“LIME” Privacy Policy

Date of Approval: April 18, 2022
Last Updated: November 1, 2025
One. General Provisions

1.1 We, the LIME application (“App”), are committed to protecting the confidentiality and privacy of users’ personal data. Your personal information is collected, processed, and used only on the basis of your electronic consent.
1.2 The collection, processing, and use of users’ personal information shall be governed by this Privacy Policy. This Policy complies with the Law of Mongolia on Personal Data Protection, and in cases of specially regulated relationships, that law shall prevail.
1.3 For the purposes of this Privacy Policy, the following terms shall have the meanings assigned to them below:
1.3.1 “Data Controller” or “We” refers to the company that collects, processes, and uses data based on the User’s electronic consent.
1.3.2 “Data Collection” means the obtaining, compiling, and recording of information.
1.3.3 “Data Collection” means the obtaining, compiling, and recording of information.
1.3.4 “Data Processing” means the classification, storage, analysis, modification, deletion, or restoration of information, or any combination thereof.
1.3.5 “Data Use” means the application, transmission, or review of information for operational purposes.
1.3.6 “Anonymization” means rendering data non-attributable to an identifiable individual, such that a specific person cannot be directly named or identified.
1.4 Please read this Privacy Policy carefully.
1.5 By selecting “I Agree,” you confirm that you have fully read, understood, and accepted the terms of this Privacy Policy, and you grant electronic consent to the Data Controller to collect, process, and use your personal data accordingly.
1.6 If you do not agree to this Privacy Policy, you may contact us at +976 7211-7211 to submit your requests, inquiries, or complaints for resolution.

Two. Our Principles

2.1 We always respect the privacy and confidentiality of Users’ personal information. We shall not collect, process, or use any personal data in a manner other than as prescribed by law and this Privacy Policy.
2.2 We ensure the accuracy and integrity of personal data, preserving its confidentiality and protection.
2.3 Except as required by Mongolian law, once a User withdraws their electronic consent to collect, process, and use their personal data, such processing and use shall be discontinued, and no further data shall be collected thereafter.
2.4 We will amend and update this Privacy Policy whenever changes are made to relevant legal acts regulating the collection, processing, and use of personal data.
2.5 We ensure that Users have access to this Privacy Policy, which shall be publicly available within the App.

Three. Basis and Purpose for Collecting, Processing, and Using Data

3.1 We collect, process, and use personal data in accordance with the Law of Mongolia on Personal Data Protection and based on your electronic consent.
3.2 Your personal data may be collected, processed, and used for the following purposes:
3.2.1 To provide services, verify and identify Users, communicate with you, and deliver promotional or informational messages;
3.2.2 To ensure the security, proper functioning, and protection of the service against illegal access;
3.2.3 To operate the service reliably and continuously improve it;
3.2.4 To comply with the requirements of laws and competent authorities;
3.3 We do not sell Users’ personal data for profit.

Four. Data Controller and Contact Information

4.1 The authorized legal entity responsible for collecting, processing, and using personal data based on the User’s electronic consent (the Data Controller) will be Onlime Network LLC, a legal entity incorporated under the laws of Mongolia.
4.2 For any requests, inquiries, or complaints related to the terms or implementation of this Privacy Policy, you may contact our Customer Service Center at +976 7211-7211 or submit them electronically via the “Support” section in the App.

Тав. Five. Categories of Data Collected, Processed, and Used

5.1 Within the scope of this Privacy Policy, we collect, process, and use the following types of personal data:

Data Collected

Purpose

Full name, email address, civil registration number, phone number, IP address, device ID, device model and settings, operating system information, and for Users aged 16–18, contact information of parents or legal guardians

3.2.1, 3.2.3

Copy of national ID card or passport, photo holding said document, one-time login codes, failed or repeated password attempts, password change frequency

3.2.2, 3.2.4

Call detail records (numbers dialed, origin/destination, timestamps, and call duration)

3.2.1, 3.2.2, 3.2.3, 3.2.4

Messages (text, audio, video, or other formats) and contact list data

3.2.1, 3.2.3

Purchased services, packages, promotions, settings changes, and blacklist data

3.2.1

Communication with customer support, conversation recordings, and records of successful or unsuccessful calls to the Customer Service Center

3.2.1, 3.2.3

Geolocation, IP address, network connection information, calling number, call duration, and any transformed number

3.2.1

5.2 The Data Controller may access and use information from the “DAN” identification and authentication system to verify user identity.
5.3 If we collect, process, or use information beyond the scope listed above, we will update this Privacy Policy accordingly and obtain renewed electronic consent from the User.
5.4 Users are responsible for ensuring the accuracy, completeness, and correctness of the information they provide.

Six. Duration of Data Processing and Use

6.1 The Data Controller shall collect, process, and use personal data for as long as the User’s electronic consent remains valid and has not been withdrawn.
6.2 Except as stated below, no User data or content shall be retained or archived:
6.2.1 User data within the network management and monitoring system shall be stored for 1 year;
6.2.2 Records of the information system and data network shall be stored for 1 year;
6.2.3 Service billing and payment records shall be stored for 1 year;
6.2.4 Requests, complaints, and feedback received from Users shall be categorized, analyzed, and archived.

Seven. Disclosure of Information

7.1 To protect the privacy of Users’ personal information, the Data Controller shall not disclose such data publicly.

Eight. Data Transfer Conditions and Categories

8.1 In accordance with the principle of the rule of law, the Data Controller may transfer the User’s personal information listed in Section 5 to third parties only in the following cases:
8.1.1 Upon a judicial order issued by a Mongolian court;
8.1.2 Upon a resolution issued by a prosecutor;
8.1.3 Upon a written request from law enforcement agencies approved by the prosecutor;
8.1.4 Upon a formal request from the Communications Regulatory Commission of Mongolia;
8.1.5 During official inspections conducted by state inspectors responsible for professional oversight.
8.2 The Data Controller may also share the following information with third parties when providing additional services in partnership with such entities through the App: Full name, email address, civil registration number, phone number, IP address, device ID, device model, device settings, operating system information, and for Users aged 16–18, contact details of parents or guardians.

Nine. Revocation of Consent

9.1 Users may revoke their electronic consent for the collection, processing, and use of their personal data by submitting a request electronically via the “Support” section of the App.
9.2 Upon receiving the revocation request, the Data Controller shall notify the relevant organization and resolve the request within 30 days.
9.3 Once consent has been revoked, the Data Controller shall cease all data collection, processing, and use activities related to that User and deactivate their records.

Ten. Other

10.1 Users are obliged to familiarize themselves with and comply with any amendments or updates to this Privacy Policy. We will ensure that Users can access the most current version, which will always be publicly available within the App.
10.2 We shall not be held responsible for any issues arising from a User’s failure to read, understand, or acknowledge the Privacy Policy or its updates. Users have the right to contact us at any time with questions or clarifications related to this Privacy Policy.