Privacy Policy

Information we process

• Sign-in information: your country calling code, phone number, one-time WhatsApp verification code, and authentication status.
• Student information from your existing Lougha record: your name, internal student/contact identifier, level, course or group, class schedule, teacher, and student notifications.
• Technical and security information: app version, device platform, IP address, request timestamps, and login or error events. Phone numbers are masked in application audit logs.
• Security credentials: signed session and trusted-device tokens stored in secure storage on your device.

How we use information

• Authenticate you and protect student accounts from unauthorized access.
• Show your student profile, level, upcoming classes, teachers, and notifications.
• Send one-time sign-in codes through WhatsApp.
• Operate, secure, troubleshoot, and improve the reliability of the service.
• Respond to support, privacy, and legal requests.

Sharing and service providers

We do not sell personal information. The app contains no advertising and does not use an advertising ID or advertising trackers.

We share information only when needed to provide the service, including with Meta/WhatsApp for sign-in messages, HubSpot for existing student records, and our hosting, database, network, and security providers. We may also disclose information when required by law or to protect users, Lougha, or the public.

Device access and security

The Android app requests internet access. It does not request access to your precise location, contacts, camera, or microphone. Data is transmitted over encrypted HTTPS connections, and authentication credentials are kept in secure device storage. No system can be guaranteed completely secure, but we use reasonable technical and organizational safeguards.

Retention

One-time codes expire after five minutes, and support access links expire after seven days. Their database records are removed after expiry and a short security window, normally within 24 hours. Ordinary mobile sessions normally expire after 30 days; a support-assisted session and trusted-device token may remain valid for up to 400 days and be renewed while the app is actively used. Student and educational records are kept while needed to provide the service, maintain legitimate school records, resolve disputes, and meet legal obligations. We delete or anonymize information when it is no longer needed for those purposes.

Your choices and requests

You can sign out to remove the active session from the app. Request permanent account deletion directly from Profile → Delete my account or the account deletion page. No email or phone call is required, and you do not need another account or a new password. We complete deletion within 30 days and confirm it using your registered contact details. Only information legally required to be retained may remain. For access, correction or other privacy requests, contact us using the email below.

Children and students

Lougha is an educational service for registered students. When a learner is below the age at which they can provide consent on their own, enrollment and use should be authorized by a parent, guardian, or other authorized institution representative. We do not use student information for behavioral advertising.

International processing

Our company and service providers may process information in countries other than the one where you live. Where required, we use appropriate measures to protect information during international processing.

Changes to this policy

We may update this policy when the app, our practices, or legal requirements change. The latest version and its update date will remain available on this page.