2.1/ Data required during the use of the Joro ِCash application
‍
When you sign up to Joro ِCash, we collect your language preferences and phone number. An automated message is sent to you with a verification code for your phone number. We collect various data to improve the service we offer you. This data may include:

Information about the device: device type, device's operating system version, Android or IOS identifier (Device ID), IP address, device model, software version, screen size, name of the telecommunications operator, time zone, location where you downloaded the application, and type of network used (e.g. Wi-Fi).

Usage and connection information: time and date of opening the application, pages visited in the application, date and time of closing the application, duration of opening the application, and transaction data (details below). Joro ِCash also collects crash data or cookies.

Transaction details: transaction times, dates, senders, beneficiaries, amounts transferred, amounts received in the application, amounts fed by credit card, funds transferred from Joro ِCash to a bank account, funds withdrawn from an ATM. The history of all transactions, with the name of the sender/beneficiary, time, date, and amounts, is kept and accessible to users..

When you use the transfer feature to a contact in your directory, Joro ِCash uses that contact's number to verify if they are a Joro ِCash user before proceeding with the transfer. If the beneficiary doesn't have Joro ِCash, a text message is sent to their number for them to download the application and receive their funds..

Geolocation data: Joro ِCash may collect location information, as determined by data such as the IP address or GPS of the mobile phone, to provide a better user experience and enhance security (geolocation can, for example, be used as a check in case of suspicion of fraud). Most mobile phones allow you to control or disable the use of location services in applications from the device settings menu. It should be noted that your city and region can be deduced from the IP address..

Contacts using Joro ِCash: The user can link their contact directories to the application to find out which of their contacts are using Joro ِCash. To link a contact in the user's address book to a user who has just signed up for the application, Joro ِCash needs to collect the phone numbers and email addresses in the user's address book. As Joro ِCash does not make any other use of this information, Joro ِCash only needs a fingerprint of this data and not the raw data. That is why this information is transmitted and stored encrypted, by a one-way public key. This function can be disabled by the user from the "settings" screen of the application.

Communications with Joro ِCash Support: Joro ِCash retains the history of communications that the user may have had with Joro ِCash's support or customer service, such as email exchanges.

Tracking of actions carried out by Joro ِCash employees: Joro ِCash employees may be involved in managing an account, and comments on these operations may be stored

2.2/ Information provided by Users
‍
During the signup, Joro Cash collects the following information directly provided by users
‍
● Name (Required)
● First Name (Required)
● Phone Number (Required)
● Date of Birth (Required)
● Email address (Required)
● Gender/Sex (Optional)

‍We use this data for marketing intent and targeted promotional campaigns within the scope of Joro Cash. If you contact us through the form provided for this purpose in the application for any claims, we may collect data that allows us to identify you, such as your name, first name, or residential address. We will use this data to process your request.
‍
We will keep your personal data as long as you are registered on Joro Cash. If you unsubscribe from Joro Cash, your data will be deleted one year from the date of deactivation of your account.
‍
You can withdraw your consent for further storage and processing of your data at any time. Any processing of your data before your withdrawal is not affected and is covered by your consent.

Specific case of the moroccan National Identity card (ID): when upgrading to a Level 2 account (N2, described in the "Terms of Use"), the User must share a photo of their ID as well as a photo of themselves as "proof of life". In order to carry out these operations, Joro Cash relies on the technology developed by a third party "Indatacore", which has made its SDK available. The ID data will be processed by the teams of Lana Cash and Joro Cash for customer relationship management.

2.3/ Banking Data

RIB / Bank account details: To process a wire transfer to a bank account, the User is required to share a RIB. This information is stored and processed by Joro Cash and its partner Lana Cash.

Bank credit/debit cards : When you register one or more bank cards in the Joro Cash application, this data is handled directly through the secure system of the CMI using a tokenization process. We neither collect nor store/ process any bank card data from our users.

3. Sharing of personal data with a third party

The data we collect is accessible to QAZI Finance SARLAU employees who require it for processing within the scope of their duties. Additionally, Joro Cash collaborates closely with Lana Cash, which provides its M-Wallet service.

3.1/ Lana Cash

The Service provided by Joro Cash relies on the expertise, know-how, and partnership with the mobile wallet service (the "M-Wallet") of Lana Cash. Lana Cash is a Moroccan joint-stock company with a share capital of Thirty-five million MAD (35,000,000) and its registered office located at 3, Rue Abou Dhabi Oasis, 20103, registered with the Casablanca Trade Register under number 434227 and a subsidiary of the CIH banking group. Lana Cash specializes in Payment operations as a payment institution authorized by Bank-Al-Maghrib.

The personal data collected may be transmitted to our partner Lana Cash.

3.2/ Authorities and legal competent courts
‍‍
The collected data may be transmitted to competent administrative and judicial authorities, national and foreign fund transfer partners, conventional service providers in case of disputes (lawyers, experts), relevant services or authorized agents of the General Tax Directorate, the Customs and Indirect Taxes Administration, Bank Al Maghrib, UTRF, the Office of Changes, and various public bodies authorized to receive them. Control services (statutory auditors, auditors and services in charge of internal or external control procedures) may also receive the data per the transfer request filed with the CNDP.

4. Data controllers and access to collected data

All of Joro Cash's databases, including those containing data related to the Application's Users, are hosted in a cloud in Morocco, thanks to Joro Cash's partner, Orange Business Services

Furthermore, the attention of the User is drawn to the following facts:
‍
‍- Joro Cash collaborates with the payment institution Lana Cash, a subsidiary of CIH Bank, which holds the mobile wallet.
- Per Circular C-6-W-16 issued by Bank-Al-Maghrib concerning payment institutions, funds held on the mobile wallet created by Lana Cash are segregated within a credit institution, in this case, CIH.
‍
Thus, the User's name, first name, date of birth, phone number, as well as all information related to the balance and transactions of the User are effectively shared with Lana Cash. Joro Cash and Lana Cash jointly define the purposes and means of these processing operations. The personal data of Users is only shared with these joint data controllers for the purpose of executing contracts established with Joro Cash.
‍
Joro Cash and Lana Cash are bound by mutual information obligations, particularly with regard to any violation of Users' personal data.

Moreover, like Joro Cash, Lana Cash has committed to complying with the prerogatives of the CNDP.
‍
To guarantee the secrecy, security, and confidentiality of data, and in compliance with the provisions of Law No. 09-08 relating to the protection of individuals with regard to the processing of personal data, Joro Cash and Lana Cash have committed to:

- Take all necessary precautions to preserve the security of data, particularly to prevent them from being distorted or damaged, and to prevent any unauthorized access not previously authorized by them.
- Ensure the lawfulness of the processing carried out within the framework of the entrusted mission;
- Respect their obligation of secrecy, security, and confidentiality, during any maintenance and remote maintenance operations carried out within their respective premises;
- Take all security measures, particularly material and logistical, to ensure the preservation and integrity of the processed data;
- Take all measures to prevent any misuse, malicious or fraudulent use of the processed data.

5. Use of collected information

The collection and processing of User Data by Joro Cash are carried out to ensure the best quality of service on Joro Cash while protecting and preventing fraud. More specifically, the objectives are:
‍
● To enforce our commitments to you according to our Terms of Service (TOS);
● To manage the account and provide services subscribed by Users;
● To keep Users informed about ongoing, completed, and upcoming transactions;
● To inform Users that some of their contacts use Joro Cash;
● To evaluate the effectiveness of messages sent by Joro Cash and adapt them;
● To ensure smooth communication with customer support/service;
● To manage reward programs or promotional events;
● To calculate reward levels and rights based on payment transactions made with Joro Cash;
● To detect and prevent fraud, abuse, security incidents, and other unauthorized activities (detailed in the TOS);
● To understand and analyze Users' usage to offer and/or develop new offers in line with their needs;
● To ensure compliance with current regulations and TOS;
● To request feedback or ask Users to leave a review or respond to a survey;
● To notify Users of changes to the application, our General Terms of Use, or our Privacy and Personal Data Protection Policy."

6. Consent

Following the reading of this Data Privacy Policy, the User expressly and unreservedly acknowledges having been fully informed beforehand of:

- all the data collected by Joro Cash and the partner Payment Institution Lana Cash;
- the purposes for which the processing of their personal data is intended;
- his rights conferred by law n°09-08. 
‍
The Client expressly and unreservedly gives their free, specific, and informed consent for the aforementioned processing, including being directly prospected by automated phone call, fax, email, or any other means employing the same technology to inform them of other offers of products and services similar to those subscribed to in the Agreement.