNDP (www.cndp.ma).

10. Permissions and choices

• Location: if you refuse it, you can type the addresses by hand. A driver needs location to share their position during a trip.
• Notifications: you can turn them off in your phone’s settings; you will then no longer be told about new offers or status changes.
• Google and Apple: you can remove InDeliver’s access from your Google account or Apple ID settings.

11. Account deletion

You can delete your account at any time in the app (Account, then Delete my account) or by e-mail to contact@indeliver.ma. What is deleted, what is kept and for how long: see Delete my account.

12. Minors

InDeliver is reserved for people aged at least [18]. Drivers must be adults. The service is not directed at children; if we learn that an account was created by a minor, we delete it.

13. Website, cookies and advertising

The indeliver.ma website uses no tracking cookies, no audience measurement and no advertising. It only stores the language you chose in your browser’s local storage. Fonts are loaded from Google Fonts, which passes your IP address to Google. Our host Vercel keeps technical logs.

Neither the app nor the website sells your data or uses it for targeted advertising.

14. Changes

We may change this policy, in particular when the app evolves. The update date is shown at the top of the page. If there is a significant change, we will tell you in the app or by e-mail.

15. Contact

For any question: contact@indeliver.ma. Postal address: [address to be completed]. See also Support and Terms of use.