Lojain Privacy Policy

Last updated: 9 October 2026 •  Provider: KIRA Holdings, Kuwait  •  Contact: info@kiraco.org

The Lojain app is a business tool for existing Lojain subscribers. It lets a business owner or team member manage their own WhatsApp customer conversations, contacts, campaigns and analytics from their iPhone. The app is provided free of charge to current Lojain customers; there are no purchases or subscriptions inside the app.

Who controls the data

Each business (tenant) is the controller of its own customer data. KIRA Holdings acts as the processor that operates the platform on the business's behalf. A user only ever sees data belonging to their own business account; data is strictly isolated per business.

What the app accesses

• Account & sign-in: your username and a securely hashed password to log you in, and short-lived access tokens kept in the device Keychain.
• Business data you already own: your WhatsApp conversations, contacts (name, phone, CRM stage), message history, campaign and analytics figures, shown so you can manage them.
• Device push token (optional): if you enable notifications, an Apple push token so we can alert you to new messages. You can disable this anytime in iOS Settings.
• Diagnostics: minimal error logs to keep the service reliable.

What we do NOT do

• No advertising and no third-party tracking, the app does not track you across other apps or websites.
• We do not sell personal data.
• We do not access your iPhone's personal contacts or location. Photos, videos, files and voice notes are accessed only when you choose to attach or record them in a conversation, and are uploaded only when you send them.
• Face ID, if you turn it on, is handled by iOS on your device. We never receive biometric data.

How data is used

Only to provide the service: authenticate you, display your business's conversations and analytics, send notifications you opted into, and keep the platform secure and working.

Retention & deletion

Business data is retained for as long as the business's account is active. You can delete your app account from inside the app (Settings → Delete Account); this removes your user login, sessions and registered devices. Deleting the business's overall subscription is handled separately with KIRA. To request data removal, contact info@kiraco.org.

Security

Passwords are stored only as bcrypt hashes; sign-in uses short-lived signed tokens; all traffic is encrypted over HTTPS; data access is strictly scoped to your business account.

Children

Lojain is a business tool and is not directed to children under 16.

Changes

We may update this policy; the "last updated" date will change. Material changes will be communicated to account holders.

Contact

KIRA Holdings, Kuwait. Email: info@kiraco.org.