This is a courtesy translation. In case of discrepancy, the French version prevails.
Hello and welcome to the Safimeal Beta! Transparency is at the heart of our mission. Whether it concerns the composition of your food or your personal data, we want everything to be perfectly clear to you.
This Privacy Policy describes how Safimeal Solutions S.A.R.L A.U ("we", "our") collects, uses and protects your data when you use our website and our application during this closed beta phase.
1. Data controller
- Company name: SAFIMEAL SOLUTIONS S.A.R.L A.U
- Registered office: Boulevard Abdelmoumen, N°236, Rue Pasquier, Immeuble F8, 2ème étage, Bureau N°6, 20100 Casablanca, Maroc
- Contact: contact@safimeal.ma
- Legal compliance: our processing is authorised by the CNDP (the Moroccan National Commission for the Control of Personal Data Protection) under number A-S-545/2026, issued on 31 July 2026.
2. Data collected
To provide and ensure the proper operation of our services, we collect and process the following categories of data:
- Account information: e-mail address, phone number and name (optional).
- Application usage data: the products you scan, the items added to your digital inventory and your shopping lists.
- Sensitive health data: your allergies or intolerances. Because this data is highly personal, we only collect it if you tick the explicit consent (opt-in) box when registering.
- Technical data: device identifier and error reports to help us fix bugs during this beta phase.
3. Purposes of processing
- Account management: creation, administration, authentication and securing of your user profile.
- Decision support and prevention (scan and profile): analysing scanned or submitted products and alerting you when an allergen you have previously entered in your dietary profile is detected.
- Inventory management: tracking the expiry dates of your products and sending reminder notifications.
- Shopping management: creation, modification and synchronisation of your shopping lists (including real-time sharing with other users if you enable this feature).
4. Sharing and transfer of data
Safimeal formally undertakes not to sell, rent or commercialise your personal data to third parties. To guarantee the operation, availability and security of the Service, your data may be disclosed to our technical processors:
- Hosting and cloud infrastructure: data is hosted and processed on secure servers managed by leading international professional cloud service providers (in particular located within the European Union and subject to the GDPR).
- International transfers: transfers of data outside Moroccan territory are strictly governed by confidentiality and security agreements with our processors, and declared to the CNDP, which issued receipts T-HB-211/2026 (Google Cloud EMEA Limited, Ireland) and T-HB-212/2026 (Hetzner Online GmbH, Germany) on 31 July 2026. Both destinations are located in the European Union, recognised as providing an adequate level of protection.
5. Retention period
- Account and usage data: retained for as long as your account remains active. In the event of a deletion request or prolonged inactivity, it is erased or anonymised within the legal time limits.
- Sensitive health data (allergies): permanently deleted from our production databases immediately, or within a maximum of 30 days after the closure of your account or the withdrawal of your consent.
6. Data security
- Encryption: data is systematically encrypted during transmission (in transit) and storage (at rest), in accordance with recognised industry standards.
- Access control: access to our servers and infrastructure is strictly restricted to authorised technical staff, who are bound by confidentiality obligations and use strong authentication.
7. Exercising your rights
In accordance with Moroccan Law No. 09-08, you have fundamental rights concerning your data:
- Right of access and portability: to obtain confirmation that your data is being processed, as well as a readable copy of it.
- Right of rectification: to request the updating or correction of inaccurate or incomplete data.
- Right of erasure: to request the complete deletion of your personal information.
- Right of objection and withdrawal of consent: to object to a specific processing operation or to withdraw your consent regarding your sensitive data at any time.
To exercise these rights: directly in the application (Settings → Account / Privacy) or by e-mail to contact@safimeal.ma.
8. Authentication and sign-in
Creating an account and signing in to Safimeal is done solely with an e-mail address and a password, both on the website and in the app.
- Safimeal offers no social sign-in and no third-party authentication provider (Google, Apple, Facebook or any other).
- No profile data is therefore retrieved from any such provider: we only collect the e-mail address you enter yourself.
- Your password is never stored in clear text: it is handled as an encrypted hash by our authentication provider (Google Firebase Authentication), which acts as a technical processor and does not access the contents of your account.
Password resets are carried out by sending a single-use link to the e-mail address associated with your account.
9. Deletion of your account and your data
You may delete your Safimeal account and all of your personal data at any time:
- From the application: Settings → Privacy & Data → Delete my account. The action is immediate: profile, scan history, shopping lists, dietary preferences and settings are erased.
- By uninstalling the application: this stops any future collection, but does not delete the information already stored on our servers. Use one of the two other methods to erase it.
- By e-mail: send your request to contact@safimeal.ma from the address associated with your account. Manual requests are processed within a maximum of 30 days.
Certain data may be retained beyond the deletion of your account where a legal obligation so requires (transaction logs, accounting records, etc.), for the applicable statutory period.
10. Cookies and trackers
The safimeal.ma site uses a minimum of trackers, grouped into two categories. You control the non-essential trackers via the consent banner (on your first visit) or at any time via the "Cookie preferences" link at the bottom of every page.
- Essential trackers (always on): strictly necessary for the site to work, for example remembering your consent choice or your language. They are not used to track you and do not require your consent.
- Audience measurement (subject to your consent): we use Google Analytics 4 to understand, in aggregate, how the site is used and to improve it. No measurement script is loaded and no audience cookie is placed until you have explicitly accepted "audience measurement" in the banner; the IP address is anonymised.
In accordance with Law No. 09-08, your consent to audience measurement is free, prior and revocable at any time, without affecting your access to the site.