Privacy policy

Kinezy (kinezy.ma) is responsible for the personal data collected on the platform. We process it in line with Moroccan Law No. 09-08 on the protection of individuals with regard to the processing of personal data.

For any question, write to us (see “Contact us” at the bottom of this page).

• For every account: your name, your email address or WhatsApp number, your language, and your password, stored in an encrypted form that nobody at Kinezy can read.
• For a booking: the physiotherapist chosen and, if you picked one, the slot. We ask nothing about the health of the person being treated.
• For a « Find me a physio » request: the city or neighbourhood, the care sheet if you need one, who the visit is for (gender and age) and the physiotherapist’s gender you prefer.
• For a physiotherapist: the profile details (photo, description, diploma and institution, specialties, languages, cities and neighbourhoods covered, rates, hours), their phone number and the subscription payments the team records.
• Reviews and favourites: the rating and comment you leave, and the physiotherapists you save.
• Technical data: the IP address an account is opened from and each request is sent from (booking, « Notify me », « Find me a physio »), and encrypted traces of sign-in and code attempts, used to block abuse.

Kinezy asks nothing about your health: no prescription, no medical file, no test results, no description of the problem. What the person being treated needs, you explain to the physiotherapist directly on WhatsApp, outside Kinezy.

A booking only says that a visit is asked of a physiotherapist. It is only sent to the physiotherapist you chose (in their space and by email or WhatsApp), and only once you have ticked the box that allows it. A « Find me a physio » request is only read by the Kinezy team, which writes to you on WhatsApp and tells the physiotherapists it contacts about it.

• To open and secure your account, and confirm your email or WhatsApp number.
• To show physiotherapists’ public profiles and let patients find them.
• To pass a booking request to the physiotherapist and put you in touch.
• To verify physiotherapists before their profile is published.
• To manage physiotherapists’ subscriptions and remind them of renewal dates.
• To send you service messages by email or WhatsApp: codes, confirmations, password resets, news about your appointments.
• To prevent fraud, fake accounts and automated submissions.

We do not sell your data, we do not use it for advertising, and the site shows no ads.

• Anyone can see a physiotherapist’s public profile: name, photo, description, diploma, specialties, areas, rates if they choose to show them, and reviews.
• A physiotherapist’s number is never public. It is given only to a patient who has booked a slot with them, inside the WhatsApp link that lets the patient contact them.
• For each request, the physiotherapist sees the name and number of the person booking and, if they were given, the gender and age of the person being treated.
• A review is shown with its author’s first name only.

The conversation that follows on WhatsApp takes place between the patient and the physiotherapist, outside Kinezy, under WhatsApp’s own rules.

Some technical operations are handled by service providers, who use your data only to provide that service to us and are bound to protect it:

• hosting the site (Vercel) and the database (Supabase);
• storing photos (UploadThing);
• sending emails (Google Gmail, Resend) and signing physiotherapists in with Google;
• sending codes and notifications on WhatsApp (WasenderAPI);
• protection against automated submissions (Vercel BotID).

These providers are based, or process data, outside Morocco: in the European Union (the site and the database are hosted in Frankfurt) and in the United States. We only choose them if they commit to protecting your data, and we transfer nothing without following the rules of Law No. 09-08.

• Account, profile, appointments, reviews and favourites: for as long as your account is open. They are deleted with it.
• A physiotherapist’s subscription payments: kept after the account is deleted, without name or contact details, for as long as the law requires for accounting.
• WhatsApp codes: valid for 10 minutes, erased the next day.
• Sign-in session: 30 days at most without coming back to the site, then erased.
• IP addresses: erased 12 months after the account is opened or the request is sent.
• Anti-abuse traces: deleted automatically after 24 hours.
• Log of the team’s actions (approvals, recorded payments): 2 years.

Kinezy uses no advertising cookies and no audience-measurement tools. Only what the site needs to work is stored:

• session cookies that keep you signed in (a few minutes, renewed while you are active, and 30 days at most without coming back to the site);
• a cookie that remembers the language you chose;
• on a physiotherapist’s device, the draft of the profile being filled in, so it is not lost.

On the sign-in, sign-up and booking forms, a bot check looks at technical signals from the browser to block automated submissions.

We protect your data with appropriate technical and organisational measures: passwords and codes stored in an encrypted form, secured traffic and protection against repeated attempts. No system is infallible: if you notice anything unusual on your account, tell us.

Under Law No. 09-08, you can access your data, have it corrected and, on legitimate grounds, object to its processing. You can also have your account and the data linked to it deleted.

Much of this can be done directly from your account: profile, appointments, favourites, and “Delete my account” (at the bottom of your patient space, or in a physiotherapist’s settings). For the rest, write to us: we answer within 10 days, after checking that the request really comes from you.

If you believe your rights are not respected, you can refer the matter to Morocco’s National Commission for the Protection of Personal Data (CNDP).

We will update this policy if our practices or the law change. The date at the top of the page shows the latest update, and we will let you know of any important change.