Legal Framework

KeyLend is a peer-to-peer vehicle sharing platform operating under the commodat (pret a usage) legal framework as defined by Articles 830-845 of Morocco's Dahir des Obligations et Contrats (DOC). KeyLend facilitates gratuitous loans for use of vehicles between individual owners and borrowers, with compensatory indemnity. KeyLend is not a professional vehicle rental service.

Data We Collect

We collect the following personal data to operate the platform:

• Identity information: full name, email address, phone number, date of birth, a copy of your national ID card (CIN) or passport, and a copy of your driving license (front and back) for trip authorization and identity verification.
• Location data: your precise GPS location when you use the app to search for nearby vehicles, during vehicle handover verification (QR scan), and when submitting vehicle inspection photos (to verify your proximity to the vehicle).
• Photos: vehicle inspection photos (8 angles, timestamped and geolocated) taken at pickup and return; your profile photo; vehicle listing photos uploaded by owners; vehicle registration (Carte Grise) and insurance document photos uploaded by vehicle owners; and damage report photos if a post-trip damage claim is filed.
• Device information: device type, operating system, and a unique device identifier for push notifications.
• Usage data: booking history, messaging activity, reviews, and app interaction data.
• Payment data: transaction records related to indemnity payments. We do not store full payment card details.
• Banking details (vehicle owners only): bank name, RIB (Relevé d'Identité Bancaire — your 24-digit Moroccan bank account identifier), and account holder name. This information is collected solely to process indemnity payouts to vehicle owners.

Why We Collect Your Data

Your data is used for the following purposes:

• Account creation and identity verification — to ensure all users on the platform are verified and trustworthy.
• Trip management — to process booking requests, manage vehicle handovers, and track trip status.
• Vehicle inspection — to document the condition of vehicles before and after each trip using timestamped, geolocated photographs.
• In-app messaging — to facilitate communication between vehicle owners and borrowers.
• Push notifications — to send booking confirmations, trip reminders, and important account updates.
• Transactional emails — to send booking confirmations, identity verification results, and account-related notifications.
• Safety and dispute resolution — to resolve disputes with photographic evidence from digital inspections.

Third Parties

We share your data with the following service providers, strictly for platform operation:

• Google Firebase (USA) — authentication, real-time database, cloud storage, push notifications, crash reporting, and usage analytics (forwarded to Google Analytics 4).
• Resend (USA) — transactional email delivery (booking confirmations, verification notifications).
• Google Cloud (USA) — image analysis for vehicle inspection photos (Cloud Vision API).
• CMI — Centre Monétique Interbancaire (Morocco) — payment processing for indemnity payments. We share your booking reference with CMI to confirm payment status. CMI processes card transactions per its own privacy policy.

We do not sell your personal data to any third party. We do not share your data for advertising purposes.

Data Retention & Deletion

We retain your personal data for the duration of your account activity plus 12 months after your last login. Vehicle inspection photos are retained for 6 months after trip completion for dispute resolution purposes.

You can delete your account at any time from the app settings. When you delete your account, all your personal data, booking history, and messages are permanently removed within 30 days. Vehicle inspection photos linked to completed trips may be retained for up to 6 months for legal dispute resolution under Moroccan law.

To delete your account: open the app, go to Settings, and tap "Delete my account". You can also email us at support@keylend.app to request data deletion.

Data Security

All data transmitted between your device and our servers is encrypted using TLS/HTTPS. Your identity documents are stored in encrypted cloud storage with access restricted to authorized verification processes. We do not use non-exempt encryption beyond standard HTTPS/TLS protocols.

Children's Privacy

KeyLend is not intended for users under the age of 18. Vehicle sharing requires a valid driver's license, which in Morocco requires the user to be at least 18 years old. We do not knowingly collect personal data from anyone under 18. If we discover that a user is under 18, their account will be suspended and their data deleted.

Cookies & Tracking

The KeyLend website (keylend.app) uses essential cookies only for locale preferences. We do not use advertising cookies or third-party tracking pixels. The mobile app does not use cookies.

Your Rights

Under Moroccan Law 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data, you have the right to:

• Access your personal data held by KeyLend.
• Correct any inaccurate personal data.
• Delete your account and all associated personal data.
• Object to the processing of your data for specific purposes.

To exercise any of these rights, contact us at support@keylend.app or through the app's Settings page.

Changes to This Policy

We may update this policy from time to time. If we make significant changes, we will notify you through the app or by email. Continued use of KeyLend after such changes constitutes your acceptance of the updated policy.

Contact

For any questions about this privacy policy or your personal data, contact us at:

Email: support@keylend.app

KeyLend SARL — Morocco

Eligibility

You must be at least 18 years old and hold a valid driver's license to use KeyLend. By registering, you confirm that the information you provide is accurate and complete.

Legal Framework — Commodat

KeyLend operates under the commodat (pret a usage) framework as defined by Articles 830-845 of Morocco's Dahir des Obligations et Contrats. All vehicle sharing transactions on KeyLend are gratuitous loans for use with compensatory indemnity. KeyLend is not a professional vehicle rental service and does not hold a rental license. Each vehicle may be listed for a maximum of 90 days per calendar year.

Your Account

You are responsible for maintaining the security of your account credentials. You must not share your login with others. You must complete identity verification (ID or passport) before booking or listing a vehicle. KeyLend may suspend or terminate accounts that violate these terms or that fail identity verification.

Vehicle Owner Obligations

As a vehicle owner, you must ensure your vehicle is roadworthy, insured, and accurately described in your listing. You must complete the digital inspection at each handover. You set your own indemnity pricing. You are responsible for maintaining valid vehicle registration and insurance.

Borrower Obligations

As a borrower, you must treat the vehicle with reasonable care and return it in the same condition as received (normal wear excepted). You must complete the digital inspection at pickup and return. You are responsible for any damage, fines, or violations incurred during your trip. You must not sub-lend the vehicle to any third party.

Digital Inspection

Every trip begins and ends with an 8-angle digital inspection. Photos are timestamped, geolocated, and stored for 6 months. These photos serve as legally recognized evidence of vehicle condition under Moroccan law. Refusing to complete the inspection may result in loss of dispute protection.

Payments & Indemnity

Borrowers pay a compensatory indemnity to vehicle owners for each trip. KeyLend may apply a service fee to facilitate the transaction. All payments are processed through the platform. Refund and cancellation policies are displayed before booking confirmation.

Disputes & Liability

In case of damage or disagreement, KeyLend will mediate using digital inspection evidence. KeyLend acts as an intermediary platform and is not a party to the commodat agreement between owner and borrower. KeyLend's liability is limited to the proper functioning of the platform.

Prohibited Uses

You must not use KeyLend for any illegal purpose, provide false identity information, list a vehicle you do not own, use the platform to circumvent vehicle rental regulations, or engage in any activity that could harm other users or the platform.

Termination

KeyLend may suspend or terminate your account at any time for violation of these terms. You may delete your account at any time from the app settings. Upon termination, your personal data will be handled according to our Privacy Policy.

Governing Law

These terms are governed by the laws of the Kingdom of Morocco. Any disputes arising from use of KeyLend shall be subject to the jurisdiction of the competent courts in Morocco.