Azul Agadir Privacy Policy

1. Introduction

Welcome to Azul Agadir ("we," "our," or "us"). We are committed to protecting your privacy and ensuring you have a positive experience when using our mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App.

By using the Azul Agadir app, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

We may collect information that you voluntarily provide when using the App, including:

• Photos and videos you take or upload
• Audio recordings you create
• Location data when you use location-based features
• Any other content you choose to share through the App

2.2 Automatically Collected Information

When you use the App, we may automatically collect certain information, including:

• Device Information: Device type, operating system, unique device identifiers
• Usage Data: How you interact with the App, features you use, time spent in the App
• Location Data: Approximate location when you use location-based features (with your permission)

2.3 Permissions We Request

The App may request the following permissions:

• Camera: To take photos and videos
• Microphone: To record audio messages
• Location: To find nearby places and attractions
• Storage/Media: To access photos and videos you want to share

You can deny any of these permissions, and the App will function without the corresponding features.

2.4 Push Notifications and Device Identifiers

When you opt in to receive notifications, the app registers a device token (FCM token on Android, APNs token on iOS) along with an anonymous guest identifier. This information is sent to our server over HTTPS and stored solely to deliver notifications about Agadir news and services.

• Data collected: device token, guest identifier, platform (iOS/Android), app version, preferred language.
• Purpose: delivery of push notifications about city news.
• Retention: kept until you uninstall the app, revoke the permission, or request deletion.
• Third parties: we use Firebase Cloud Messaging (Google) and Apple Push Notification Service to deliver messages. No data is sold or used for advertising.
• Your rights: you can disable notifications at any time in your device settings. To request deletion of your identifiers, contact us at support-azul-agadir@datastory.ma.

2.5 Artificial intelligence and data protection

Azul answers using artificial-intelligence models. The applicable framework rests on a distinction between two kinds of information, and that distinction governs every processing operation described below.

Public information

The vast majority of the information Azul handles is already public: tourism and institutional content, administrative registers, mobility information, places and businesses, the city's editorial content. Processing it with artificial-intelligence models exposes no personal data.

Personal data

Your personal data is stored in Morocco, on the platform's sovereign infrastructure. Artificial-intelligence processing is carried out by subcontractors bound by a data-processing agreement, which prohibits in particular any reuse of that data to train models.

Azul never asks you to provide personal data in the conversation. Procedures that require identification are directed to the channels intended for them, rather than handled in the exchange.

The guarantees that apply

• No use for training: data transmitted is not used to train suppliers' models.
• Minimisation: only the information needed for the answer is sent to an external service.
• Encryption: data is encrypted at rest and in transit across the whole chain.
• Contractual framework: a data-processing agreement accompanies each subcontractor's protection obligations.

The list of technical subcontractors involved is provided on request, at the address given at the end of this document.

Compliance

This processing falls within the framework of Law 09-08 on the protection of individuals with regard to the processing of personal data, and of the National Commission for the Control of Personal Data Protection (CNDP). Citizen data is stored in Morocco.

Your rights over the conversation

You can stop a conversation at any time or reset it. For any access, rectification or deletion request, write to support-azul-agadir@datastory.ma. The same address also receives error reports: if an answer from the assistant is inaccurate, write to us to report it.

2.6 Conversation channels and related processing

Azul is available on the web portal, in the mobile app and on WhatsApp. The processing described above is identical on all three; the following applies in addition.

• WhatsApp: when you write to Azul on WhatsApp, your phone number and the content of your messages pass through the third-party messaging service that carries the conversation, under that service's own terms. The framework described in this document then applies on the platform's side.
• Voice notes: a voice note is transcribed into text by a third-party service, then handled like a written message. The audio recording is not kept: it is deleted as soon as the transcription is returned.
• Shared location: the assistant asks for your location only when it needs it: a route with no starting point, a "near me" search. If you have allowed it in your browser or phone, it is attached to your messages during the conversation as the starting point. You can refuse it, turn it off at any time in your browser or phone settings, and always give an address instead.
• Photos: a photo sent in support of a report is kept with the corresponding request, for as long as the relevant department needs to handle it.
• History: a conversation is kept so you can pick it up where you left off. Only the text of your messages and of the answers is stored.

3. How We Use Your Information

We use the information we collect to:

• Provide and maintain the App's functionality
• Enable location-based services to help you find nearby places
• Allow you to take, store, and share photos and videos
• Enable audio recording features
• Improve and optimize the App's performance
• Analyze usage patterns to enhance user experience
• Respond to your requests and provide customer support

4. Data Sharing and Disclosure

4.1 Storage in Moroccan Sovereign Cloud

We do NOT share your personal data with external third-party analytics or cloud storage services. Your data is stored in a sovereign cloud hosted in Morocco, in accordance with Moroccan data protection legislation:

• Conversation history: Stored in a Moroccan sovereign cloud and locally on your device
• Photos and videos: Stored in a Moroccan sovereign cloud and locally on your device
• App preferences: Stored locally on your device

We do not use any third-party analytics services that would collect your personal data. All your personal data is hosted in a sovereign cloud in Morocco, ensuring compliance with Law 09-08 and CNDP supervision. Communications with our servers concern app features (restaurant searches, hotels, etc.) through our own backend API.

4.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities.

5. Data Security

We implement appropriate technical and organizational measures to protect your information:

• Encryption: All data transmitted between your device and our servers is encrypted using HTTPS/TLS
• Secure Storage: Data is stored in a sovereign cloud hosted in Morocco with encryption at rest
• No Cleartext Traffic: We do not allow unencrypted data transmission
• Access Controls: We limit access to your information to authorized personnel only
• Moroccan Sovereign Cloud: Your data is hosted in Morocco, in accordance with Moroccan data protection legislation

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your information only for as long as necessary to provide the App's services and fulfill the purposes outlined in this Privacy Policy:

• User Content: Stored in a Moroccan sovereign cloud and locally on your device until you delete it
• Analytics Data: Retained in aggregated, anonymized form in the sovereign cloud
• Location Data: Not stored persistently; used only during active sessions

You can request deletion of your data at any time by contacting us at the email address provided below. You can also delete local data by uninstalling the App or clearing the App's data through your device settings.

7. Your Rights and Choices

7.1 Access and Correction

You have the right to access and correct your personal information. Your data is stored in a sovereign cloud hosted in Morocco and locally on your device. You can request access to your data by contacting us at the email address provided below.

7.2 Deletion

You can request deletion of your data by:

• Uninstalling the App
• Clearing the App's data through device settings
• Contacting us at the email address provided below

7.3 Permission Management

You can manage App permissions through your device settings at any time. Revoking permissions may limit certain App features.

7.4 GDPR Rights (EU Users)

If you are located in the European Union, you have the following rights under GDPR:

• Right to access your personal data
• Right to rectify inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

To exercise these rights, please contact us using the information provided below.

7.5 Rights under Moroccan Law 09-08

In accordance with Law 09-08 on the protection of individuals with regard to the processing of personal data, you have the following rights:

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to object to the processing of your data
• Right to deletion of your data

To exercise these rights or file a complaint, you can also contact the CNDP (National Commission for the Control of Personal Data Protection):

8. Children's Privacy

The App is not intended for children under the age of 13 (or 16 in the EU). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately, and we will take steps to delete such information.

9. SDKs and Third-Party Libraries

The App uses the following libraries and plugins:

• Capacitor: Mobile application framework (open source)
• Capacitor Camera Plugin: Native access to device camera
• Capacitor Geolocation Plugin: Native access to device location
• Capacitor Filesystem Plugin: Native access to device file system
• AndroidX Libraries: Standard Android support libraries (open source)

These plugins are native interfaces to your device's features. They do not themselves send anything to a third-party service: what reaches the platform is what you choose to share, under the terms described in sections 2.5 and 2.6.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy in the App
• Updating the "Last Updated" date
• Providing in-app notifications for significant changes

You are advised to review this Privacy Policy periodically for any changes. Changes are effective when posted.

11. Consent

By using the App, you consent to our Privacy Policy and agree to its terms. If you do not agree with this policy, please do not use the App.

13. Governing Law and Compliance

This Privacy Policy is governed by and construed in accordance with applicable data protection laws:

• Law 09-08 on the protection of individuals with regard to the processing of personal data (Morocco)
• GDPR (General Data Protection Regulation) for users in the European Union
• CCPA (California Consumer Privacy Act) for users in California

As a Moroccan application, we primarily comply with Moroccan legislation on personal data protection and the supervision of the CNDP.