Privacy Policy
Last updated: September 29, 2026
Toubkal ("we", "us") is a social network for Morocco, available as an iPhone app and at mytoubkal.com. This policy explains what information we collect, why, and the choices you have.
Information we collect
- Account information: your email address, used to sign you in with a one-time code or link.
- Profile information: the name, username (handle), city and bio you choose to add, plus a profile picture (your own photo or one of our avatars) and a header image if you add them.
- Your activity: posts, photos, videos, comments, votes, reposts, the communities you join, and friend requests you send, accept or decline.
- Photos and videos: photos and videos you attach to posts, and the photos you use for your profile picture and header. Before upload, the app resizes photos and re-encodes videos (up to one minute), which removes embedded location data.
- Direct messages: the messages you send and receive, who they are between, when they were sent and whether they have been read, plus your choice of who can message you.
- Safety information: the accounts you block and the reports you file, including the reason and any details you add.
- Notifications: a record of activity that concerns you (for example, a reply or a friend request) so we can show it in the app.
- Waitlist: if you join the waitlist on our website, your email address and preferred language.
- Technical information: our service providers process basic technical data such as IP addresses and request logs to run and secure the service. The app keeps your sign-in session on your device.
We do not use advertising trackers. Our website does not use analytics cookies; it only remembers your language choice in your browser.
How we use it
- To create and secure your account and sign you in.
- To show your profile and content to other Toubkal users, and to build your feed.
- To send sign-in emails and, if you joined the waitlist, to tell you when Toubkal launches.
- To deliver your direct messages to the person you send them to.
- To keep the community safe, including reviewing reported content, enforcing blocks and preventing abuse.
What other people can see
Your name, username, city, bio, posts, photos, comments, reposts, community memberships and friends are visible to other signed-in Toubkal users, except people you have blocked. Pending friend requests are only visible to you and the other person. Direct messages are only visible to you and the person you are talking to. Your email address, the accounts you block and the reports you file are never shown to other users.
Who we share it with
We do not sell your personal information. We share it only with providers that help us run Toubkal, under agreements that require them to protect it:
- Supabase — database, sign-in, and photo and video storage.
- Resend — delivery of sign-in and launch emails.
- Cloudflare — website hosting and domain services.
We may also disclose information when required by law or to protect the safety of our users.
How long we keep it
We keep your account information and content while your account is active. You can delete your account at any time in the app under Settings → Delete account; this permanently deletes your profile, profile picture and header, posts, photos, videos, comments, votes, messages, friend requests and notifications, except where we must keep limited information to meet legal obligations. Waitlist emails are kept until we have announced the launch or until you ask us to remove yours.
Your rights
You can access, correct or delete your information, or object to how we use it. You can edit your profile and delete your account in the app at any time. For any other request, email hello@mytoubkal.com from the address linked to your account.
We process personal data in line with Moroccan Law No. 09-08 on the protection of individuals with regard to the processing of personal data. You may also contact Morocco's data protection authority, the CNDP. If you live in the European Union, you have similar rights under the GDPR.
Children
Toubkal is not intended for children under 16, and we do not knowingly collect information from them.
Security
Connections to Toubkal are encrypted, access to data is restricted by database security rules, and sign-in uses one-time codes instead of passwords. No system is perfectly secure, so please contact us if you notice anything unusual.
Changes
If we make important changes to this policy, we will update the date above and let you know in the app or by email.
Contact
Questions? Email hello@mytoubkal.com.