Privacy Policy
This policy explains what data GribLak processes, why, who it is shared with and how to exercise your rights, in line with Moroccan law no. 09-08 on the protection of personal data.
1. Data we collect
Account: name, phone, e-mail, photo, city and district, password (never stored in clear), or your Google, Facebook or Apple ID if you sign in that way. Artisans: trades, descriptions, indicative prices, service area and radius, availability. Requests: description, photos, place, urgency, steps and refusal reasons. The reviews and reports you give or receive. Technical data: the device's notification ID and the logs needed for security.
2. Location
The place of a request is used to find nearby artisans. When an artisan uses the app, their recent position is used to show their distance: it is rounded to about 500 m for clients and no longer used after 2 hours. When an artisan finishes a mission, the app compares their position with the place of the job: only the distance is kept.
3. How we use data
Creating and securing your account; showing and ranking nearby artisans; delivering requests and notifications (new request, artisan on a mission, reminder, expiry); applying the service rules (one mission at a time, expiry, checking the end of a job); handling reports and preventing fraud; answering your messages; producing overall statistics to improve the service.
4. What other users see
Before accepting, the artisan sees your district and the approximate distance. The exact address and phone number are only shared once the request is accepted. Clients see artisans' profiles: name, photo, trades, indicative prices, rating, reviews and distance. The identity of the person who reports is never given to the person reported.
5. Service providers
Some providers process data on our behalf: the host of our servers, Firebase (Google) for notifications, Google Maps for maps and addresses, Google, Facebook or Apple if you use them to sign in, and an e-mail sending service. Some are located outside Morocco. We do not sell your data.
6. How long we keep data
Finished, cancelled or expired requests leave your lists after 14 days, but stay in our records for security and disputes. Reports count for 90 days. When you delete your account, your access is removed at once and your profile is no longer visible; information linked to your past requests may be kept as long as needed for disputes and our legal obligations.
7. Security
Traffic with the app is encrypted, passwords are never stored in clear and access to data is limited to the team members who need it.
8. Your rights
You can access your data, correct it, object to some processing or ask for it to be deleted. Most of it can be changed in Profile > Personal information; for the rest, write to us. You can also contact the CNDP, Morocco's data protection authority.
9. Contact
For any question about your data, write to us at contact@griblak.com.