Last updated: 5 November 2026 · Applies to the Lamha app and website at lamha.zwain.net
Privacy policy
Lamha gives you weather alerts, news briefings and gold and currency prices for your city. We collect only what the app needs to do that. We do not sell your data, show ads, or use tracking or advertising cookies.
What we collect
- Account (optional). If you create an account: your email address, an optional name, your password stored only as a salted one-way hash (we can't read it), and your email-notification settings. You can use Lamha without an account.
- Your area and alert settings. When you turn on notifications, we store the city you chose, or your device's location if you allow it, plus your language, the alert types you picked and your quiet hours, so the server can check the weather for your area every 15 minutes.
- Notification address. A technical address from your phone's or browser's push service (Apple, Google or Mozilla), used only to deliver Lamha's notifications to that device.
- Questions you ask. Text you type into "Ask Lamha" is sent to our AI provider to produce an answer. We don't keep it after answering.
- Technical logs. Our hosting provider records IP addresses and requests for security and troubleshooting, for a limited time.
- On your device. Your settings (language, theme, city, voice) are saved in your browser's storage on your device.
How we use it
- To show weather, alerts, news, AI summaries and prices for your area.
- To send the notifications and emails you turned on, and password-reset emails you ask for.
- To keep the service secure, for example by limiting repeated password-reset requests.
Who we share it with
Only with services that help run Lamha, and only what each one needs:
- Railway: hosts Lamha's server and stores the data above.
- Open-Meteo: receives your area's coordinates (rounded to about 100 m) to return the forecast, and city names you search for.
- BigDataCloud: if you use your location, your device asks it for the name of your city.
- Wikipedia: your device asks it for a photo of your city by name.
- Google (Gemini API): receives your "Ask Lamha" questions together with your city's forecast, today's headlines and prices, and creates news summaries from public headlines. On Google's free tier, Google may use this text to improve its services, so please don't type personal information into "Ask Lamha".
- Resend: delivers emails (alerts, briefings, password reset) to your email address, if email is turned on.
- Apple, Google, Mozilla push services: carry notifications to your device.
News, gold, currency and dollar-market data are fetched by our server from public sources. No personal data is sent to them. We may disclose information if the law requires it.
How long we keep it
- Account data: until you delete your account.
- Notification settings without an account: until you turn notifications off or the push service ends the subscription.
- Password-reset links: 30 minutes, and only a hash of each link is stored.
- Server logs: kept by our hosting provider for a limited period.
Your choices and rights
- Delete your account at any time in the app: Menu → Account → Delete account. This immediately deletes your account, sign-ins, reset links and the alert subscriptions linked to it.
- Turn notifications and location on or off in the app or in your phone's settings.
- Ask us for a copy of your data, or to correct or delete it, at the address under Support.
Security
All traffic uses HTTPS. Passwords are stored only as salted hashes. Sign-in sessions on other devices end when you reset your password.
Children
Lamha is not directed to children under 13, and we don't knowingly collect their personal information.
Changes
If we change this policy, we will update the date above and, for important changes, tell you in the app.