In short
- We keep your email or number, your city, and physios’ profiles.
- We use them to sign you in, to notify you, and to check physios.
- Physios’ diploma and ID document: seen on WhatsApp, never stored on the site, images deleted after the check.
- One tap deletes everything. We answer within 30 days.
Here is what Kinero keeps about you, why, for how long, and how to delete it. This page follows Moroccan Law 09-08 and the rules of the CNDP. It also aims at the GDPR standard for people who sign up from Europe.
Who is responsible
The data controller is Kinero, publisher of kinero.ma. For any question: contact@kinero.ma.
What we collect and why
We use your data to sign you in and to let you write to a physio. We also use it to tell you when a physio is published in your city. For physios, we use it to run your account and check your diploma.
If you are looking for a physio: your city, and your email or your WhatsApp number (at least one of the two). Your preference for clinic or home, if you give it.
If you are a physio: your first and last name, email, WhatsApp number, cities and neighbourhoods of practice, specialties and year of diploma. If you give it, where you practise. If you add them: your photo, bio, languages, prices, hours, your clinic name and address and its map pin.
If you create an account: your email, and your password if you choose one, kept only as a fingerprint (hash). We also keep the account creation date, your last sign-in date and the version of the terms you accepted. Codes sent by email and sessions are kept only as fingerprints.
A patient can create an account with only a mobile number, checked by a code.
With each sign-up we also keep the site language, and the date and version of your consent. If present, we keep where the link came from (utm parameters, referring site name). No IP address is kept: it becomes an anonymous fingerprint that limits abuse, deleted after 24 hours. A separate fingerprint, kept 2 days, is used to count visits to physio pages (see “Directory and messaging”).
Diploma and ID document (physiotherapists only)
No document is uploaded to the site. To check your registration, we ask on WhatsApp for photos of your diploma and your ID document (CIN, passport or residence permit). They serve one purpose: comparing the name on the diploma, on the ID document and on your profile.
These images stay in Kinero’s WhatsApp conversation, on a protected phone. They are never published, never passed on and never copied to the site.
They are deleted from the conversation once the decision is made, at the latest 30 days after receipt. Meta Platforms carries the conversation, as it does for WhatsApp codes (see below).
Your WhatsApp number is required for physios: it is the channel for this check. You can withdraw your consent at any time by asking for your account to be deleted.
We keep the history of verification decisions (date, decision, message sent) with your file. It is deleted with your account.
Legal basis
We process your data on the basis of your consent, given by ticking the box on the form. You can withdraw it at any time; we then delete your data.
Who processes your data for us
Three technical providers process your data on our behalf, each for one task. Our web host provides the site and measures the audience without cookies. Our data host keeps the database and the documents, in a private space in Europe (Paris region). Our email provider sends our messages, from the Europe region.
They act on our instructions and may not use your data for themselves.
Our provider list is available on request at contact@kinero.ma.
If you choose WhatsApp, Meta Platforms sends your sign-in codes for us and, if you gave no email, the new-message alert and the confirmation of an appointment booked online. For physios, Meta also carries the conversation used for the diploma check. Meta receives your number and the content of these messages, never your Kinero messages.
To check your number, or to sign in with it, the code goes on WhatsApp first. If it cannot, Twilio sends it to you by SMS. Twilio receives your number, never your Kinero messages.
Transfers outside Morocco
Your data is hosted in the European Union, which offers a recognised level of protection. The transfer outside Morocco is covered by the declaration required under Law 09-08.
If you choose WhatsApp, your number is passed to Meta Platforms, which may process it outside the European Union, notably in the United States. We offer this service only after declaring this transfer to the CNDP.
For a code by SMS, your number is passed to Twilio, which may process it outside the European Union, notably in the United States.
How long we keep it
An unconfirmed sign-up is deleted after 30 days. A confirmed sign-up is kept at most 24 months, or until you ask for deletion. IP fingerprints are deleted after 24 hours. To count visits to a physio’s page, a fingerprint is kept 2 days. Daily visit totals are kept 400 days. Documents follow the periods given above. An account and its profile are kept as long as the account exists. You can delete it at any time from “Manage my data”. Sign-in codes are deleted after 24 hours, sessions after 30 days at most.
Your rights
You can access your data, correct it, have it deleted, or object to its processing. Just write to contact@kinero.ma. We answer within 30 days.
Every email we send contains a link to delete your data yourself, in one tap. The “Manage my data” link at the bottom of every page leads there too.
While a report on your account is examined, or while a sanction runs, deletion waits for the team’s decision.
If you believe your rights are not respected, you can complain to the Commission nationale de contrôle de la protection des données à caractère personnel (CNDP) in Rabat.
Security
The site is served over HTTPS only. Data is written by our servers, never directly from the browser. Confirmation and deletion links are signed, time-limited and single-use. Access to the technical services is protected by two-factor authentication.
Audience measurement
We count visits with a cookieless, analytics tool that uses no personal identifier. It cannot recognise you from one visit to the next.
No advertising, no resale
We do not sell or rent your data. We pass it to no advertiser. We send no advertising messages.
We may email you about the service or your file, for example to tell you a page is ready to publish. These are service emails, not advertising. They need no consent and go only to physiotherapists who have an account.
Adults only
The service is for adults. If you are under 18, ask a parent or guardian to sign up for you.
Directory and messaging
A physio appears in the directory as soon as their diploma is checked. They can take their page down at any time from their space. While the check is under way, their name, city, specialties and the photo the team accepted also appear, greyed, marked “Unverified profile”. Nobody can write to them before the check. They can refuse this from their space. Anyone then sees: name, city, neighbourhoods, specialties, clinic or home visits. If they add them: photo, bio, languages, prices, hours, the clinic name, and the clinic address with a map pin. Never their email or phone. The physio sets this pin with a map link or their location. The location is read only if they tap the button. The pin is kept with their page and deleted with their account.
Our team checks every photo before it shows. A refused photo is deleted at once.
We count visits to a physio’s page without cookies. To count each person once a day, we keep a fingerprint of the IP address and the browser. It is deleted after two days. The physio sees daily totals only.
A physio can note where they stand with each patient: to call back (or to answer), called, follow-up. Only they see this note.
To write to a physio, a patient signs in with a mobile number, checked by a code. An older account can also sign in with its email. When signing up, the patient gives a first name and may give a city. The physio sees the first name and the city. If Kinero asks you to check your number on WhatsApp, the physio you write to sees it too.
To fight fake accounts, the Kinero team sees which physios a patient account writes to, when, and how many messages. It never sees what they say. It also sees the account’s numbers, and can suspend an account or block a number that breaks the terms.
Anyone can report an account and block the other side. We keep a report 24 months: the category, your words and the team’s decision. A reported conversation stays readable by the team until its decision. Each reading is recorded.
If the team closes an account, we keep a fingerprint of its email and its numbers on a block list. The fingerprint cannot be turned back into the address. They serve to stop a new account, until the team lifts the closure.
Our forms ask nothing about your health. Your messages may speak of it. Write only what is useful to the physio, and no medical documents. The Kinero team does not read messages, except a reported conversation, while it decides what to do.
A conversation is deleted 12 months after its last message, and with either person’s account. Notification emails never contain the message.
The “Near me” button uses your phone’s position to find the nearest city, on the phone itself. Your position is neither sent nor kept.
If you contact a physio through the quick form: your first name and your phone number. The number is shown to that physio, with your consent, so they can call you back. The Kinero team sees it too, to fight fake accounts. It is deleted with the conversation, 12 months after the last message.
Session requests
When you request a session from a physio, we keep the physio, the time you chose and the place: at the clinic or at home. We also keep the reason you picked among six (Back, Knee, Shoulder, After surgery, Sport, Other) and your optional note, 200 characters at most. For a home visit, we keep your neighbourhood and your address.
The reason may say something about your health. It serves only the physio you write to. Do not put medical details in your note.
That physio sees your first name, the time, the place, the reason, your note and your neighbourhood. They see your address only if they accept. If your number is checked, they see it too, to write to you on WhatsApp.
No screen of the Kinero team shows the reason or your note. Notifications and emails give the names, the day, the time and “at the clinic” or “at home”. Never the reason, the note or the address.
We also keep each step and who took it: the request, the acceptance or refusal, a withdrawal, a cancellation. A cancellation less than 12 hours before the session is marked as late. A booking made on a clinic’s diary keeps the same record, without a reason.
“Add to Google Calendar” opens Google’s page with the physio’s name, the time and the place. Nothing goes to Google until you open it. The .ics file stays on your phone.
A physio can create a private calendar link. It shows their confirmed sessions with the patient’s first name, the time, the place and the neighbourhood. Never a number, a reason, a note or an address. We keep only a fingerprint of the link, and the physio can turn it off at any time.
Your address and your note are deleted as soon as a request expires, is withdrawn or declined: the physio never accepted them. The rest is deleted 12 months after the session or the last step. Deleting your account also deletes your requests.
Signing in with your number, Google or WhatsApp
A patient signs in with a mobile number. The code goes by WhatsApp, or by SMS through Twilio. The number is then your login: it opens its account, or creates one with your first name. For 30 days, we keep each sign-in’s number, date, channel and the account it opened. It helps limit abuse. Kinero never sees the code of an SMS.
You can sign in with your Google account. Google then sends us your email address, your first name and an account identifier. We receive neither your Google password, nor your contacts, nor your photo, and we keep no access to your Google account. Google applies its own privacy policy to this sign-in.
If an address confirmed by Google matches an existing Kinero account, the two are linked.
You can also receive your codes on WhatsApp. A patient can then sign up with only a mobile number and a first name. A physio can add a number in their space. No other member sees your number, except the physio you write to with a checked number. The Kinero team sees it, to fight fake accounts.
The number is kept as long as the account exists and deleted with it. Each code expires after 10 minutes.
Paying for Apprendre+
Apprendre+ is paid by card through Stripe, our payment provider.
You enter your card on Stripe’s page. Kinero never sees your card number and does not keep it.
Kinero keeps your Stripe customer identifier, the subscription identifier, its status and the end date of the current period. We read your invoices at Stripe to show them to you.
Stripe sends us this data, and receives your email address and your payments. It may process them outside Morocco.
We keep this data while you are subscribed, then as long as accounting law requires. Invoices stay with Stripe.
The Apprendre helper
In an Apprendre lesson, you can ask for a word to be explained or ask a question. Your question and an extract of the lesson are sent to Anthropic, which provides the AI model, to prepare the answer.
Anthropic processes this data for us, in the United States. Under its terms, it does not use it to train its models. Your name and email are not sent to it.
Kinero keeps your exchanges with the helper, lesson by lesson, so you find the conversation again. Only your account sees them: the team does not read them.
They are deleted after 12 months, with your account, or as soon as you tap « Effacer l’historique » in the lesson.
Never write information about a patient in a question.
Your work in Apprendre
Apprendre keeps what helps you revise: the day of your next exam and its parts, the questions you missed, the screen you chose (day or night) and the milestones already celebrated.
A missed question leaves the list as soon as you answer it right. The ones you never review are deleted after 12 months. The exam plan is deleted two months after the exam date.
“Signaler une erreur” sends the Kinero team the lesson, the card and your words. The team does not see who wrote it. A report that has been handled is deleted after 12 months.
Only your account reads this data, except the reports, which the team reads. It is deleted with your account.
“Garder hors ligne” saves a lesson summary in your browser, on your phone. Kinero receives nothing from it. You erase it by clearing the site’s data in your browser.
Notifications on your device
If you tap “Turn on notifications”, we keep the address your browser gives us for this device, two keys, the browser’s name and the send dates.
A notification says who wrote, never what was written. It travels through the notification service of your browser’s maker (Google, Apple, Mozilla or Microsoft). That service cannot read it: the content is encrypted.
You can turn them off in Settings or in your browser’s settings. They stop when you sign out. The device is deleted after 60 days without a successful send, and with your account.
“Kinero news” is a short notice from the team about the service, for example a new feature. It is on by default. You turn it off in Notifications, without touching the others.
Activity in your physio space
To improve the service, we count each day your sign-ins and the times you open the physio space. We also keep the time of your last activity.
Nothing else: not the pages you view, your device or your IP address. Only the Kinero team sees these figures. They are never published.
Each day is deleted after 400 days. Everything is deleted with your account.
Changes
If this policy changes, the date and version number at the top of the page change too. People on the list are told by email of any important change.