Privacy policy

1. Data controller

Amine BOUHLAL, auto-entrepreneur (RNAE 002938469000062), Tangier 90000, Morocco. Contact: contact@heydounia.com

2. Data collected

Through this website: none. This site uses no cookies, no trackers and no analytics.

Through the Dounia service (the WhatsApp assistant made available to client businesses):

• the WhatsApp phone number and the name provided by the user;
• the content of messages and voice notes sent to the business;
• appointment data (date, time, reason);
• for healthcare businesses, messages may contain health-related information the user chooses to share.

3. Purposes

Data is processed solely to answer users’ requests on behalf of the business they contacted: booking, changing and cancelling appointments, and answering frequently asked questions.

4. Legal framework

Processing is carried out under Moroccan law no. 09-08 on the protection of individuals with regard to the processing of personal data, under the supervision of the CNDP. Filings with the CNDP are being finalized.

5. Recipients and processors

• The contacted business: receives the appointments and messages that concern it.
• Google Cloud (Google LLC): data hosting and processing by AI models, on infrastructure located in the European Union.
• Meta Platforms, Inc.: message delivery through the official WhatsApp Business API.

One business’s data is never shared with another, and one user’s data is never disclosed to another user.

6. Transfers outside Morocco

Data is hosted in the European Union (Google Cloud) and transits through Meta’s services — providers offering recognized protection guarantees.

7. Retention

Data is kept for as long as needed to manage appointments and the relationship with the business, then deleted or anonymized. Precise retention periods per category are being formalized.

8. Your rights

Under law 09-08, you have the right to access, rectify and object to the processing of your data. To exercise these rights, write to contact@heydounia.com. You may also lodge a complaint with the CNDP (www.cndp.ma).

9. Security

Data is stored on secured infrastructure (Google Cloud), encrypted in transit, with restricted access. The assistant never shares one user’s data with another.

10. Cookies

This site uses no cookies.

11. Changes

This policy may be updated; the date of the latest update is shown at the top of the page.