Karizma Pay — Privacy policy
Karizma Pay employee app — iPhone and Android
In short. Karizma Pay lets the employees of Karizma’s client companies in Morocco send expense reports, request leave and read their payslips and HR documents, as opened by their employer. We use your data only to run the app, to keep it secure and to answer you. No advertising, no tracking across apps, no sale of data.
Who is responsible
KARIZMA CONSEIL SARL, Florida Centre Park 2, lot 6, 4th floor, office 34, Sidi Maârouf, 20520 Casablanca, Morocco — publisher of the app, responsible for your Karizma Pay account. Your HR data (payslips, leave, expense reports, HR documents) is managed by your employer in its HR system; Karizma processes it on your employer’s behalf to show it to you. Contact: support@karizma.ma — +212 522 103 925.
What we process
| Information | Why | Who receives it |
|---|---|---|
| Identity and contact: name, mobile number, e-mail, employer, role | To create and secure your account, to send sign-in codes and notices | Karizma; your employer |
| HR data opened by your employer: payslips, leave balances and requests, HR documents and file, attendance | To show them to you and send your requests | Your employer (its HR system); Karizma as its processor |
| Expense reports and the receipts (photos or files) you add | To create and follow your expense reports; optional automatic reading (OCR) to pre-fill them | Your employer; Karizma. The OCR service is run by Karizma; the receipt is not kept there and the reading job is deleted after one day |
| Device: device identifier, a public key created on the phone, platform and app version, push notification token | To recognise your phone, secure sensitive actions and send notifications | Karizma; Apple or Google (and Expo) only to deliver notifications |
| Security logs: dates, IP address, actions on the account | Security, fraud prevention, proof of actions | Karizma |
| Support requests | To answer you | Karizma; your employer when the request concerns it |
On your phone
- Face ID or fingerprint: checked by your phone’s system only; the app receives “yes” or “no”, never your biometric data.
- Camera: photos of receipts and documents — only when you use these features.
- Photos and files: only those you choose to attach.
- Sign-in tokens and the device key are kept in the phone’s secure storage (iOS Keychain, Android Keystore).
The app does not use your location or your contacts, contains no advertising, no analytics and no crash-reporting component, and does not track you across apps or websites.
Where the data is kept
Karizma’s servers run on a cloud infrastructure (Google Cloud). The notification services (Apple, Google, Expo) may process the notification outside Morocco; these transfers are made under the conditions of law 09-08.
How long
- Account data: as long as the account is open, then deleted when it is closed, except security logs.
- Security and audit logs: up to 10 years.
- HR data: kept by your employer in its HR system, under its own rules.
- OCR reading jobs: 1 day. Notification tokens: until you sign out or the phone is removed. Notifications: about 13 months.
Deleting your account
- In the app: Menu › Delete my account (bottom of the screen), then confirm. If something still has to be settled with your account, our team handles it and confirms by e-mail.
- Or write to support@karizma.ma from the e-mail or phone number of the account.
Once the account is closed, your access, devices and notification tokens are removed.
Your rights
Under Moroccan law 09-08 you can ask to access, correct, delete or object to the processing of your data by writing to support@karizma.ma. For HR data, you can also contact your employer. You can also contact the CNDP (Commission nationale de contrôle de la protection des données à caractère personnel).
Age
Karizma Pay is reserved for adults (18 and over).
Changes
A later version will add a payment account (wallet) offered with Chari Money, a payment institution licensed by Bank Al-Maghrib, once Bank Al-Maghrib has authorised this service. The current version contains no payment feature. Before it opens, this policy will be updated (identity checks, payment operations, the role of Chari Money) and the change shown in the app before it applies.
Last updated: November 2, 2026