Privacy Policy
This policy is maintained by the Mallish team and explains what personal information Mallish collects when you use the app, how we use it, and the choices you have. It describes current practices and is not an independent certification or audit.
We do not sell your personal information.
Where applicable law requires it (for example, in the EEA and UK), we process your personal data on the bases of performing our contract with you, your consent (which you may withdraw at any time), our legitimate interests in operating and improving the service, and compliance with legal obligations.
We share personal data only with service providers that help us operate Mallish, including our hosting and authentication provider, our database and storage provider, our payment processor, and our notification and analytics providers. These vendors process data on our behalf and under contract.
We may also disclose information when required by law, to protect the rights and safety of users, or in connection with a business transfer.
Mallish uses cookies and local storage strictly necessary for sign-in, preferences, and remembering items you save. We may use privacy-respecting analytics to understand aggregate product usage. You can clear cookies and local storage at any time through your browser.
We keep your personal information for as long as your account is active or as needed to provide the service, comply with our legal obligations, resolve disputes, and enforce our agreements. You can request deletion of your account at any time.
User data is stored in a managed database with row-level access controls. Uploaded images are stored privately and served through short-lived access links. Data is transmitted over HTTPS between your device and Mallish. No online service can be guaranteed completely secure, but we work to protect your information using industry-standard safeguards.
Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA. Contact us to exercise any of these rights.
Mallish is not directed to children under 13 (or the equivalent minimum age in your country), and we do not knowingly collect personal information from them. If you believe a child has provided us personal data, please contact us so we can remove it.
Your information may be processed in countries other than your own. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for international data transfers.
We may update this policy from time to time. When we make material changes, we will update the date below and, where appropriate, notify you within the app.
Privacy questions or requests: please reach the Mallish team through the contact options inside the app. We aim to respond promptly.