1. Overview
KhoeliMedia ("we", "us", "our", "the Platform") operates a community-driven digital platform based in Kingdom of Lesotho that connects people, events, communities, projects, and places across Lesotho. This Privacy Policy explains what personal information we collect, why we collect it, how we use it, and the choices you have.
By creating an account, using our services, or interacting with any part of the Platform, you agree to the practices described in this policy. If you do not agree, please do not use the Platform.
2. Who We Are
KhoeliMedia is the data controller for personal information processed through the Platform. That means we decide why and how your data is used.
| Platform Name | KhoeliMedia |
| Website | https://khoelimedia.com/ |
| Jurisdiction | Kingdom of Lesotho |
| Privacy Contact | admin@khoelimedia.com |
3. Data We Collect
3.1 Information You Provide
| Data Type | Examples | When Collected |
|---|---|---|
| Identity & Account Required | First name, last name, handle, phone number, password | Sign-up, profile update |
| Contact Optional | Email address, phone number | Sign-up, invite sending, feedback forms |
| Profile Optional | Bio, avatar, banner, date of birth, gender, district, location, website, social handles (X, Instagram, Facebook, TikTok) | Profile editor |
| Content | Events you create, communities and places you add, projects, posts, comments, reviews, votes, RSVPs, uploaded images | When you use Platform features |
| Communications | Messages sent through chat, invite messages, bug reports, feedback, support requests | When you interact with others or support |
| Facebook Login Optional | Facebook user ID, name, profile picture, and email address (if you grant the email permission) | When you sign in or sign up with Facebook |
| Feedback & Bug Reports | Title, description, steps, screenshots, contact email | When you submit a report |
3.2 Information Collected Automatically
| Data Type | Examples |
|---|---|
| Device & Browser Automatic | User agent, browser name and version, operating system, screen size |
| Usage Data | Pages visited, features used, timestamps, session duration, clicks |
| Session & Security | Session cookies, CSRF tokens, IP address (for rate-limiting and abuse prevention) |
| Location Optional | Approximate location (only if you grant browser permission — used for "Use my location" in event/place forms) |
3.3 Information About Others
If you invite someone to KhoeliMedia through our invite feature, you provide their phone number or email address. You confirm that you have their permission to share this information with us for the purpose of sending a one-time invitation.
4. How We Use Your Data
We use your information for the following purposes:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Provide core services | Account, profile, content, sessions | Contract performance |
| Authenticate & secure your account | Credentials, OTP codes, session cookies | Contract performance & legitimate interest |
| Show relevant events, communities, places, projects | Location, interests, engagement history | Legitimate interest |
| Enable social features (chat, comments, RSVPs, votes) | Handle, user ID, content you post | Contract performance |
| Prevent abuse, fraud, spam, and threats | IP, device info, activity logs, reports | Legitimate interest & legal obligation |
| Serve advertising (via Google AdSense) | Cookies, device data, approximate location | Consent (where required) |
| Send transactional messages (OTP, password reset) | Phone number, email | Contract performance |
| Improve the Platform (analytics, bug fixes) | Usage data, feedback reports | Legitimate interest |
| Comply with the law | As required by lawful requests | Legal obligation |
We do not use your personal information to make automated decisions that produce legal or similarly significant effects concerning you.
7. Advertising (Google AdSense)
KhoeliMedia is a free platform supported by advertising. We use Google AdSense to display advertisements on public pages. Google and its partners may use cookies and similar technologies to:
- Show ads based on your prior visits to this and other websites
- Measure ad performance
- Prevent fraud and ensure ad integrity
Google's use of advertising cookies enables it and its partners to serve ads based on your visit to our site and/or other sites on the Internet. You may opt out of personalized advertising by visiting:
For more information about how Google collects and processes data, see Google's Privacy & Terms.
8. Third-Party Services
| Service | Purpose | Data Shared |
|---|---|---|
| Google AdSense | Advertising | Cookies, device info, approximate location |
| Meta Platforms (Facebook Login) | Authentication | Facebook user ID, name, profile picture, email (with permission) |
| Cloudflare (CDN) | Static assets, DDoS protection | IP address, request metadata |
| OpenStreetMap / Nominatim | Reverse geocoding (address lookup) | Coordinates when you use "Use my location" |
| Font Awesome / CDNs | Icons, scripts, stylesheets | IP address, referrer |
| SMS Gateway | OTP & invite delivery | Phone number, message content |
Each of these services has its own privacy policy. We encourage you to review them.
9. Facebook Login
KhoeliMedia lets you sign in or sign up using Facebook Login. If you choose this option, Meta Platforms, Inc. ("Facebook") authenticates you and shares certain information with us based on the permissions you approve on Facebook's consent screen.
9.1 Data We Receive from Facebook
| Data | Purpose |
|---|---|
| Facebook user ID (App-Scoped ID) | Identify and link your KhoeliMedia account |
| Name | Create your KhoeliMedia profile |
| Profile picture | Display as your avatar |
| Email address | Account recovery and notifications (only if you grant the email permission) |
We do not post to Facebook on your behalf, and we do not access your friends list, messages, or any data beyond what you explicitly authorize.
9.2 Your Choices
- You can sign up or log in with a phone number and password instead of Facebook.
- You can revoke KhoeliMedia's access anytime at Facebook Settings → Apps and Websites.
- You can delete your KhoeliMedia account at any time (see Section 12 — Your Rights).
9.3 Meta's Role
When you use Facebook Login, Meta also processes your data under its own privacy policy. See Meta's Privacy Policy and Meta Platform Terms.
10. Data Retention
We keep your personal information only as long as necessary to provide the Platform and fulfill the purposes described in this policy.
| Data | Retention Period |
|---|---|
| Account information | Until you delete your account |
| Facebook Login identifiers | Until you unlink Facebook or delete your account |
| Content you posted (events, communities, places, reviews) | Until you delete it, or account deletion |
| Messages / chats | Until you delete them or your account |
| Session cookies | Until you log out or session expires |
| Bug reports & feedback | Up to 3 years (for product improvement & audit) |
| Security logs (IP, abuse) | Up to 12 months |
| Financial / ad reports | As required by tax law |
11. Security
We take reasonable measures to protect your information, including:
- Encrypted passwords — stored using one-way hashing (never in plain text)
- HTTPS everywhere — all traffic is encrypted in transit
- Secure session cookies — HttpOnly, Secure, SameSite=Strict
- CSRF protection — tokens on all state-changing requests
- Rate limiting & abuse prevention — on login, signup, and API endpoints
- Access controls — only authorized personnel can access production systems
12. Your Rights
Depending on your jurisdiction, you may have the following rights:
- Access — request a copy of the personal data we hold about you
- Correction — update or fix inaccurate information
- Deletion — request deletion of your account and personal data, including data received via Facebook Login
- Portability — receive your data in a structured, machine-readable format
- Objection — object to certain processing (e.g., marketing, analytics)
- Withdraw consent — where processing is based on consent, withdraw it at any time
- Complaint — lodge a complaint with your local data protection authority
If you signed up with Facebook Login and delete your KhoeliMedia account, we will delete the Facebook-derived data we stored. To fully revoke access, also remove KhoeliMedia from Facebook → Settings → Apps and Websites.
To exercise any of these rights, email us at admin@khoelimedia.com. We will respond within 30 days.
13. Children's Privacy
KhoeliMedia is not intended for children under the age of 13 (or the minimum age required by law in your jurisdiction). We do not knowingly collect personal information from children under 13.
If you believe a child has provided us with personal information, please contact us at admin@khoelimedia.com and we will delete it promptly.
14. International Users
KhoeliMedia is based in Kingdom of Lesotho. If you access the Platform from outside Lesotho, your information may be transferred to, stored, and processed in Lesotho or in other countries where our service providers operate.
By using the Platform, you consent to the transfer of your information to these locations. We take steps to ensure your data receives adequate protection wherever it is processed.
15. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or the features we offer.
When we make material changes, we will:
- Update the "Last updated" date at the top of this page
- Notify you by email or in-app notice
- Where required, ask for your renewed consent
Your continued use of the Platform after changes take effect constitutes acceptance of the revised policy.
16. Contact Us
If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please reach out: