1. Data controller

For users contracting in Morocco, the data controller is MEKSDIGITAL SA, subject to confirmation of its exact legal form, Commercial Register 51739, ICE 001865091000093, Tax ID 20732002, share capital MAD 117,400, registered office Maroc, support@boowme.com.

This policy explains what data is processed, why, with whom it may be shared, how long it is kept and users’ rights.

2. CNDP framework

Boowme states that the relevant processing is authorized by the Moroccan data protection authority (CNDP) under reference A-W-870/2025 and that the relevant data transfer is authorized under reference T-HB-251/2025.

Before publication, Boowme should confirm that these authorizations cover the current product scope, including Circles, verification evidence, sensitive data, Match Tests, Google Cloud and relevant international transfers.

3. Data we may collect

Depending on the features used, Boowme may process:

• account data: name or identifier, email, phone, date of birth, age, language and settings;
• profile data: photos, bio, sex/gender where offered, city or area, education, profession, interests, lifestyle, relationship intentions and user-selected information;
• preferences and Match Tests: values, life plans, habits, relationship preferences and compatibility answers;
• sensitive data where offered and lawfully authorized, including religious or philosophical beliefs;
• Circle verification data: verification photo, document or link such as LinkedIn, Strava or another source, verification status, date and result;
• technical and usage data: IP address, device/app identifiers, operating system, logs, interactions, diagnostics, security and analytics;
• messages, reports and support communications to the extent necessary for service delivery, safety, moderation or handling a request;
• subscription information received from Apple or Google, such as product, status, period or transaction identifier, without Boowme necessarily receiving full payment-card information;
• event and registration information where the user participates in a Boowme activity or event.

4. Purposes

Boowme processes data to provide, personalize, secure and improve the service, including to:

• create and manage accounts and profiles;
• recommend profiles, display compatibility and enable interactions;
• manage Circles, verify eligibility and display verification status;
• provide subscriptions, content, coaching and events;
• prevent fraud, abuse, harassment, spam, sexual exploitation and other prohibited use;
• handle reports, support requests and appeals;
• measure performance, fix errors and improve features;
• comply with legal, regulatory, accounting and security obligations.

5. Sensitive data and consent

Some answers may reveal religious or philosophical beliefs or other specially protected information. Where required, such processing is subject to the appropriate CNDP formality and to explicit, specific consent separate from general acceptance of the Terms.

Where processing relies on consent, users may withdraw that consent for the future, subject to processing required by law or necessary for establishing, exercising or defending legal claims.

6. Circle verification

Boowme may request evidence appropriate to the stated Circle eligibility criterion and applies data minimization.

After the verification decision, raw evidence is deleted as soon as reasonably practicable unless limited retention is required by law, dispute handling, fraud investigation or a safety incident. Boowme may retain a minimal verification status, check type, date and result for as long as needed for Circle access and safety.

7. Sources

Data comes mainly from the user, the user’s device and use of Boowme. Where a user chooses to provide an external link such as LinkedIn or Strava, Boowme accesses only information actually provided or authorized through the relevant mechanism. App stores may provide information required to administer purchases.

8. Recipients and processors

Data may be accessed on a need-to-know basis by authorized Boowme personnel and service providers supplying hosting, security, analytics, messaging, support, moderation or other technical services under appropriate contractual safeguards.

Coaches and Community Partners do not receive an exportable member database, private messages, verification evidence or complete Match Tests merely because they manage a community. They see only information exposed through standard Boowme features or expressly authorized for a specific service.

9. Hosting and international transfers

Boowme uses Google Cloud for hosting and technical services. The exact hosting region and key processor list must be documented and maintained.

Where data is hosted, accessed or transferred outside Morocco, Boowme applies safeguards and formalities required by Law 09-08 and applicable CNDP decisions. The relevant transfer is stated to be authorized under T-HB-251/2025; its scope should be confirmed against the current architecture.

10. Automated matching and recommendations

Boowme may use automated processing to rank or recommend profiles based on selected settings, compatibility, lifestyle, interests and usage signals. These tools personalize the experience and do not, by themselves, make legal or similarly significant decisions about users.

11. Retention

Data is kept only as long as needed for the purposes for which it was collected and is then deleted or anonymized unless law or a documented legitimate need requires retention.

Specific operational periods should be documented in an internal retention schedule. Verification evidence is generally deleted after the decision. After account closure, limited data may be retained for legal, accounting, fraud-prevention, safety and dispute-management purposes.

12. Security

Boowme applies proportionate technical and organizational measures, including access controls, authentication, logging, encryption where appropriate, backups, vulnerability management, least-privilege controls and incident procedures. No system is risk-free, and safeguards are adapted as threats evolve.

13. User rights

Subject to applicable legal conditions, users may exercise rights of access, rectification and objection and request other measures available under applicable law. Where processing is based on consent, consent may be withdrawn prospectively.

Requests can be sent to support@boowme.com with reasonable information needed to verify identity. Users may also contact the CNDP through its available procedures.

14. Marketing and notifications

Marketing communications are sent in accordance with applicable choices and legal bases. Users may unsubscribe from promotional communications or adjust available settings. Communications strictly necessary for transactions, safety or service operation may continue where justified.

15. Cookies, SDKs and analytics

The website and app may use cookies, SDKs, device identifiers and analytics tools for operation, security, audience measurement and, where permitted, marketing. Boowme maintains an up-to-date inventory of tools, purposes, retention and recipients and obtains consent where required.

16. Minors

Boowme is for persons aged 18 and over. If Boowme identifies a minor account, it may be suspended and data deleted subject to safety needs or legal obligations.

17. Changes

Boowme may update this policy to reflect changes in the service or law. Material changes will be communicated through an appropriate channel where required.

18. Contact