PRIVACY POLICY

0. Introduction

Wydad AC SA, Wydad AC Association, and Ownership Generation B.V. (hereinafter “Wydad,” “we,” “us,” or “our,” depending on the context) collaborate to develop and operate the Wydad Fan Engagement App (the “Wydadi App”) and related websites (the “Wydad Website(s)”), as well as other services accessible through these platforms (the “Services”).

1. For iOS/Apple App Store users, the Wydadi App is published under the developer account of Ownership Generation B.V.
   
2. For Android/Google Play Store users, the Wydadi App is published under the developer account of Wydad AC.
   
   

This Privacy Policy describes how we collect, use, and share your personal data. By using the Wydadi App, visiting the Wydad Website(s), or subscribing to our Services, you acknowledge that you have read and understand this Privacy Policy and agree to how we process your personal data. If you have any questions, please contact us at app@wydadac.com.

Note (Age Requirement): You must be at least 13 years old to use the Wydadi App. If you are under 13, please do not use our Services or provide any personal data to us.

Applicability of Moroccan Law & International Regulations

We operate under Moroccan Law 09-08 on the protection of individuals regarding the processing of personal data. Since we welcome a global audience, we also aim to align with key international data protection standards (e.g., EU GDPR) to the extent they apply to our Services.

1. Processing Personal Data to Provide Our Services

1.1 Whose personal data do we process?

We process the personal data of anyone who:

• Creates an account on the Wydadi App.
  
• Uses the App’s features (e.g., challenges, points, rewards).
  
• Subscribes to our membership or paid features through an external landing page.
  
• Interacts with our Services (e.g., via the Wydad Website(s)).
  
  

1.2 Which categories of data do we collect, and how do we collect them?

We collect personal data:

1. Directly from you when you register an account or update your profile details.
   
2. From external subscription/payment pages, where you provide personal and billing details, then gain access to the App via your email.
   
3. Through the Wydadi App (e.g., usage data, challenges completed, points earned).
   
4. From device permissions (camera, microphone, location) if you grant us explicit access. You can revoke these permissions at any time via your device settings.
   
   

Typical data we collect:

• Profile Details: Full name, email address, birth date, gender, phone number, address, preferred language.
  
• Subscription & Payment Info: Billing details, transaction IDs, or partial payment info (handled securely, typically by a third-party payment processor).
  
• App Activity: Challenges completed, rewards redeemed, progress levels, user interactions within the community or leaderboards.
  
• Location Data (optional): If enabled, used to personalize content and local offers.
  
• Camera/Media (optional): For profile pictures, scanning codes, or other in-app features requiring imagery.
  
  

1.3 Why do we collect your data?

We process your data for the following purposes:

1. a) Account Creation & Verification: Registering, verifying, and managing your user account.
   b) User Profile & Preferences: Storing and displaying your chosen profile details (name, photo, etc.).
   c) Core App Functionality: Facilitating challenges, points, leaderboards, and community engagement.
   d) Subscription & Payment: Handling subscription fees, renewals, and cancellations (processed primarily on an external website).
   e) Marketing & Communications: Sending updates, newsletters, challenge notifications, and relevant promotions.
   f) Technical Support & Problem-Solving: Identifying and fixing bugs, resolving user complaints.
   g) Security & Fraud Prevention: Detecting and preventing misuse, fraud, or suspicious activities.

1.4 What is our legal basis for processing your data?

• Contractual Necessity: Many processing activities (a, b, c, d) are required to fulfill our contract with you (i.e., provide the App’s services).
  
• Consent: We rely on your consent for specific data uses, such as camera, location services, marketing communications, or any special categories of data. You may withdraw consent at any time.
  
• Legitimate Interests: For certain communications (e) or security measures (f, g), we rely on our legitimate interests to ensure effective platform functionality and user protection.
  
• Compliance with Local & International Law: We comply with Moroccan Law 09-08 and, where applicable, EU GDPR obligations regarding data transfers, individual rights, etc.
  
  

1.5 How long do we keep your personal data?

We store your personal data as long as your account remains active or until you request deletion. 

1.6 Request for Deletion of Personal Data

Users have the right to request the deletion of their personal data. This can be done directly through the platform by navigating to the Member > Settings section, where a “Delete Account” button is available. Upon initiating this request, the user's account and associated personal data will be permanently removed from our systems, in accordance with applicable data protection regulations.

2. Partner Advertisements & Promotions

2.1 Whose data do we process?

We process the data of users who have opted in or consented to receive offers from our official partners.

2.2 Which categories of data do we collect, and how?

Typically, your name, email address, and any necessary data to personalize partner promotions (e.g., your completed challenges or level tier).

2.3 Why do we process your data?

If you earn or redeem points for partner products (e.g., sponsor rewards or discount codes), the partner may wish to inform you about similar products or future offers. We only share your data with these partners if you have explicitly consented.

3. Processing Personal Data for Analytics & Improvement

3.1 Whose data do we process?

Anyone who uses the Wydadi App or visits the Wydad Website(s).

3.2 Which categories of data do we collect, and how?

We may deploy standard analytics tools (e.g., Google Analytics). These tools collect:

• IP address
  
• Device IDs
  
• Website/App usage patterns
  
• Cookie identifiers (if applicable)
  
  

This collection only happens if you accept cookies or similar tracking on our websites. Data shared with analytics providers are typically aggregated and anonymized before we review them.

3.3 Why do we process these data?

To track user interactions, understand usage trends, assess the effectiveness of marketing campaigns, and improve or optimize the Wydadi App and Wydad Websites.

3.4 Legal basis

• Consent: For non-essential analytics and cookies.
  
• Legitimate Interests: To maintain and improve our services. You can opt out at any time by adjusting your cookie preferences or app settings.
  

4. Processing Personal Data for Personalized Advertising

4.1 General

We may show you ads in the Wydadi App or on the Wydad Website(s) that are relevant to your interests based on in-app behavior or your browsing history.

4.2 Whose data do we process?

Anyone who visits the Wydad Website(s) or uses the Wydadi App (and has accepted ad cookies or in-app advertising tracking).

4.3 Which categories of data do we collect?

• IP address
  
• Device IDs
  
• Interaction data (e.g., ads viewed or clicked)
  
• Other relevant usage data for ad personalization
  
  

4.4 Why do we process your data?

To serve you more relevant ads and to measure ad performance, sometimes involving profiling to tailor promotions to what we think may interest you.

4.5 Legal basis

Consent. You can withdraw or modify this consent at any time (e.g., via your device’s privacy settings or by emailing us).

5. Processing Personal Data to Handle User Inquiries

5.1 Whose data do we process?

Anyone who contacts us with a question, complaint, or other inquiry.

5.2 Which categories of data do we collect?

Any personal data you provide, such as your name, email address, or the content of your messages.

5.3 Why do we process your data?

To respond to and resolve your inquiries, improve our services, and maintain user satisfaction.

5.4 Legal basis

Our legitimate interest in providing effective support and maintaining trust with our community.

5.5 Retention period

We generally keep records of inquiries for up to two years after resolution, unless required to keep them longer by law or if we need them for legal disputes.

6. Sharing Your Personal Data

In accordance with Moroccan Law 09-08 and, where applicable, EU GDPR, we only share data with third parties that adhere to comparable data protection standards.

6.1 IT Support & Data Hosting

We rely on external vendors for hosting, data storage, and IT services. These providers may have limited access to personal data to maintain or troubleshoot services.

• Purpose: Ensure stable data storage, fix technical issues, prevent fraud.
  
• Data shared: Data in our App/website databases, only as necessary to perform these tasks.
  
  

6.2 Other Wydadi App Users

If you opt in, certain details (e.g., your display name, level, or public achievements) might be visible to other Wydadi App users (e.g., in leaderboards or community features).

6.3 Analytics & Advertising

We may share anonymized or pseudonymized usage data with third-party analytics or advertising providers (e.g., Google Analytics, AdMob) if you have consented to tracking or personalized ads.

6.4 International Data Transfers

If data are transferred outside Morocco (or the EU), we ensure adequate safeguards are in place, such as Standard Contractual Clauses. If you have questions about our data transfer mechanisms, contact us at app@wydadac.ma.

6.5 Partner Promotions

We only share your personal data with official Wydad partners if you have provided explicit consent (e.g., to receive partner offers or newsletters).

7. How We Protect Your Personal Data

We take reasonable, industry-standard measures (e.g., encryption, secure servers, restricted access) to safeguard personal data from unauthorized access or misuse. While no system is foolproof, we regularly review our security procedures to remain compliant with Moroccan Law 09-08 and other relevant regulations.

8. Your Rights

Under Moroccan Law 09-08, and where applicable EU GDPR or other international privacy laws, you may have the right to:

1. Access: Request copies of personal data we hold about you.
   
2. Rectify: Correct inaccurate or incomplete data.
   
3. Erase: Ask us to delete data when no longer necessary.
   
4. Restrict: Limit certain data uses in specific circumstances.
   
5. Object: Object to processing based on legitimate interests or for direct marketing.
   
6. Data Portability: Receive a digital copy of certain data to transfer to another service.
   
7. Withdraw Consent: If processing is based on consent, you can revoke it anytime without affecting prior lawful processing.
   
8. Complain: File a complaint with the Moroccan data protection authority (CNDP) or another relevant supervisory authority if you believe your rights are infringed.
   
   

To exercise these rights, please email us at app@wydadac.ma. We will respond within the timeline required by law.

9. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy from time to time to reflect changes in technology, legal requirements, or our business operations. If we make significant changes, we will notify you via the Wydadi App, the Wydad Website(s), or by email. By continuing to use our Services after any such updates, you accept the revised Policy.

10. Contact Information

If you have questions or requests regarding this Privacy Policy or how we process your personal data, please contact us at: app@wydadac.ma

Wydad Athletic Club SA
Email: app@wydadac.ma