Data Governance

Data Protection Principles

Last Updated: September 12, 2026 • Operator: Lienskill Limited

1. Operator & Data Responsibility

Zaloba is a communications platform operated by Lienskill Limited ("Lienskill", "we", "us"), a company incorporated in Kenya. As the Data Controller, Lienskill Limited is committed to responsible, lawful, and transparent management of personal data across the Zaloba ecosystem.

This document outlines our data protection framework in accordance with applicable data protection legislation. For comprehensive details on specific features and data flows, please consult our complete Zaloba Privacy Policy.

2. Categories of Personal Data Handled

We adhere to data minimization, collecting only information required to provide and secure communications:

Account & Registration Data: Verified email address, email verification credentials, assigned 16-digit Zaloba Number, display name, optional biography, and avatar.
Communication Content: User-transmitted messages, user-selected photos and videos, voice notes, and 48-Hour Status updates.
Relational & Safety Data: In-app contact relationships, audience privacy preferences, blocked account records, and trust & safety reports. (Zaloba does not upload or scrape your mobile device address book).
Technical & Diagnostic Data: IP addresses, browser user-agent, operating system details, and session tokens utilized for connection routing, linked-device management, and defensive security.

3. Purposes of Processing & Lawful Bases

Under applicable data protection legislation, personal data is processed under established lawful bases:

Contractual Necessity

Registering accounts, verifying email ownership, assigning Zaloba Numbers, synchronizing messages, and facilitating real-time calls and meetings.

Legitimate Interests

Protecting platform infrastructure against malicious attacks, rate-limiting abusive requests, and managing linked-device authorization.

Legal & Vital Obligations

Enforcing Child Protection and Safety standards, investigating reported abuse, and complying with lawful statutory requirements.

Consent

Optional profile enhancements and user-initiated device permissions (such as camera and microphone access).

4. User Rights Under Applicable Data Protection Law

Subject to statutory conditions in your jurisdiction, you may exercise data protection rights including:

Right to be Informed: Transparent information concerning data collection and usage.
Right of Access: Requesting confirmation and details of personal data associated with your account.
Right to Rectification: Updating inaccurate account and profile records.
Right to Erasure: Requesting the deletion of your account and personal data.
Right to Restrict or Object: Requesting limitations on specific processing operations.
Right to Data Portability: Requesting your personal data in a structured, machine-readable format.

5. Retention and Deletion Principles

Personal data is retained only as long as necessary for the purpose for which it was collected:

Account records are maintained while your account remains active.
48-Hour Status media updates expire automatically 48 hours after publication.
Deleting your Zaloba account terminates access to the account and initiates removal or de-identification of personal data associated with it, subject to technical, legal, safety, backup, and shared-conversation retention requirements. Content already delivered to other participants may remain in their conversation history where appropriate.

Users may submit an account deletion request through our public resource at https://zaloba.chat/account-deletion.

6. Service Providers & Cross-Border Transfers

Lienskill Limited engages technical service providers (such as cloud infrastructure providers, object-storage providers, network/media relay infrastructure, and transactional email providers) who act strictly as processors under contractual confidentiality and data-protection terms on our instructions.

Where technical service delivery requires data transmission across national boundaries, transfers are handled subject to applicable data protection law and appropriate organizational and contractual safeguards where required.

7. Technical & Organizational Safeguards

We maintain technical and organizational safeguards, including:

Transport encryption across public connections and media signaling channels.
Role-based administrative access controls governing internal systems.
Cryptographic hashing of verification passcodes and session tokens.
Defensive rate limiting to prevent unauthorized automated access.

8. Submitting a Data Protection Request

To exercise your rights or submit a privacy inquiry, contact Lienskill Limited's Privacy Team:

Lienskill Limited — Privacy Contact

Email: privacy@zaloba.chat with the subject line [Data Protection Enquiry]. Please include your registered email address or Zaloba Number so our team can verify account ownership.