This policy explains how the operator of the Lamha app collects, processes, discloses, stores and destroys personal data. It is read with the Terms of Use and issued under the Saudi Personal Data Protection Law and its implementing regulations (the "Law").
1. Definitions
- "Lamha", "we": the operator of the Lamha app and joinlamha.com, as data controller.
- "Service": the app, the site, and related servers and support.
- "You": any natural person who uses the Service or visits the site.
- "Personal data", "processing", "destruction": as defined in the Law.
- "Session": the visibility period you start in the app, ending when its time runs out or you stop it.
2. Controller and contact
The controller is the Lamha app. For any request or question about your data, including those for a data protection officer once appointed, write to support@joinlamha.com.
3. Scope
This policy covers our processing of your data through the Service. It does not cover third-party services, including Apple and Snapchat, or what other users do with what you share with them.
4. Acceptance and consent
This policy is presented to you before an account is created and your data is collected. Your agreement at sign-up, and your device permissions for location, notifications and photos, are your consent to processing that relies on consent. Your consent is not required where the Law allows processing without it. You may withdraw consent at any time under clause 14; withdrawal does not affect processing done before it.
5. Data we process, purposes, bases and retention
The table lists each category with its source, purpose, legal basis and retention. Consent is the basis wherever it is named, and contract means providing the service you asked for under the Terms.
| Category | Source | Purpose | Basis | Retention |
|---|---|---|---|---|
| Phone number | You, at sign-up | Creating, verifying and accessing the account; preventing multiple accounts and abuse | Contract; legitimate interest | While the account exists, then destroyed under clause 12 |
| Verification SMS log (number, send time, request ID) | Generated automatically | Applying send limits and preventing SMS abuse | Legitimate interest | 30 days |
| Number fingerprint: a keyed hash that does not reveal the number, with first-seen date and ban flag | Derived from your number | Preventing invite abuse and the return of banned accounts | Legitimate interest | Kept after account deletion for as long as the service runs |
| Date of birth | You | Verifying the age requirement | Contract; legal obligation where applicable | While the account exists |
| Alias, mood, character color, theme, account code | You, or generated | Providing the service, showing you to nearby users, identifying your account in support | Contract | While the account exists |
| Precise geolocation | Your device, after your permission, only during a session you start, including in the background or with the screen locked | Finding users within 300 meters | Explicit consent | Latest position only, deleted within minutes of expiring or of the session ending. No movement history is kept |
| Session data (start, end, mood, peak nearby count, no place) | Generated automatically | Applying plan limits and aggregate service metrics | Contract; legitimate interest | While the account exists |
| Record of contact requests and conversations (the two parties, times and status, without message content) | You, or generated | Applying plan limits and contact rules, reviewing reports | Contract; legitimate interest | While the account exists, then destroyed under section 12 |
| Text, photos and Snap cards inside a conversation | You and other users | Delivering content, reviewing reports, protecting users | Contract; legitimate interest | Kept until the conversation ends or is deleted. A conversation lasts 24 hours, 48 hours or 7 days, set by the higher plan of the two people. After it ends the content disappears for both sides. Text is kept encrypted for 30 days and photos for 7 days, for reviewing reports only, then deleted. Pinning ends with the conversation, and pinned messages follow the same periods. A message its sender deletes keeps an encrypted copy for the same periods. Anything tied to a report stays until it is resolved |
| Snapchat username, if added | You | Sharing it with a person you send a Snap request to, once accepted | Consent | Until you remove it or delete your account. It stays on the recipient's card until they delete it or either account is deleted |
| Reports, blocks, violations, excerpt of violating content, trust score, moderation decisions | You, others, or generated | Moderation, enforcing the terms, protecting users | Legitimate interest; legal obligation where applicable | Excerpts are erased after 7 days. The rest stays while the account exists, or until the report or dispute ends |
| Support tickets and messages | You | Answering your requests | Contract | While the account exists |
| Push token, vendor device identifier, device language | Your device | Sending notifications in your language | Contract | Until sign-out or account deletion |
| Notification history and send queue | Generated automatically | Showing and sending notifications | Contract | 30 days for history, 2 days for the queue |
| Invite and reward data | Generated automatically | Counting invite rewards | Contract | While the account exists |
| Subscription data (product, original transaction ID, status, expiry) | Apple | Activating your plan | Contract; legal obligation | While the account exists and as the law then requires. We never receive card data |
| Technical logs (IP address, device or browser type, request time, errors) | Generated when you use the app or site | Running and securing the service, detecting abuse | Legitimate interest | As long as needed for security and diagnosis, then deleted or overwritten |
| Email correspondence | You | Answering you | Legitimate interest | As long as needed to handle the matter |
We do not collect contacts, ask for a selfie or identity document, or knowingly collect health, credit, religious or political data. Please do not send such data in messages. Mandatory data is data the Service cannot run without; not providing it prevents creating the account or using the feature concerned.
6. Geolocation
We treat precise location with the care due to sensitive data. It is collected only during a session you start, continues during that session while the app is in the background or the screen is locked, and stops when the session ends. Your coordinates reach no user, and we show no distance, direction or map. Appearing to people around you does by nature mean you are within 300 meters of them, and in a quiet place someone may work out who you are. You can withdraw the permission in device settings; sessions then stop working.
7. What others see
- Nearby users see your alias, mood and character color during a session.
- A person you accept contact with sees what you send, and may keep it or photograph it with another device; we cannot prevent that. A message leaving the interface does not mean copies held by the recipient are destroyed.
- Authorized Lamha staff can see messages tied to a report, and what is needed for support, moderation and enforcing the Terms, on a minimum-necessary basis. Messages are not end-to-end encrypted.
8. Automated processing and moderation
We automatically scan text and names for violating content and shared phone numbers. This can automatically block content, record a violation, lower a trust score, mute or temporarily suspend an account. Permanent bans are made by a human only. You may ask for human review of any automated decision about you using the contact in clause 2.
9. Disclosure
We do not sell or rent your data or use or share it for advertising or tracking. We disclose it only as follows:
- Service providers: Authentica to send verification codes (phone number); Apple to deliver notifications and handle subscriptions (device token, notification text, purchase data); OVH to host the server we run; Google for site fonts (IP address when you visit the site); Cloudflare for DNS. Each processes data only within its role.
- Other users: under clause 7.
- Authorities: where a law, judgment or lawful request requires it, where needed to protect public health or safety or someone's life, to establish or defend a right, or to investigate a crime or violation.
- Restructuring: if the Service is transferred, merged or sold, provided the new party is bound by no less than this policy and you are told before the transfer.
10. Transfers outside the Kingdom
Your data is stored and processed on a server in the Federal Republic of Germany, and the listed providers may process it in other countries, all outside Saudi Arabia. Transfers are limited to the minimum needed to provide the Service and follow the provisions of the Law and its regulations on transfers outside the Kingdom. By accepting this policy you acknowledge these transfers.
11. Security
We apply appropriate organizational and technical measures, including encrypted traffic between the app and the server, row-level access permissions, logging of admin actions, and never showing a number or coordinates to any user. No system is absolutely secure and we do not guarantee the absence of risk. You must protect your device and never share verification codes.
12. Retention, destruction and account deletion
We keep data for the periods in clause 5, then destroy it or make it non-identifying. You can delete your account in the app: Account, then Delete account. The account stops at once; its session, location, devices, saved cards and Snapchat username are removed; and its data is destroyed within 30 days, except:
- The number fingerprint in clause 5.
- Anything tied to a report or conversation under review, until it ends; sign-in stays blocked meanwhile.
- What the Law requires us to keep, or what is needed to establish or defend a right.
- Backups, if any, until their cycle ends.
Deleting the account does not cancel an Apple subscription.
13. Age
The Service is for people 18 and older, and we do not knowingly collect data from anyone younger. If we find an account belonging to a minor we suspend it and destroy its data. A guardian who learns of one should write to us.
14. Your rights
Under the Law, and subject to its conditions and exceptions, you may:
- Be informed how and why your data is collected and on what basis.
- Access your data and obtain a copy in a clear format.
- Ask for it to be corrected, updated or completed.
- Ask for its destruction when no longer needed.
- Withdraw consent.
- Ask for human review of automated decisions under clause 8.
- Complain to the competent authority under clause 16.
15. Exercising your rights
Send your request through support in the app or to support@joinlamha.com. We may ask for proof that the account is yours. We respond within the statutory period, no later than 30 days from a complete request, which may be extended where the Law allows, with notice to you. This is free. We may refuse a repeated or unreasonable request, or one that conflicts with the Law, and will give the reason.
16. Breaches and complaints
If a leak of or unlawful access to your data occurs, we notify the Saudi Data and AI Authority within 72 hours of learning of it where the Law requires, and notify you without undue delay if it could harm you, with what you should do. We welcome complaints first through the contact above, and you may file one with the Saudi Data and AI Authority as the competent authority.
17. Site and cookies
joinlamha.com uses no advertising or analytics cookies. The server keeps technical logs, and your browser loads fonts from Google, which receives your IP address. The app stores preferences such as language and appearance on your device, and sign-in tokens in the device's secure storage.
18. Third-party links
If you move from the Service to another service, such as Snapchat, that service's policy governs your data there.
19. Changes
We may change this policy. We publish the changed version with its date and tell you in the app before any material change applies. If a change alters the purpose of consent-based processing, we ask for your consent again.
20. Language and governing law
This policy is governed by the laws of Saudi Arabia. The Arabic version prevails if the two differ. If a provision is held invalid, the rest stays in force.