Khydmati

Privacy Policy

Last updated: [TODO: insert reviewed publish date]

This Privacy Policy explains how Khydmati SARL ("Khydmati", "we", "us") collects, uses, and protects information when you use the Khydmati mobile app and website (together, the "Service") to post or fulfil home-cleaning requests in Morocco.

1. Introduction & scope

This policy applies to householders posting cleaning demands, cleaners bidding on and completing jobs, and visitors to our marketing site. By using the Service, you agree to the collection and use of information as described here.

If you do not agree with this policy, please do not use the Service. We may update this policy from time to time — see "Changes to this policy" below.

2. What data we collect

Account information: name, phone number, email address, profile photo, and language preference.

Identity verification data: for cleaners, a photo of your national ID (CIN) and a biometric face scan captured during onboarding.

Location & address data: the city, neighborhood, and address details needed to match demands with cleaners and to route a cleaner to a job.

Payment details: invoice records and, where applicable, bank transfer details needed to reconcile payouts. Khydmati does not store full card numbers.

In-app communications: messages exchanged between householders and cleaners once a deal is confirmed, and any photos uploaded as proof of job completion.

Device & usage data: device type, app version, crash logs, and general usage analytics collected to keep the Service reliable.

3. Why we collect it

To match householder demands with available, verified cleaners and to operate the bidding and deal-confirmation flow.

To run our Know Your Customer (KYC) and trust & safety checks, so that only verified cleaners can bid on jobs.

To generate invoices, process commissions, and facilitate payouts to cleaners.

To provide customer support and investigate disputes between householders and cleaners.

To maintain, secure, and improve the Service, including diagnosing technical issues.

4. How verification data is handled

ID and biometric face-match data is core to Khydmati's trust model, and we treat it as sensitive data with additional protection beyond our other data categories.

Verification data is processed by us and by a dedicated third-party KYC/verification provider solely to confirm a cleaner's identity before their profile is allowed to bid. It is not used for any other purpose, such as advertising.

Access to raw verification submissions is restricted to a limited manual review team and is logged. Where technically feasible, biometric templates are stored in encrypted form separate from other account data.

Verification data is retained only for as long as needed for trust & safety and legal purposes, as described in "Data retention" below.

5. Data sharing

We do not sell your personal data.

We share data only with: payment processors, to facilitate invoicing and payouts; our KYC/identity verification provider, to perform ID and biometric checks; and, where a job is confirmed, the other party to that deal (e.g. a householder sees the cleaner's verified profile, and vice versa).

We may also disclose data where required by law, regulation, or a valid legal process, or to protect the rights, safety, or property of Khydmati, our users, or the public.

6. User rights

Depending on applicable Moroccan data protection law, you may have the right to access the personal data we hold about you, request correction of inaccurate data, and request deletion of your data, subject to legal or legitimate business retention needs.

To exercise these rights, contact us using the details in "Contact information" below. We will respond within a reasonable timeframe and may need to verify your identity before acting on a request.

7. Data retention

We retain account and transaction data for as long as your account is active and for a reasonable period afterward to meet legal, accounting, and dispute-resolution obligations.

Verification data (ID documents and biometric face-match records) is retained only as long as necessary for trust & safety and applicable legal requirements, after which it is deleted or irreversibly anonymized.

8. Cookies & tracking on this site

The Khydmati marketing website may use essential cookies to remember basic preferences (such as language) and limited analytics cookies to understand how visitors use the site. These are not used to build advertising profiles.

You can control cookies through your browser settings. Disabling cookies may affect some site functionality.

9. Children's privacy

The Service is intended for users who are at least 18 years old, as both posting cleaning demands and bidding as a cleaner involve contractual and financial responsibility. We do not knowingly collect personal data from children.

10. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to the Service or our data practices. We will update the "Last updated" date above when we do, and we encourage you to review this page periodically.

11. Contact information

If you have questions about this Privacy Policy or how your data is handled, contact us at services@craftworks.ma.