This Privacy Policy explains how Weelx collects, uses, stores, shares, and protects your personal data when you use the Weelx platform, whether as a Rider or a Driver. It applies to our mobile applications (iOS, Android, and HarmonyOS) and website (weelx.com). Please read this policy carefully. The French version follows the English version.
This policy is designed to comply with Moroccan Law No. 09-08 on the Protection of Personal Data, and takes into account principles aligned with the EU General Data Protection Regulation (GDPR) given that some of our users may be EU residents or visitors.
Article 1. Identity of the Data Controller
The data controller responsible for the processing of your personal data is:
STE CONCIERGE MOROCCO, operating under the trade name Weelx
Registered address: Angle Rue Loubnane et Rue Sourya, Imm Chems, Bureau 9, Appt 6, Guéliz, Marrakech, Morocco
Website: weelx.com
Email: [email protected]
Data Protection Contact: For any questions or requests relating to the processing of your personal data, you may contact our designated privacy contact at [email protected] or directly through the in-app support feature.
Article 2. Scope of This Policy
This Privacy Policy applies to all individuals who interact with Weelx’s services, including:
- Riders: individuals who use the Weelx app to book private transportation.
- Drivers: independent professionals who use the Weelx Driver app to receive ride requests.
- Website visitors: individuals who visit weelx.com.
This policy applies to the Weelx mobile applications available on iOS (Apple App Store), Android (Google Play Store), and HarmonyOS/Android (Huawei AppGallery), as well as the Weelx website (weelx.com).
This policy does not apply to third-party services or websites linked to from our Platform. We encourage you to review the privacy policies of any third-party services you access through or alongside the Weelx Platform.
Article 3. Personal Data We Collect – Riders
When you use the Weelx Rider App, we collect the following categories of personal data:
| Category | Data Collected | Purpose |
| Identity | Full name, email address, phone number | Account creation, booking confirmation, OTP authentication, receipts |
| Location | Precise GPS location (pickup, drop-off, real-time during ride) | Driver matching, navigation, ride tracking, safety monitoring |
| Payment | Card type, last 4 digits, billing details (processed by Stripe). For cash payments: transaction amount and payment method recorded | Payment processing — full card data is handled by Stripe, not stored by Weelx. Cash transaction records for accounting and compliance |
| Device | Device type, OS version, device ID, push notification token | App functionality, push notifications, fraud prevention |
| Usage | Booking history, ride frequency, app interactions, ratings given | Service improvement, analytics, personalisation |
| Communications | In-app support messages, feedback, complaints | Customer support, dispute resolution |
| Crash & Logs | Error logs, performance data | App stability and debugging |
We also collect data automatically when you use the app, including IP address, browser type (for web access), time and date of access, and app session data, for security and performance monitoring purposes.
We do not collect sensitive data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data from Riders.
Article 4. Personal Data We Collect – Drivers
When you register and operate as a Driver on the Weelx Platform, we collect the following categories of personal data:
| Category | Data Collected | Purpose |
| Identity | Full name, email address, phone number, profile photo | Account creation, dispatch, passenger-facing display, OTP authentication |
| Documents | Driver’s license number & expiry, transport authorization number, vehicle registration, insurance certificate | Eligibility verification, compliance monitoring |
| Vehicle | Vehicle make, model, year, registration plate, color | Passenger matching, in-app display, fleet management |
| Location | Precise GPS location — continuous while online or on trip | Dispatch algorithm, live driver tracking shown to passengers, safety monitoring |
| Financial | Bank account details for earnings payouts | Disbursement of earnings — handled via secure payout processor |
| Device | Device type, OS version, device ID, push token | App functionality, push notifications for ride requests |
| Performance | Trip history, acceptance rate, ratings received, cancellation rate | Quality monitoring, dispatch prioritisation, account review |
| Communications | In-app support messages, dispute submissions | Driver support, dispute resolution |
| Crash & Logs | Error logs, performance data | App stability and debugging |
Driver document data (license, insurance, vehicle registration) is collected for compliance and eligibility purposes and is stored securely. We do not share this data with passengers.
Article 5. Legal Bases for Processing
Performance of a Contract
Most of our processing is necessary to provide you with the Weelx service, booking rides, matching drivers, processing payments, and providing customer support. Without this processing, we cannot deliver the service.
Legitimate Interests
We process certain data based on our legitimate interests in operating a safe, quality, and reliable transport platform, including fraud prevention, platform security, driver rating management, and service improvement, where these interests are not overridden by your rights.
Legal Obligation
We may process your data to comply with applicable laws and regulations, including tax obligations, transport licensing requirements, and law enforcement requests.
Consent
Where we send you marketing communications or use non-essential analytics, we do so only with your prior consent. You may withdraw consent at any time by contacting us or adjusting your app settings.
Article 6. How We Use Your Personal Data
We use your data for the following purposes:
- Providing and improving the Weelx service: booking, dispatch, navigation, payment processing.
- Account management: registration, authentication (OTP), profile management.
- Safety and security: fraud detection, identity verification, incident investigation.
- Customer and driver support: responding to requests, resolving disputes, processing complaints.
- Quality assurance: rating systems, driver performance monitoring, service audits.
- Legal compliance: fulfilling tax, transport licensing, and regulatory obligations.
- Communications: sending booking confirmations, receipts, service updates, and (with consent) promotional messages.
- Analytics: understanding how the Platform is used to improve features and user experience. We use aggregated and anonymized data where possible for this purpose.
We do not use your data for automated decision-making that produces legal or similarly significant effects without human review.
Article 7. Location Data – Special Notice
Location data is central to how Weelx works. We collect and process location data differently depending on your role:
Riders
We collect your precise location when you open the app to set your pickup point, and during the ride to track progress and share your position with your Driver. We do not collect your location in the background when the app is closed or when you do not have an active booking.
Drivers
We collect your precise location continuously while you are online (available for rides) or on an active trip. This is essential for the dispatch system to match you with nearby Riders, and for Riders to track your approach in real time. Location collection stops when you go offline in the Driver App.
Your location data during rides is retained for a limited period for safety, dispute resolution, and legal compliance purposes. It is not sold or shared with third parties for advertising.
You may revoke location permission at any time through your device settings. However, revoking location access will prevent core app functions from working (booking and tracking are not possible without location data).
Article 8. Sharing Your Personal Data
Weelx does not sell your personal data. We do not share your data with third parties for their own advertising or marketing purposes.
Between Riders and Drivers
When a ride is matched, limited profile information is shared between the Rider and Driver to enable the trip: the Driver sees the Rider’s first name and pickup location; the Rider sees the Driver’s first name, photo, vehicle details, and rating. Phone numbers are shared only when a call is initiated through the app’s calling feature.
Service Providers and Sub-processors
We share data with trusted third-party service providers who process it on our behalf under strict data processing agreements. All service providers are contractually prohibited from using your data for their own purposes or selling it to third parties. Our current sub-processors are:
- Stripe: payment processing (PCI-DSS compliant). Privacy policy: stripe.com/privacy.
- Twilio / WhatsApp Business API: OTP authentication and notifications.
- Google Maps Platform: mapping, routing, and geocoding.
- Amazon Web Services (AWS): cloud infrastructure, secure hosting, and data storage. Data is hosted in AWS data centres with industry-standard security certifications (SOC 2, ISO 27001).
- Firebase (Google): push notifications, crash reporting, and app performance monitoring.
- Google Analytics: aggregated and anonymized usage analytics to understand how the Platform is used and to improve service quality.
App Store Platforms
When you download and use the Weelx application, the app store platform through which you obtained the app (Apple App Store, Google Play Store, or Huawei AppGallery) may independently collect certain data in accordance with their own privacy policies, including app download records, crash reports, and basic usage statistics. This data collection is governed by the respective platform’s privacy policy and is outside Weelx’s control.
Legal and Safety Disclosures
We may disclose personal data to law enforcement, regulatory authorities, or courts when required to do so by applicable law, court order, or legal process, or when we have a good-faith belief that disclosure is necessary to protect the safety of any person, prevent fraud, or protect our legal rights.
Business Transfers
In the event of a merger, acquisition, or sale of all or part of our assets, your data may be transferred to the acquiring entity. We will notify affected users in advance where required by law.
Article 9. Data Retention
We retain your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general retention periods are:
- Account data: Retained for the duration of your account, plus 5 years after closure for legal compliance purposes.
- Trip and transaction records: Retained for 10 years to satisfy Moroccan tax and transport record-keeping requirements.
- Location data from rides: Retained for 12 months, then anonymized or deleted.
- Support communications: Retained for 3 years from the date of the last interaction.
- Document data (Drivers only: license, insurance): Retained for the duration of the Driver relationship, plus 2 years.
- Marketing consent records: Retained for 3 years from the date of last consent or withdrawal.
When data is no longer needed, we securely delete or anonymize it. You may also request deletion of your data at any time (see Article 11. Your Rights).
Article 10. Security of Your Data
We take the security of your personal data seriously and implement appropriate technical and organizational measures to protect it against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit using TLS/HTTPS across all Platform communications.
- Encrypted storage for sensitive data fields (payment tokens, government document references).
- Access controls: personal data is accessible only to Weelx staff who need it to perform their role, under strict confidentiality obligations.
- Regular security reviews and updates to our infrastructure and application code.
- OTP-based authentication to prevent unauthorized account access.
- Hosting on AWS infrastructure with SOC 2 and ISO 27001 certifications.
While we take all reasonable precautions, no system is completely secure. In the event of a data breach that is likely to result in risk to your rights and freedoms, we will notify you and the relevant authorities (including the CNDP in Morocco) without undue delay, and in any event within 72 hours of becoming aware of the breach where feasible, in accordance with applicable law.
Article 11. Your Rights
Under applicable data protection law, including Moroccan Law No. 09-08 and, where applicable, the EU GDPR, you have the following rights regarding your personal data:
| Right | What it means |
| Right of Access | Request a copy of all personal data we hold about you. |
| Right of Rectification | Request correction of inaccurate or incomplete data. |
| Right of Erasure | Request deletion of your personal data, subject to legal retention obligations. |
| Right to Restrict | Ask us to limit how we process your data in certain circumstances. |
| Right to Portability | Receive your data in a structured, machine-readable format. |
| Right to Object | Object to processing based on legitimate interests or for direct marketing. |
| Right to Withdraw Consent | Withdraw consent at any time where processing is consent-based (e.g. marketing emails). Withdrawal does not affect past processing. |
To exercise any of these rights, please contact us at [email protected] or through the in-app support feature. We will respond to your request within 30 days. In complex cases, we may extend this period by a further 30 days, and will notify you accordingly.
We may need to verify your identity before processing your request. We will not charge a fee for exercising your rights unless your request is manifestly unfounded or excessive.
You also have the right to lodge a complaint with the competent data protection authority. In Morocco, this is the Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP) at cndp.ma. EU residents may also contact their national data protection authority.
Article 12. Cookies, Tracking Technologies, and Advertising Identifiers
Our mobile applications do not use browser cookies. However, we use equivalent technologies including:
- Device identifiers: to recognize your device for push notifications and security purposes.
- Firebase SDK: for crash reporting, performance monitoring, and push notification delivery.
- Google Analytics SDK: to collect anonymized usage statistics for service improvement.
- Session tokens: to maintain your login session securely.
Our website (weelx.com) may use cookies for analytics and functional purposes. A cookie consent banner is displayed on first visit, and you may manage your preferences at any time through the site’s cookie settings.
Advertising Identifiers and Tracking
Weelx does not track users across third-party apps or websites for advertising purposes. We do not use the Apple Identifier for Advertisers (IDFA) or Google Advertising ID for targeted advertising, retargeting, or ad measurement. We do not share user data with data brokers or advertising networks.
On iOS devices, if the AppTrackingTransparency (ATT) prompt is presented, Weelx will respect your choice. Denying tracking permission will not affect the functionality of the Weelx app, as we do not rely on cross-app tracking for our service.
Article 13. International Data Transfers
Some of our service providers are based outside Morocco and may process your data in other countries. Specifically:
- Stripe: payment data may be processed in the United States and the European Union.
- Amazon Web Services (AWS): data is hosted in AWS data centres; the primary hosting region is selected to comply with applicable data residency requirements.
- Twilio: OTP and notification data may be processed in the United States.
- Google (Maps, Firebase, Analytics): data may be processed in the United States and other countries where Google operates.
When we transfer personal data internationally, we ensure that appropriate safeguards are in place, such as standard contractual clauses, processor agreements compliant with applicable data protection law, or adequacy decisions where applicable.
By using the Weelx Platform, you acknowledge that your data may be transferred to and processed in countries other than your country of residence.
Article 14. Children’s Privacy
The Weelx Platform is intended for users aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately at [email protected] and we will delete the data promptly.
Article 15. Registration and Regulatory Compliance
Weelx is committed to full compliance with Moroccan Law No. 09-08 on the Protection of Personal Data.
Weelx also takes into account principles aligned with the EU General Data Protection Regulation (GDPR), given that some of our users may be EU residents or visitors.
Article 16. App Store Privacy Disclosures
Weelx provides privacy disclosures on each app store platform where the application is available:
- Apple App Store: App Privacy Labels (“nutrition labels”) are completed in App Store Connect and accurately reflect the data collection and usage practices described in this Privacy Policy.
- Google Play Store: The Data Safety section is completed in Play Console and is consistent with the disclosures in this Privacy Policy.
- Huawei AppGallery: Privacy disclosures are provided in AppGallery Connect in accordance with Huawei’s privacy requirements.
In the event of any discrepancy between the app store privacy disclosures and this Privacy Policy, this Privacy Policy shall prevail as the comprehensive and authoritative statement of our data practices.
Article 17. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or applicable law. When we make material changes, we will notify you via the app, by email to your registered address, or by posting the updated policy at weelx.com/privacy with a revised effective date.
Your continued use of the Platform after the effective date of the updated policy constitutes your acceptance of the changes. If you do not agree with the changes, you should stop using the Platform and delete your account.
Article 18. Contact and Complaints
For any questions, requests, or complaints regarding this Privacy Policy or the processing of your personal data, please contact us:
Email: [email protected]
In-app: Support feature in the Weelx Rider or Driver app
Website: weelx.com/privacy
Postal: STE CONCIERGE MOROCCO, Angle Rue Loubnane et Rue Sourya, Imm Chems, Bureau 9, Appt 6, Guéliz, Marrakech, Morocco If you are not satisfied with our response, you have the right to lodge a complaint with the CNDP (Morocco) at cndp.ma, or, if you are an EU resident, with your national data protection authority.