Karizma Pay Commerçant — Privacy policy
App of the shops — iPhone and Android
In short. Karizma Pay Commerçant lets a shop in Morocco sell its own gift cards and take them in its stores, from the phones of its sellers. We use the data only to run the app, to keep it secure and to answer you. No advertising, no tracking across apps, no sale of data.
Who is responsible
KARIZMA CONSEIL SARL, Florida Centre Park 2, lot 6, 4th floor, office 34, Sidi Maârouf, 20520 Casablanca, Morocco — publisher of the app. The shop is responsible for the data of its customers that it types in the app (name and mobile of the person who receives a card). Contact: support@karizma.ma — +212 522 103 925.
What we process
| Information | Why | Who receives it |
|---|---|---|
| Account of the shop: first and last name, business e-mail, mobile, company name, city, ICE (optional) | To create the account of the shop and its merchant space | Karizma |
| Phones of the shop: name of the seller, role, stores, mobile (optional) | To pair each phone and give it its rights | Karizma; the administrators of the shop |
| Gift cards sold: amount, validity, name and mobile of the person who receives it (optional), message | To create the card and let it be spent in the shop's stores | Karizma; the shop |
| Uses of a card: date, amount, store, seller | To lower the balance of the card, show the sales to the shop, prove each use | Karizma; the shop |
| Device: device identifier, a public key created on the phone, platform and app version, push notification token | To recognise the phone, secure each action and send notifications | Karizma; Apple or Google (and Expo) only to deliver notifications |
| Security logs: dates, IP address, actions | Security, fraud prevention, proof of actions | Karizma |
On the phone
- Camera: to scan the gift card of a customer and the pairing QR code — only on these screens. No photo is kept.
- Sign-in tokens and the device key are kept in the phone's secure storage (iOS Keychain, Android Keystore).
The app does not use the location, the contacts nor the microphone, contains no advertising, no analytics and no crash-reporting component, and does not track anyone across apps or websites.
Where the data is kept
Karizma's servers run on a cloud infrastructure (Google Cloud). The notification services (Apple, Google, Expo) may process the notification outside Morocco; these transfers are made under the conditions of law 09-08.
How long
- Account of the shop, phones and cards: as long as the account is open, then deleted when it is closed, except what the law requires to keep.
- Uses of the cards, security and audit logs: up to 10 years.
- Notification tokens: until the phone is removed.
Deleting an account
- Account of the shop: in the app, Account › Delete the merchant account (phone of an administrator), then confirm. Our team settles the cards still valid with the shop and confirms the deletion by e-mail.
- Without a paired phone (for example after « Create my merchant account »): write to support@karizma.ma from the e-mail of the account, with the name of the shop. The deletion is confirmed within 30 days.
- A phone of the shop: an administrator removes it in the merchant space (Phones), or the seller signs out in the app.
Your rights
Under Moroccan law 09-08 you can ask to access, correct, delete or object to the processing of your data by writing to support@karizma.ma. You can also contact the CNDP (Commission nationale de contrôle de la protection des données à caractère personnel).
Age
Karizma Pay Commerçant is reserved for professionals and adults (18 and over).
Changes
A later version will let the shops that wish take the gift cards of companies, paid on a payment account offered with Chari Money, a payment institution licensed by Bank Al-Maghrib, once Bank Al-Maghrib has authorised this service. The current version contains no payment feature: the shop's own cards only, no money moves through the app. Before it opens, this policy will be updated and the change shown in the app before it applies.
Last updated: November 2, 2026