Privacy Policy

Information we process

• Sign-in information: your country calling code, phone number, one-time WhatsApp verification code, and authentication status.
• Student information from your existing Lougha record: your name, internal student/contact identifier, level, course or group, class schedule, teacher, and student notifications.
• Technical and security information: app version, device platform, IP address, request timestamps, and login or error events. Phone numbers are masked in application audit logs.
• Security credentials: signed session and trusted-device tokens stored in secure storage on your device.

How we use information

• Authenticate you and protect student accounts from unauthorized access.
• Show your student profile, level, upcoming classes, teachers, and notifications.
• Send one-time sign-in codes through WhatsApp.
• Operate, secure, troubleshoot, and improve the reliability of the service.
• Respond to support, privacy, and legal requests.

Sharing and service providers

We do not sell personal information. The app contains no advertising and does not use an advertising ID or advertising trackers.

We share information only when needed to provide the service, including with Meta/WhatsApp for sign-in messages, HubSpot for existing student records, and our hosting, database, network, and security providers. We may also disclose information when required by law or to protect users, Lougha, or the public.

Device access and security

The Android app requests internet access. It does not request access to your precise location, contacts, camera, or microphone. Data is transmitted over encrypted HTTPS connections, and authentication credentials are kept in secure device storage. No system can be guaranteed completely secure, but we use reasonable technical and organizational safeguards.

Retention

One-time codes expire after five minutes, and one-time support access links expire after 15 minutes. Their database records are removed after a short security window, normally within 24 hours. Ordinary mobile sessions normally expire after 30 days; a support-assisted session and trusted-device token may remain valid for up to 400 days and be renewed while the app is actively used. Student and educational records are kept while needed to provide the service, maintain legitimate school records, resolve disputes, and meet legal obligations. We delete or anonymize information when it is no longer needed for those purposes.

Your choices and requests

You can sign out to remove the active session from the app. To request access, correction, deletion, or another privacy action concerning your Lougha student record, contact us using the email below. We may need to verify your identity and may retain information where the law or legitimate educational record-keeping requires it.

Children and students

Lougha is an educational service for registered students. When a learner is below the age at which they can provide consent on their own, enrollment and use should be authorized by a parent, guardian, or other authorized institution representative. We do not use student information for behavioral advertising.

International processing

Our company and service providers may process information in countries other than the one where you live. Where required, we use appropriate measures to protect information during international processing.

Changes to this policy

We may update this policy when the app, our practices, or legal requirements change. The latest version and its update date will remain available on this page.