Trust & Privacy
This page is maintained by the Mallish team to answer common questions about security and privacy on Mallish. It describes the controls currently enabled in the app and is not an independent certification or audit.
Sign-in is handled by our managed authentication provider. Passwords are never stored by Mallish in plain text, and sessions are scoped per device.
You can sign out at any time from your account menu. Contact us to request account deletion.
We do not sell your personal information.
User data is stored in a managed database with row-level access controls so that only you (and Mallish administrators where needed) can read or modify your records.
Uploaded images (for example Style Vote photos) are stored privately and served through short-lived access links scoped to active polls.
Data is transmitted over HTTPS between your device and Mallish.
Style Vote photos are scanned by an automated moderation step before being published. Anyone can report content; reviewed reports may result in removal of the post and, for repeat violations, restrictions on the account that uploaded it.
Mallish relies on a small number of vendors to operate the app, including our hosting and authentication provider, our database and storage provider, and our payment processor for paid features. These vendors process data only as needed to deliver the service.
Mallish uses cookies and local storage strictly necessary for sign-in, preferences, and remembering items you save. We may use privacy-respecting analytics to understand aggregate product usage.
Questions, privacy requests, or security reports: please reach the Mallish team through the contact options inside the app. We aim to respond promptly.