FastCloudLast updated: 11 November 2026
This policy covers the FastCloud app for Android, the hosted service at fastcloud.lexalgeria.com and the mobile gateway at mobile-fastcloud.lexalgeria.com, all published by Lex Algeria ("we", "us").
1. Who is responsible for your data
FastCloud is a collaboration suite: files, chat and calls, mail, calendar, contacts, notes and tasks. The app connects to a FastCloud server that you choose:
- Our hosted service. We are responsible for your account and technical data (sections 2 and 3). We keep the content of a workspace for the organization that owns it, and process it only to provide the service.
- A server run by your own organization. That organization is responsible for everything stored on its server and for its own privacy policy. This policy then covers only what the app and our mobile gateway do.
This policy follows Algerian law no. 18-07 of 10 June 2018 on the protection of natural persons in the processing of personal data, as amended by law no. 25-11 of 24 July 2025.
2. Data we process
- Account: name, e-mail address, picture, language, your role in the organization, and how you sign in. A password is stored only as an Argon2id hash. Two-step verification is optional.
- Content you create or send: files, messages, mail, calendar events, contacts, notes, tasks, pictures, scans and voice messages. It is stored on your workspace's server. Calls are not recorded: their audio and video go live to the organization's media server.
- Your devices: the phone's name and model, a key the app creates on the phone, the app version and a push registration token, so that you can see and end your devices.
- Technical data: IP address, app or browser version, date and time of connections, and security logs.
- Crash reports (a switch in Settings): technical data only. No content, no names, no account or device identifier; addresses are masked. They go to our mobile gateway.
- Phone calendar and contacts: only if you turn that synchronization on in Settings.
3. Why we use it, and on what basis
- To give you the service: sign-in, your workspace, notifications and calls (performance of the contract of use).
- To keep it secure and prevent abuse (our legitimate interest in the security of the service).
- To let you see and end your devices.
- To improve reliability, from crash reports you chose to send (your consent).
- To meet legal obligations.
We do not show advertising, do not sell your data, and do not use it for marketing profiles.
4. What the app asks your phone for
Each permission is asked only when you use the feature, and the app works without the optional ones.
- Camera and microphone: video calls, voice messages, photos and document scans.
- Notifications and full-screen alerts: messages, mentions and incoming calls.
- Calendar and contacts: only for the optional two-way synchronization and caller identification.
- Biometrics: the optional app lock. The phone's system checks your fingerprint or face; the app never receives it.
The app does not request your location, your SMS or call history, or access to all your files (files are chosen with the system picker).
5. Who receives data
- Your organization's administrators see what their role allows (members, devices, audit logs).
- Push messages travel through our relay and Google's Firebase Cloud Messaging. The payload is encrypted end to end between the server and your phone; the relay and Google see the encrypted payload and the registration token, not the content.
- Providers that process data on our behalf, only for the purposes above and bound by confidentiality (today, Google's Firebase Cloud Messaging for delivering push messages, as described above).
- Authorities, when the law requires it.
6. Where data is kept
The hosted service runs on servers operated by Lex Algeria. We transfer personal data outside Algeria only as the law allows and, where required, with the authorization of the national data protection authority.
7. Security
Connections use HTTPS. Passwords are hashed (Argon2id). Secrets stored by the service are encrypted (AES-256-GCM). Devices sign in with a key held in the phone's secure hardware, and a lost device can be signed out. Access to our servers is limited to authorized staff. If a breach presents a risk to you, we notify the authority and the people concerned.
8. How long we keep it, and deleting it
We keep your data while your account is active. When you or your organization delete the account, it is closed at once and erased from the live service after 30 days. Backups of our servers rotate out on a schedule, and the oldest are kept for up to 6 months; erased data can remain in a backup until then and is used for nothing else. Security records that refer to the account are kept for 1 year, unless a law requires us to keep data longer. Crash reports are kept only for as long as needed to fix the fault.
To delete your account or data on the hosted service, follow how to delete your account and data: ask your organization's administrators, or write to the address in section 12.
9. Your rights
You can ask for access, rectification, erasure, objection, portability of your data and withdraw consent at any time. Write to the address in section 12. If you are not satisfied, you may complain to the Autorité nationale de protection des données à caractère personnel.
10. Cookies
The service uses only the cookies it needs to work (sign-in session and preferences). There are no advertising cookies and no third-party analytics.
11. Age
FastCloud is made for work and is for people aged 18 and over.
12. Contact and changes
Privacy questions and requests: jugu@lexalgeria.com.
If we change this policy we will update the date above and tell you in the app. If we add optional features that process your content differently, for example assistants based on artificial intelligence, we will describe them here first, and they will stay off until you or your organization turn them on.