Privacy Policy

1. Data controller and scope

Asfar Sahraoui, a travel agency established in Casablanca, determines the purposes and means of the processing described in this policy.

This policy covers the Asfar Sahraoui mobile app and its related account and booking features. Where a practice applies only to the website, we identify it expressly.

2. Data we collect

• Account and contact details. Name, email address, phone number, verification status, and internal user ID. Email is used for code-based authentication, among other purposes, and the phone number is used to manage bookings operationally.

• Profile photo. The photo you select from your photo library. We do not upload the rest of your photo library.

• Bookings and travel preferences. Booked service, reference and status, dates, number of travelers and age ranges, hotel, room, meal plan, departure city and time, excursions, baggage, extras, requests, and remarks you enter.

• Payment. Selected payment method, amount, deposit, currency, payment status and, for an online website payment, the Payzone transaction ID. The mobile app does not collect payment card numbers or bank account payment credentials.

• Optional budget. An indicative amount you choose to provide when submitting a bespoke VIP travel request.

• Favorites and interactions. Items added to or removed from favorites, offer type and ID, save date, notification preferences, and events needed for booking history, such as creation, confirmation, or cancellation.

• Notifications and device. Expo push token, random per-install identifier, platform, app version, last-seen date, and active status. Once you sign in, these details are linked to your user ID so notifications reach the correct account. The random identifier is not Apple’s advertising identifier and is not used for advertising tracking.

• Sign in with Apple. A stable identifier supplied by Apple, identity token and, depending on your choice, your name and real email address or Apple private relay address. We never receive your Apple password.

• Communications and free-form content. One-time sign-in codes, transactional emails, support requests, and content you choose to enter in remarks or special-request fields.

• Technical data. IP addresses, request information, security logs, and limited technical data that our providers may process to route a request, secure the service, distribute an update, or diagnose an incident.

• Website only. The public website uses Google Analytics and Meta Pixel to measure its audience, page usage, and campaign effectiveness. These tools may process cookie identifiers, the IP address, browser or device information, viewed pages, and interactions. They are not integrated into the native mobile app.

3. Device permissions

• Photo library. Access is requested only when you want to create or replace your profile photo. The app does not request camera access. You may refuse access and use the app without a photo.

• Notifications. System permission is optional. You may withdraw it at any time in iOS or Android settings and manage notification categories in the app.

• Local secure storage. The session, selected language, and random installation identifier may be kept in secure storage on the device. Data that remains solely on the device is not sent to Asfar Sahraoui unless needed for a function described above.

4. Purposes and legal grounds

• Provide the service and perform your request. Create and secure the account, display the profile and favorites, prepare, confirm, change and track bookings, record the selected payment method, and provide customer service.

• Communicate with you. Send sign-in codes, confirmations, status changes, important travel information and, if enabled, promotional notifications.

• Measure the website and campaigns. On the website only, understand the audience and page usage, produce statistics, and measure campaign effectiveness using Google Analytics and Meta Pixel.

• Consent and optional choices. Your profile photo, photo-library access, and notifications depend on your choice. You may withdraw that choice without affecting processing that was already lawful.

• Legitimate interests. Prevent abuse and fraud, protect accounts, maintain service availability, resolve incidents, and improve the experience without cross-company advertising tracking.

• Legal obligations. Keep required accounting and transaction records, respond to legally valid requests, and establish, exercise, or defend our rights.

5. Sign in with Apple

Sign in with Apple is an optional sign-in method offered on iOS. Apple authenticates you and sends an identity token, an account identifier, and the information you agreed to share to our Convex authentication system. Apple may hide your email through its private relay service.

Apple generally provides your name only on the first authorization. You may instead sign in with your email and a one-time code. If you delete an account linked to Apple, recent Apple authentication is required and the authorization granted to Asfar Sahraoui is revoked before local deletion. Your Apple account is also governed by Apple’s terms and privacy policy.

6. Recipients and sharing

Only authorized members of our team, providers acting on our behalf, and partners necessary for your booking may access the data required for their role. We do not allow them to use that data for their own targeted advertising.

We may provide strictly necessary details to hotels, carriers, activity organizers, guides, insurers, or other suppliers selected to fulfill your booking. We may also disclose data to an authority, court, adviser, or insurer when legally required or needed to protect our rights.

7. Service providers we use

The providers below may process the data categories needed for the relevant service. Their own policies also describe their practices:

• Convex: cloud backend, database, authentication, profile-photo storage, bookings, favorites, and device registry.

• Expo (Expo Application Services): app updates and push-notification relay; Expo may process the push token, operating system, and random technical identifiers related to updates.

• Apple: Sign in with Apple, Apple Push Notification service (APNs), app distribution, and iOS system services.

• Google / Firebase: Firebase Cloud Messaging (FCM) to deliver Android notifications and Google Analytics to measure the website audience only.

• Meta / Facebook: Meta Pixel measures audience and campaign effectiveness on the website only and may receive cookie identifiers, the IP address, browser or device information, and page interactions. No Meta Pixel SDK is integrated into the native mobile app.

• Resend: delivery of sign-in codes and transactional emails, including the recipient address, message content, and delivery metadata.

• Payzone (Vantage Payment Systems): card payments offered on the website. Payzone directly collects card data; Asfar Sahraoui receives the transaction ID and status, not the full card number.

• WhatsApp (Meta): only when you choose to open WhatsApp to contact the agency or voluntarily send a message or receipt. You then leave our app, and WhatsApp’s rules apply.

8. International transfers

Some technology providers operate infrastructure or use subprocessors outside Morocco. Your data may therefore be processed in other countries, particularly for cloud hosting, email delivery, app updates, notifications, and website audience measurement.

We limit transferred data to what is necessary and rely on the applicable contractual commitments, security measures, and transfer mechanisms offered by our providers. You may ask us for more information about a specific transfer.

9. Retention periods

• Account, profile, and favorites. For the life of the account and until its deletion is processed, subject to the legal and technical exceptions below. The profile photo in active storage is deleted with the account; a backup copy may remain until the relevant backup cycle expires.

• Bookings and payments. While the booking is processed and supported, then in a restricted archive for periods needed to meet accounting, tax, contractual, evidentiary, and legal-claims requirements.

• Sign-in codes. A one-time code expires after 15 minutes. Limited delivery or security logs may be retained longer by our providers according to their contractual periods and applicable obligations.

• Push tokens and notification identifiers. Until notifications are disabled, you sign out, or the account is deleted. Devices not seen for 90 days are removed from our active registry.

• Technical logs, security, and backups. For a limited period proportionate to diagnostics, security, and service continuity. Backup copies are isolated from ordinary use and deleted or overwritten according to applicable technical cycles.

10. Account deletion and data retained afterwards

You can start deletion from Profile > Settings > Delete account. Explicit confirmation and recent authentication protect this action. If the account uses Sign in with Apple, the app also requests a new Apple authorization so it can be revoked. The profile and its photo, favorites, linked bookings and history events, sessions and authentication data, and notification registrations are then deleted from the active service.

Deleting the account does not necessarily erase records we must retain separately to meet an accounting, tax, or legal obligation, handle a dispute, prevent fraud, or prove a transaction. These may include a booking or transaction reference, amounts, dates, accounting records, proof of consent, or strictly necessary security logs.

An account-independent deletion log may retain dates, processing status, and aggregate counts of deleted records to prove that the request was completed. Other residual data is limited, protected, separated from the active account, and not used for promotions. It is deleted or anonymized when the relevant obligation expires. Copies may also remain temporarily in backups or with a provider until its deletion cycle ends.

A website booking made without an account cannot be found through the app’s account-deletion feature. Contact us with its reference to exercise your rights over that booking.

11. Your rights and choices

To protect your account, we may verify your identity and request information reasonably needed to locate the relevant data. Some requests may be limited where the law requires retention or protects another person’s rights.

• Access and copy. Ask whether we process your data and receive the information or copy to which you are entitled.

• Correction. Correct your name, phone number, and photo in your profile or ask us to correct other inaccurate data.

• Deletion, restriction, and objection. Ask us to delete or restrict processing and object to certain uses, subject to our obligations and compelling legitimate grounds.

• Portability. Where this right applies, receive data you provided in a structured and commonly used format.

• Withdraw consent. Withdraw a permission in device settings, disable notification categories in the app, or contact us.

• Complaint. Complain to the competent data protection authority, including Morocco’s National Commission for the Control of Personal Data Protection (CNDP).

12. Security, sale, and advertising tracking

We use appropriate technical and organizational safeguards, including encryption in transit, access controls, authentication, and data minimization. No system, however, can guarantee absolute security.

We do not sell your data, and the mobile app has no advertising SDK or mechanism intended to link your data with other companies’ data for targeted advertising or advertising measurement. The installation identifier and push token are used only for functionality, security, and notification delivery.

13. Changes to this policy

We may update this policy when our features, providers, or obligations change. The update date appears at the top of the page. For material changes, we will provide an appropriate notice in the app, on the website, or through another available channel.