Privacy policy

What we collect

To create an account: a mobile number, or an email address and a password. Passwords are stored hashed, never in clear text.

For your candidate profile: display name, trade, years of experience, level, city, travel radius, availability, expected pay, and a photo if you add one.

Your certifications: photographs of your cards and licences, with their expiry dates.

Your applications: the job, the date, the message you wrote and the status set by the company.

Technically: IP address and access logs, kept for the security of the service.

We use no advertising trackers and share nothing with ad networks.

Why

To connect you with companies hiring in your trade and near you. To warn you before a certification expires. To prevent fraud and abuse.

Who sees what

Your profile is visible according to the setting you choose: public, anonymous, or private.

Your phone number is never public. A company sees it only after spending credits to unlock it, and only if you applied to one of its jobs or your profile is public. Every unlock is recorded and you can review it.

We do not sell your data. We do not pass it to data brokers.

Audience measurement

We measure which pages are viewed, using PostHog. That measurement is deliberately limited:

• No session recording. We do not film your screen.
• No input is collected. What you type into a form — your phone number above all — never leaves your browser for the analytics tool.
• No IP address is stored.
• No URL parameters. Filters and search terms are not transmitted.
• If your browser sends a "Do Not Track" signal, nothing is loaded at all.

Requests go through kheddam.com, not a third-party domain.

Processors

Server and database hosting, SMS delivery, and card payment processing (CMI). Each accesses only what its function requires. Data is hosted on servers located in Europe.

How long

For as long as your account exists. After deletion, profile data is erased within thirty days.

Invoices and payment records are kept for ten years, as Moroccan accounting rules require. Access logs are kept for twelve months.

Your rights

You have the right of access, rectification, objection and deletion.

Access and rectification are available directly in your account. Deleting your account is done from settings and requires no request to us.

For anything else, write to us. You may also refer a complaint to the CNDP, Morocco's personal data protection authority.

Security

Traffic is encrypted in transit. Passwords are hashed. Access to production data is restricted and logged. SMS codes expire after five minutes and attempts are rate-limited.

No system is perfectly secure. If a breach occurs that is likely to affect you, we will tell you.