Privacy policy

PRIVACY POLICY – DAWAY

Last updated: 03/17/2026

This Privacy Policy describes how DAWAY Sarl, a company with a share capital of 100,000 MAD, whose registered office is located at Harrarin 1, Complexe Yasmine, Tranche 3, Floor 6, Apartment 92, Tangier, Morocco, registered with the Tangier Trade Register under number 134481, collects, accesses, uses, shares, stores, and deletes the personal data of users of the DAWAY platform, available through its website and mobile application.

This Policy is intended to inform users in a clear, transparent, accurate, and complete manner about the personal data accessed, collected, used, shared, and stored in connection with the use of DAWAY services, including account creation, order placement, payment, delivery, customer support, notifications, and platform improvement.

For any questions regarding this Privacy Policy or the processing of your personal data, you may contact us at: support@daway.ma.

1. Scope

This Privacy Policy applies only to data processing carried out by DAWAY in connection with the use of the DAWAY mobile application and the website www.daway.ma.

It does not apply to third-party websites, applications, or services accessible through external links, nor to processing carried out directly by partner restaurants, payment providers, independent delivery drivers, or any other third party acting on its own behalf.

2. Personal Data We Access, Collect, and Process

Depending on the features used, DAWAY may access, collect, record, organize, use, store, and, where necessary, share the following categories of data:

2.1 Identity and Account Data: first name, last name, phone number, email address, encrypted password, internal user ID, preferred language, profile photo if you choose to add one, account type, and account creation date.

2.2 Location and Address Data: delivery address, billing address, GPS position, precise or approximate geolocation when you authorize this feature, geographic coordinates related to delivery, drop-off instructions, floor number, entry code, landmarks, and delivery comments.

2.3 Order and Activity Data: cart contents, products or services ordered, order history, order status, order times, order preferences, comments, special instructions, delivery requests, cancellations, refunds, and complaints.

2.4 Payment and Billing Data: payment method, payment status, transaction ID, payment reference, amount, currency, invoice, receipt, and accounting and tax information. When payment is processed by a third-party provider, DAWAY does not store full bank card numbers on its own servers, but may receive technical or partial data required to manage the transaction.

2.5 Technical and Connection Data: IP address, device identifiers, advertising ID where applicable, device model, device type, operating system, app version, device language, time zone, technical logs, app events, diagnostic data, crash reports, performance data, date and time of connection, browser type, pages viewed on the website, cookies, and similar technologies.

2.6 Communication and Support Data: content of messages sent to support, emails, calls, chat conversations, or other electronic communications, support requests, responses to satisfaction surveys, ratings, reviews, evaluations, and comments posted on the platform.

2.7 Partner Restaurant and Delivery Driver Data: professional identity, contact details, administrative and contractual information, login information, and data relating to orders, deliveries, performance, payments, commissions, billing, and operational exchanges.

2.8 Notification and App Interaction Data: notification preferences, history of service-related notifications sent, interactions with certain features, and opening or use of certain pages or modules within the application.

3. Health Data

DAWAY does not access, collect, use, or share Health Data as defined by Google Play policies, including but not limited to medical records, symptoms, diagnoses, treatments, prescriptions, test results, clinical data, fitness data, biometric health data, or any other information related to a person’s physical or mental health.

DAWAY does not ask users to enter medical information, does not allow the upload of prescriptions or medical documents, and does not use any Health Data for the normal operation of its ordering and delivery application.

If a future version of the application were to include a service involving access to, collection of, or use of Health Data, this Privacy Policy would be updated in advance, clearly and separately, before such processing is implemented.

4. Purposes of Processing

The personal data accessed and collected by DAWAY is used for the following purposes:

  • to create, manage, and secure the user account;
  • to enable authentication and login to the application;
  • to register, process, confirm, and deliver orders;
  • to connect users, partner restaurants, and delivery drivers;
  • to facilitate address search and delivery tracking;
  • to manage payments, refunds, receipts, invoices, and accounting obligations;
  • to provide customer service and handle complaints;
  • to send service-related, order-related, and delivery-related notifications;
  • to prevent fraud, abuse, unlawful behavior, and security incidents;
  • to ensure the proper technical operation of the application and website;
  • to measure performance, fix bugs, and improve user experience;
  • to conduct internal statistical analysis;
  • to send promotional, commercial, or marketing communications where permitted by law.

5. Legal Basis for Processing

Where applicable, data processing is based on the performance of the contract or service requested by the user, compliance with legal and regulatory obligations, DAWAY’s legitimate interest in operating, securing, and improving the platform, and the user’s consent where required, especially for certain device permissions, cookies, or promotional communications.

6. Data Sharing

DAWAY may share certain personal data only when necessary for the operation of the service, with the following categories of recipients:

  • restaurants, sellers, or partners involved in the order;
  • delivery drivers assigned to the delivery;
  • payment service providers;
  • technical service providers responsible for hosting, support, maintenance, notifications, security, technical analytics, or cloud services;
  • administrative, judicial, or regulatory authorities where required by law;
  • advisors, auditors, or processors acting strictly within the authorized purposes.

DAWAY does not sell users’ personal data.

7. Permissions and Access in the Application

Depending on the features used, the application may request certain permissions on the user’s device.

Location: used to search for an address, facilitate delivery address entry, display a location related to an order, optimize certain delivery features, or enable delivery tracking when this feature is activated.

Camera: may be used when necessary to scan a code, capture proof of delivery, add an image, or attach a document for support or another feature offered in the application.

Storage or Files: may be used to upload an image, document, or attachment when the user chooses to use this functionality.

Notifications: used to inform the user about order status, delivery stages, support messages, service alerts, or other service-related messages.

Each permission is used only for the corresponding feature and, where required, only after the user has granted permission.

8. Data Security

DAWAY implements reasonable technical and organizational measures to protect personal data against loss, unauthorized access, alteration, disclosure, or destruction. These measures may include encrypted network communications where applicable, access management, technical logging, restriction of internal access, secure hosting environments, backups, and the use of contractually bound service providers.

9. Data Retention

Personal data is retained for no longer than necessary for the purposes for which it was collected, and thereafter for any period required by applicable law or necessary for the defense of DAWAY’s rights.

  • account data is retained for the lifetime of the account, then archived or deleted according to legal and technical requirements;
  • order, payment, and billing data is retained in accordance with applicable accounting, tax, contractual, and regulatory obligations;
  • support data is retained for the time necessary to process the request, then archived in a limited manner;
  • technical logs, crash reports, and diagnostic data are retained for a period proportionate to security, maintenance, and service improvement needs;
  • notification preferences and certain usage data may be retained for as long as necessary for the operation of the service or until consent is withdrawn where consent is required.

10. Account and Data Deletion

If you have a DAWAY account, you may request the deletion of your account and associated data:

  • from within the application, if this feature is available;
  • through a publicly accessible dedicated web page;
  • or by email at support@daway.ma.

When account deletion is requested, DAWAY deletes or anonymizes the data associated with the account, except where retention is necessary for legitimate or legal reasons, including security, fraud prevention, dispute management, and accounting, tax, or regulatory obligations.

Public account deletion page: [INSERT EXACT URL HERE]

11. Your Rights

Subject to applicable law, you may request access to your personal data, correction of inaccurate data, deletion of your data where possible, restriction of certain processing activities, objection to certain processing, especially for marketing purposes, and withdrawal of your consent where processing is based on consent.

To exercise your rights, you may contact us at: support@daway.ma.

12. Hosting and Transfers

Personal data may be hosted or processed in Morocco or in other countries by DAWAY’s technical service providers, subject to appropriate contractual, organizational, and technical safeguards where required.

13. Cookies and Similar Technologies

On the website, DAWAY may use cookies or similar technologies to ensure the proper functioning of the site, secure certain features, measure audience, improve user experience, remember certain preferences, and generate usage statistics.

Where required by applicable law, the user’s consent is obtained before using cookies that are not strictly necessary.

14. Changes to This Policy

DAWAY may modify this Privacy Policy at any time. Any update will be published on this page with a revised last updated date. In the event of a material change, DAWAY will take reasonable steps to inform users.

15. Contact

For any questions regarding this Privacy Policy or the processing of your personal data, you may contact us at:

Email: support@daway.ma

Phone: +212 653072245

Address: Tangier, Morocco