Privacy policy
Last updated: 29 October 2026
At Darlice, our users’ trust is essential. This policy explains what data we collect when you use darlice.com and the Darlice mobile app, why we use it, who it is shared with and how to exercise your rights. It applies to customers, vendors and drivers.
1. Data controller
Personal data is processed by Darlice, a Moroccan sports-nutrition platform based in Casablanca, in accordance with Law No. 09-08 on the protection of individuals with regard to the processing of personal data and the recommendations of the CNDP.
Any question: support@darlice.com. Company details are available in the legal notice (darlice.com/legal-notice).
2. Data we collect
We only collect the data needed to run the service:
- Account and contact details: first name, last name, phone number, e-mail address, language, password (stored hashed, never in clear text).
- Delivery addresses: street, building, floor, district, city, driver instructions and GPS coordinates of the delivery point.
- Location: your precise position, only when you allow it, to find your address, show nearby stores and track your delivery. For drivers who are “online”, location is collected continuously (including in the background in the app) to offer nearby deliveries and let customers track them.
- Nutrition and fitness data (optional): sex, date of birth, height, weight, goal, activity level, diets and allergies, food journal, water intake and weight tracking.
- Orders and transactions: items ordered, amounts, payment method, history, loyalty points, wallet and promo codes.
- Content you publish: reviews and ratings, photos, messages exchanged with vendors, drivers or support and, for partners, supporting documents (ID, business registration, driving licence…).
- Technical identifiers: account ID, push-notification token, device and session information (model, OS, IP address) needed for security.
Card payments: card details are entered directly on the secure page of our payment partner (CMI, 3-D Secure). Darlice never receives or stores your card number.
3. Location data
The Darlice app and darlice.com access your device’s location data (precise GPS location and approximate location) only with your permission.
- Customers: location is used while the app is open, to detect your delivery address, show the stores and meals available around you and follow your driver’s arrival.
- Drivers: when you go “online”, the app collects your location continuously, including in the background when the app is closed or not in use, to offer you the nearest deliveries, compute routes and let the customer and the vendor track the delivery in real time. A persistent notification shows it, and collection stops as soon as you go “offline”.
- Vendors: the store’s location is saved to compute delivery zones and fees.
Sharing: the driver’s location is visible to the customer and the vendor only during an ongoing delivery. Location data is never sold, never used for advertising and never shared with third parties other than our hosting and mapping providers.
Retention: driver locations are kept for the duration of the delivery, then deleted or aggregated; the coordinates of a delivery address are kept as long as the address is saved in your account.
You can deny or withdraw location permission at any time in your phone or browser settings. You can then enter your address manually; a driver cannot receive deliveries without location, however.
4. Why we use it
- Create and secure your account (sign-in, SMS verification, fraud prevention).
- Process your orders: sending them to the vendor, preparation, delivery, payment, invoicing and customer service.
- Track your delivery in real time and notify you at every step.
- Compute your nutrition targets, automatically fill your journal from delivered orders and suggest suitable meals.
- Run the loyalty programme, wallet, referrals and promo codes.
- Improve the service (aggregated, anonymised statistics) and meet our legal obligations.
- Send you marketing messages only if you agreed to it; you can opt out at any time in your notification preferences.
We do not do any advertising tracking and we never sell your data.
5. Who we share it with
Your data is only shared when the service requires it:
- The vendor of your order receives the items, your first name, your note and, for deliveries, what is needed to prepare it.
- The assigned driver receives your first name, the delivery address, instructions and a masked contact number for the duration of the delivery.
- Our technical providers, bound by contract and confidentiality: hosting and storage (secure servers), SMS and e-mail, push notifications, card payments, maps (OpenStreetMap / Nominatim for address search).
- Authorities, only when required by law.
International transfers: some of our hosting providers are located outside Morocco (the website is hosted by Vercel Inc. and the API by Railway Corp., in the United States; files are stored with a cloud storage provider). These transfers are limited to the data the service needs and are carried out in accordance with Law No. 09-08 and the requirements of the CNDP: contractual confidentiality and security commitments, encryption of data in transit and restricted access. Hosting details are listed in the legal notice (darlice.com/legal-notice).
No data is shared with third parties for advertising purposes.
6. Health and fitness data
Your nutrition profile is optional and only used to compute your needs and personalise suggestions. It is never shared with vendors, drivers or third parties, and you can edit or delete it at any time in the app.
Darlice is not a medical device: computed targets are indicative and do not replace the advice of a health professional.
7. Retention
- Account data: as long as your account is active.
- Orders and invoices: the legal retention period for accounting records.
- Driver GPS positions: kept for the duration of the delivery, then aggregated or deleted.
- Nutrition data: until you delete it or delete your account.
When your account is deleted, your personal data is erased or anonymised, except what we must keep to meet a legal obligation.
8. Security
All communications are encrypted (HTTPS). Passwords are hashed (Argon2), sessions use short-lived tokens rotated on every use, and data access is restricted by role. On the website, your session is kept in a secure cookie that scripts cannot read.
9. Your rights
Under Law 09-08 you have the right to access, rectify, object to and delete your data.
- Edit your information: from your profile in the app.
- Delete your account: in the app, Profile → Settings → Delete my account, on the website (My account → Security), or simply by e-mailing support@darlice.com. Details of the data deleted and kept are at darlice.com/en/delete-account.
- Withdraw consent to location or notifications: at any time in your phone or browser settings.
You may also lodge a complaint with the CNDP (www.cndp.ma).
11. Minors
Darlice is intended for people aged 16 and over, in particular because food supplements are sold. We do not knowingly collect data about children.
12. Changes
We may update this policy to reflect changes to the service or regulations. The last update date is shown at the top of this page; for significant changes we will inform you in the app.