Privacy Policy

1. Introduction

This Privacy Policy describes how the Karyo application and website (the "Platform"), published by CKK Labs, collect, use, share and protect your personal data. It is established in accordance with Law No. 09-08 on the protection of individuals with regard to the processing of personal data and with the rulings of the National Commission for the Control of Personal Data Protection (CNDP).

By using the Platform, you acknowledge this policy. Where the law requires it, your consent is obtained prior to processing.

2. Data controller

The data controller is the company CKK Labs, located in Casablanca, Morocco. For any question regarding your data or the exercise of your rights: [email protected].

3. Data we collect

We collect only the data necessary for the operation of the Platform:

Account data

• Phone number (verified by OTP code);
• First name, last name and/or display name;
• E-mail address (where applicable);
• Profile picture (where applicable);
• City and preferred language;
• Social login identifiers when you use "Sign in with Apple", Google or Facebook.

Listing-related data

• Content of the listings you publish (vehicle specifications, photos, price, description);
• Favourites, saved searches, alerts and search history.

Technical and usage data

• Installation identifier, device type, operating system, app version;
• Notification token (for sending push notifications);
• Usage and interaction data with the Platform (pages viewed, actions performed), for audience measurement and improvement;
• Technical logs and diagnostic data in the event of an error, for the stability and security of the service.

We do not collect your continuous geolocation: location is limited to the city you select. No banking data is collected by the Platform: no transaction or payment is carried out on Karyo.

4. Purposes and legal bases

We process your data for the following purposes:

• Providing the service: creating and managing your account, publishing and viewing listings, connecting users, alerts (performance of the service you request);
• Security and fraud prevention: OTP verification, abuse detection, content moderation (legitimate interest and security obligation);
• Improvement and audience measurement: usage statistics and analysis to improve the Platform (based on your consent, where required);
• Communication: notifications relating to the service and, where applicable, marketing communications (with your consent, revocable at any time);
• Compliance with legal obligations: retention of certain data where the law requires it and responding to requests from the competent authorities.

5. Cookies and trackers

To ensure the operation, security and improvement of the Platform, we use cookies and similar tracking technologies (in particular device identifiers):

• Necessary trackers: essential to the operation of the service. They do not require your consent.
• Audience-measurement, improvement and marketing trackers: used, where the law requires it, with your consent.

On the website, a consent banner allows you to accept or refuse non-essential trackers. In the app, you can manage your preferences in the settings, where this option is available. You may withdraw your consent at any time.

6. Sharing your data

Your data is neither sold nor rented. It may be shared:

• with other Users, strictly to the extent necessary for the connection (for example, the display name and the information you publish in a listing);
• with our technical service providers acting on our behalf (hosting, sending notifications, OTP by WhatsApp, audience measurement), bound by confidentiality and security commitments;
• with the competent authorities, where the law requires it or to assert our rights.

7. Transfers outside Morocco

Some of our service providers may be located abroad. In that case, any transfer of data outside Morocco is carried out in compliance with the conditions provided for by Law No. 09-08, ensuring an adequate level of protection for your data.

8. Retention period

Your data is retained for as long as your account is active. Upon deletion of your account, it is erased at the end of the grace period described on the "Delete my account" page, with the exception of data we are legally required to retain (accounting, legal, or for evidentiary and security purposes) for the period provided for by law.

9. Security

We implement reasonable technical and organisational measures to protect your data against any unauthorised access, loss, alteration or disclosure. As no transmission over the Internet is entirely secure, we cannot guarantee absolute security; you contribute to this security by protecting your credentials and your OTP codes.

10. Your rights

In accordance with Law No. 09-08, you have the following rights over your data:

• right of access: to know what data we hold about you;
• right of rectification: to correct inaccurate or incomplete data;
• right to object: to object, on legitimate grounds, to a processing operation, and to refuse direct marketing;
• right to erasure: to request the deletion of your data.

You may exercise these rights directly from the app (editing your profile, managing notifications, deleting your account) or by writing to us at [email protected]. You also have the right to lodge a complaint with the CNDP (www.cndp.ma).

11. Account deletion

You may delete your account and your data at any time. The detailed procedure is described on the "Delete my account" page.

12. Minors

The Platform is reserved for persons aged at least 18. We do not knowingly collect data relating to minors.

13. Changes

We may update this policy to reflect changes to the Platform or to regulations. In the event of a substantial change, you will be informed by an appropriate means.

14. Contact

For any question regarding your personal data, you may contact us:

• from the Karyo app, via the contact form;
• from the karyo.ma website, via the contact form;
• by e-mail at [email protected].

To exercise your rights (access, rectification, objection, erasure), we recommend that you write to us by e-mail at [email protected] to facilitate verification of your identity.

Last updated: June 2026.