Real people. Real rules. No surprises.

1. Who we are

Khrija.ma is a Moroccan social platform for adults who want to meet in real life in their city. Under Law No. 09-08 on the protection of individuals with regard to the processing of personal data, Khrija.ma is the data controller: we decide what is collected and why. Contact: support@khrija.ma.

Our processing is declared to the Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP). Where this policy and a CNDP decision differ, the CNDP decision applies.

2. What we collect

You give us

• Account: username, email and password. Passwords are stored as a one-way hash that nobody, including us, can read.
• Profile: first name, city, date of birth, gender, lifestyle answers, languages, interests, music, sports, studies or work, bio and up to five photos. Only city and date of birth are required.
• What you write: plans, direct messages, plan-room messages, support tickets and reports.
• Face verification: only if you choose to verify. It runs on your device and compares your live face with your own photos; we only receive the result (section 5).
• Profile basics: your first name (typed by you), and, only if you choose, your pronouns (from a fixed list), what you are looking for, your vibe, languages, whether you study or work, and when you like to go out. These show on your profile.
• Ideas and comments: what you post on the Ideas board, visible to members, kept until the founder removes it. Swipe: whether you asked to hear when it opens.
• Plans nearby: we use your city to tell you about new plans and events there (at most 3 plan alerts a day). Turn this off in Settings → Notifications.
• Community: your daily answers, comments, guestbook messages and profile reactions are visible to members; poll votes only appear as totals. Who wrote a confession is never shown to members, only to the moderation team. Your Khrija Score is counted from what you take part in.

Recorded automatically

• Technical: IP address, browser, device type and language, for security and abuse prevention.
• Usage: plans you join or request, friend requests you send, who you block, and, if you accept analytics cookies, which pages are used.

We do not buy personal data, and we never sell yours.

3. Why we use it, and on what basis

Law 09-08 allows processing with your consent, or where it is needed to perform the contract with you, to meet a legal obligation, or for a legitimate interest that does not override your rights.

No automated decision with legal effect is ever made about you, and there is no advertising profiling.

4. Location

Your city is the most precise location the site ever shows. A plan shows a city and an area; the exact meeting point is visible only to the host and the people the host accepted. We do not read GPS from your device, there is no live tracking and no member map. Your city is chosen once and can only be changed by our support team.

5. Face verification

Browsing is open. Hosting a plan or asking to join one needs a verified profile, so people know the person coming matches their profile photo. To verify, you need a profile photo that clearly shows your face, with only you in it. When you add it, your phone shrinks the picture and checks that it shows one face, before anything is sent. Then you do a short camera challenge (look, turn, blink) in your browser, and your phone compares your live face with your profile photo. No image from the camera ever leaves your device, and Khrija.ma never receives or stores it. We keep only the result (verified, and the date). No identity document is asked for. If you change or remove your profile photo, the Verified badge is removed until you do a new face check. You agree to the check before it starts, and you can ask us to remove the result at any time.

6. Who sees your data

• Other members, according to your privacy settings. A private profile (Khrija Plus) shows only your name, handle and badges.
• Our processors, each for one job (hosting, email, identity checks, anti-bot, payments, the AI support assistant), bound by contract to act only on our instructions.
• Moroccan authorities, only on a valid legal request that we check first.
• Authorised Khrija staff, who can open an account to investigate a report, stop abuse or fix a problem you asked us about. Every such access is recorded and reviewed.

Some processors host data outside Morocco. Under Law 09-08 such transfers require a country with an adequate level of protection or an authorisation from the CNDP, and we only transfer on that footing.

Search terms typed on Khrija are kept without who typed them, to learn what people look for. To improve the service, the team may send totals (for example, how many members per city, or how many plans per activity) to an AI provider for advice. These totals never contain anyone's name, messages, photos or other personal data.

7. Cookies

• Essential: the session cookie (keeps you logged in), khrija_lang, khrija_theme and khrija_cookies (your cookie choice). Always on, because the site cannot work without them.
• Analytics (optional): khrija_vid, a random first-party id set only if you tap "Accept all". It lets us count visits and see which pages and buttons are used. We store no IP address or device fingerprint with it, keep events for up to 12 months, and you can withdraw by clearing your cookies. No ad trackers, ever.
• Invites: khrija_ref, set only when you open someone's invite link. It remembers who invited you for 30 days, so they are credited if you sign up later.
• Analytics, details: with "Accept all", we also measure how long a page stays on screen and how far it is scrolled, to learn which pages help people. You can change your choice at any time from the cookie link in the footer.

8. How long we keep it

• Account and profile: while your account is open.
• Messages: until you delete them or the account closes. "Delete for everyone" removes the text for the whole chat.
• After an approved account closure: 30 days, then erased, unless the law requires longer.
• Security and moderation logs: up to 12 months. Reports and tickets: up to 24 months.
• Login and recovery codes: minutes. They expire and are deleted.

9. Security

HTTPS everywhere, hashed passwords, dates of birth encrypted at rest, CSRF-protected sessions, rate limits on logins and codes, optional two-step login, and an admin area that needs two passwords and an authenticator code. If a breach is likely to affect your rights, we tell you and the CNDP without undue delay.

10. Age

Khrija.ma is for adults aged 18 and over. Accounts that belong to a minor are closed and their data erased. Spotted one? Tell us at support@khrija.ma.

11. Changes and contact

Material changes are announced by email or in the app before they apply, and the date above is updated. Questions: support@khrija.ma or a support ticket. You can also complain to the CNDP at www.cndp.ma.

1. The service

Khrija.ma connects adults in the same Moroccan city so they can plan things together: a match, a coffee, a study session, a night out. We run the platform; we are not a party to arrangements between members, and we only organise the events our team publishes as such.

2. Who can join

• You are 18 or older and able to enter a contract.
• One person, one account. No selling, sharing or transferring accounts.
• You have not been permanently removed from Khrija.ma before.

3. Your account

Keep your details accurate and your password private; turning on two-step login is strongly recommended. Your first name and city are set once and can be corrected only by support. Google and Discord sign-ups accept these same terms.

4. House rules

• No harassment, threats, hate or discrimination of any kind.
• No sexual content, no soliciting sex, no paid services.
• No impersonation of people, staff or institutions.
• No scams, spam or unapproved promotion.
• Nothing illegal under Moroccan law, and nothing that promotes it.
• No sharing someone else's photos, messages, address or identity outside the platform.
• No scraping, automation, or attempts to break or overload the service.

Ideas board. Verified members can post ideas and one comment per idea. Posts are visible to members and cannot be edited or deleted by their author, so think before posting. No spam, ads, insults or personal data about others. Verified members can like ideas. The Khrija team replies to ideas and can remove ideas or comments.

Community. Daily answers, comments and guestbook messages follow the house rules. Confessions are anonymous to other members, but the moderation team can see who wrote them and reads each one before it goes live: no real names, numbers or anything that points to a real person. Khrija Score points, levels and badges have no cash value and can be adjusted if someone games them.

5. Meeting people

Meeting strangers carries real risk, which you accept. Verification confirms that a person matches their photos, not their character or record. Follow the Safety tab, and if anything feels wrong, leave and contact the authorities first.

6. Your content

What you post stays yours. You give Khrija.ma a free, non-exclusive licence to host and display it to run the service, ending when you delete it or your account closes (except copies the law or a moderation record requires). Only post photos you have the right to post. We may remove anything that breaks these terms.

Photos. Your profile photo must be a real, recent photo of your face, with only you in it. Photos of someone else, celebrities, cartoons, logos or misleading photos are removed, and the account may be suspended. Changing or removing your profile photo removes the Verified badge until you do a new face check.

7. Khrija Plus

• Khrija Plus is for verified members. 70 MAD per month, or 35 MAD per month at the student rate (student card or school email checked by our team). Prices include applicable tax.
• It renews monthly until cancelled. You can cancel within 7 days of starting for a refund; after that, cancelling stops the next renewal and Plus runs to the end of the paid month.
• Outside those 7 days, a month already under way is not refunded, as permitted for a digital service already in use under Law 31-08. Payments taken in error are always refunded.
• Hosting, joining, messaging people you have met and verification are free and stay free.

Invites. When 5 friends sign up with your invite link and verify their profile, you receive one free month of Khrija Plus. This reward is given once per member. Fake or duplicate accounts made to get it are removed, and the reward may be taken back.

8. Suspension and closing

We may suspend or remove accounts that break these terms, put people at risk, or where the law requires it, and we tell you why. You can ask to close your account from Settings; our team reviews the request and lets you know.

9. Liability

We work hard to keep Khrija.ma available and safe, but we cannot guarantee uninterrupted service, and we are not responsible for members' behaviour or for meetups we did not organise. Nothing here limits liability that Moroccan law does not allow us to limit.

10. Intellectual property

The Khrija.ma name, logo, badges, design and code are protected by Law No. 17-97 on industrial property and Law No. 2-00 on copyright. Do not copy or reuse them without written permission.

11. Changes, law and disputes

Material changes are announced before they apply. These terms are governed by Moroccan law. Talk to us first; disputes that cannot be settled amicably go to the competent Moroccan courts, including those provided for consumers by Law 31-08. Contact: support@khrija.ma.