Karizma ERP — Privacy policy
Mobile app for your organisation’s Odoo — iPhone and Android
In short. Karizma ERP lets you use the Odoo your organisation already runs. Nothing you do in the app is sent to Karizma. The app connects only to the Odoo address you type in. It contains no advertising, no analytics, no crash-reporting service and no tracking, and it does not use push notifications.
What the app handles
| Information | Why | Where it goes | What stays on your phone |
|---|---|---|---|
| Your sign-in: email or login, password, user ID | To sign you in to your Odoo | To your Odoo server only, over HTTPS | The password, in your phone’s secure storage (iOS Keychain, Android Keystore). The address, database and account name of each Odoo you added, in the app’s private storage. Both are removed when you sign out of that Odoo |
| What your Odoo shows you: apps, activities, records, messages, attachments | To display it | It comes from your Odoo server. The app does not pass it anywhere else | A copy of the lists the app last loaded (your apps and activities), so it can show them offline together with the date they were last updated. Removed when you sign out |
| Photos, files, voice messages and barcodes you choose to add or scan | Only when you use that feature in Odoo | To your Odoo server only | Nothing is kept by the app after it is sent. Files you choose to download are saved on your phone |
| Fingerprint or face recognition | An optional lock for the app | It never leaves your phone: your phone’s system does the check and tells the app only “yes” or “no” | Nothing |
Permissions
The app asks only at the moment you use a feature, and you can refuse.
- Camera: take a photo to attach, or scan a barcode, in Odoo.
- Microphone: record a voice message in Odoo’s chat.
- Photos and files: choose something to attach.
- Face ID or fingerprint: unlock the app, if you turn that on.
The app does not use your location or your contacts, and it sends no notifications.
What Karizma does not do
- It does not sell, rent or share your data.
- It shows no advertising, does not track you across apps and builds no profile of you.
- It has no analytics component and no crash-reporting component inside the app.
- No Karizma server is involved when you use the app.
Apple and Google may give us anonymous, aggregated usage or crash figures through their store tools if you have allowed that in your phone’s settings. We receive nothing from the app itself.
Your Odoo server
The data you work on belongs to your organisation. It is stored and processed by the Odoo server your organisation runs, or has chosen. Your organisation’s own policy governs that data; to see, correct or delete it, ask your Odoo administrator. Karizma has no access to it through this app.
The app shows your Odoo’s pages with your phone’s own web component. On Android, that system component can contact its vendor (Google) for system services such as form autofill. That is part of the phone, not something the app sends.
Security
- HTTPS only: the app refuses to connect without it and never skips a certificate check.
- Your password is kept in your phone’s secure storage and nowhere else.
- Signing out removes your password and the stored sign-in details from the phone, and ends your session on your Odoo.
- If your Odoo uses two-factor authentication and you ask it to remember this phone, Odoo’s own cookie stays on the phone until you choose “Forget this phone” in the app’s Settings.
Keeping and deleting
Karizma keeps nothing from this app. On your phone, signing out removes your sign-in and the saved lists, and uninstalling the app removes everything it stored. The app does not create accounts: accounts are created and removed by your organisation’s Odoo administrator.
Children
Karizma ERP is not intended for anyone under 16.
Questions
Write to contact@karizma.ma.
Last updated: October 15, 2026