Privacy policy

01Who is responsible

The service is operated by WalaPlay, who is responsible for your data ("we"). For any question about your data, write to walaplayapp@gmail.com.

02Data we collect

• Device data: the device identifier (MAC address), model, app version, activation status and dates, and the IP address and app signature (user agent) used when the device registered.
• Device security keys: a public key generated by your device, and an access token that we store only as a fingerprint (hash). The matching private key never leaves your device.
• Playlists: you add them yourself, from the app or the portal. On current app versions they are sealed with your device's public key before being stored: only your device can open them, and we cannot read their address, username or password. We keep only a short label (server name and the beginning of the username) so you can recognise each playlist in the portal.
• Reseller accounts: name, email, password (stored as a one-way hash), credit balance and history, referral code, and the activations performed.
• Payments: payments are processed by PayPal. We receive the payer's email, the amount, the date and the transaction reference. We never see card or bank details.
• Technical data: server logs (IP address, date, page requested) and the cookies strictly needed for sign-in, security and your language choice.

03What we do not collect

• We do not record what you watch, the channels you open or your viewing history.
• No advertising, no profiling, no sale of data.
• No tracking or advertising cookies.

04Why we use it

• To activate your device and keep it working: status, expiry date, delivery of your playlists to your device.
• To prevent abuse of the free trial (for example a limit of trials per IP address).
• To manage reseller accounts, credits and payments.
• To answer your support requests.
• To meet our legal and accounting obligations.

05Who we share it with

Only what each provider needs to do its job: our hosting provider, Cloudflare (protection against bots and attacks) and PayPal (payments). We disclose data to authorities only when the law requires it. We never sell your data.

06How long we keep it

• Device and playlist data: as long as the device uses the service. You can ask us to delete it at any time.
• Reseller accounts: as long as the account is open.
• Payment records: for the period required by accounting and tax law.
• Server logs: for a limited period, for security purposes.

07Security

Connections are encrypted (HTTPS), playlists are sealed per device, passwords are hashed, and sign-in pages are protected against automated attacks. No system is completely secure, but we keep the data we hold to the minimum.

08Your rights

Under the data protection law that applies to you (for example Moroccan Law 09-08 or, in the European Union, the GDPR), you can access, correct or delete your data, object to its use and ask for a copy. Write to walaplayapp@gmail.com with your device MAC address or your account email. You can delete your playlists yourself at any time from the portal.

You can also lodge a complaint with the data protection authority of your country (in Morocco, the CNDP).

09Children

The service is not directed at children under 16, and we do not knowingly collect their data.

10International transfers

Our servers and providers may be located outside your country. We only use providers that offer appropriate safeguards for your data.

11Changes to this policy

We may update this policy. The date at the top of the page shows the latest change; significant changes are announced on the website.