Privacy Policy
Last updated: September 10, 2026 / Applies to: the iOS app “MalaPick” and this website
In short
- No account is created. We never ask for your name, email address or phone number.
- Your records — ingredients and ratings — are stored only on your device. They are not sent to our servers.
- The app contains no analytics SDK.
- The free version shows ads, and ad delivery may involve device-level identifiers. Section 4 explains this.
1. Who we are, and how to reach us
MalaPick is an iOS app made by an independent developer. For questions about this policy, please use the contact form.
2. Information the app itself does not collect
The recording feature does not ask for your name or contact details, access GPS location, contacts, calendars or health data, or operate its own analytics. This is separate from advertising SDK processing of identifiers, approximate location and interactions (section 4), website delivery logs (section 6), and information you choose to send in an inquiry.
3. What is stored on your device
The following is written only to your device, inside the app's sandbox. None of it is sent to a backend server.
| Data | What it is |
|---|---|
| Bowl records | Date, the ingredients you chose, optional soup and spice notes |
| Ingredient ratings | “Add again / Not sure / Skip it” per ingredient, and their history |
| Custom ingredients | Names and categories you added yourself |
| Settings | Display preferences and whether ad removal was purchased |
Deleting the app removes all of it from your device. Bowl records can also be deleted individually from History.
When you save a share image to Photos, the app uses add-only Photos permission to save the share image. It does not read existing photos. Images saved to Photos remain after the app is deleted.
4. Advertising
After the first saved bowl, the free version may show fixed banners on Home and History and static-image native ads in the ingredient list and picker. Each of those two ingredient screens has at most one native ad after the first eight ingredients on All or the selected ingredient category, never during search or filtering. Rating, record details, and sharing have no ads. Ads are delivered through the Google Mobile Ads SDK.
- Ad providers may process device information — advertising identifier, IP address, coarse region, device type — to serve ads, prevent fraud and limit repetition.
- MalaPick does not present the App Tracking Transparency prompt and does not track you across other apps or websites.
- In regions such as the EEA and the UK, consent is requested through Google's User Messaging Platform before any ad request, and ads are only requested within the scope of that consent.
- Once ad removal is purchased, the app stops requesting ads altogether.
Google’s advertising SDK may collect device identifiers, IP addresses, approximate location, ad views and interactions, crash reports, performance data and other diagnostics. These support ad delivery, measurement, fraud prevention and SDK improvement; they are separate from analytics operated by MalaPick. The app requests non-personalized ads. In applicable regions, you can change advertising consent through the privacy options in Settings. See Google’s privacy policy for its retention and deletion practices.
For how Google handles this data, please see Google's privacy policy and advertising policies.
5. Purchases
Ad removal is a one-time in-app purchase. Payment is handled by Apple through the App Store; we never receive your payment details. Purchase status is read from Apple's StoreKit and is not sent to any server of ours.
6. About this website
On malapick.vercel.app:
- The interactive demo on the home page saves a single entry in your browser's localStorage. It is never sent to a server and never analysed. You can delete it at any time with the “Clear what this page saved” button on the page.
- The “Ask an AI” message is generated in your browser from the ingredients currently selected. We do not save or analyse the message, its destination or its result.
- There are no advertising or analytics cookies on this site.
- The site is served from infrastructure operated by Vercel Inc., whose servers may record standard access logs (IP address, timestamp, user agent). This is ordinary web hosting behaviour; we do not use those logs to identify or profile individuals.
7. Children's privacy
This app is not directed at any particular age group, and we do not knowingly collect personal information from children under 13.
8. Deleting your data
Bowl records can be deleted individually from History. Deleting the app removes all on-device data, including ratings and custom ingredients. For this website, use the button described above or clear site data in your browser.
9. Changes to this policy
This policy may be revised as features change. When something material changes, the “last updated” date on this page will change with it.
10. Contact
For questions about this policy or about MalaPick, please use the contact form.
11. Privacy choices and regional rights
In applicable regions, use Privacy Options in the app’s Settings to change advertising consent. Section 8 explains how to delete local records. We cannot remotely retrieve or delete records stored on your device.
Where EEA or UK data protection law applies, you have rights of access, rectification, erasure, restriction, portability, objection and complaint to a supervisory authority. You may withdraw consent to consent-based processing without affecting the lawfulness of earlier processing. We normally respond to rights requests within one month and explain any extension permitted by law.
Where the California CCPA applies, you have rights to know about collection, use and disclosure, correct or delete information, opt out of sale or sharing, limit use of sensitive personal information and receive non-discriminatory treatment. We normally respond to requests to know, correct or delete within 45 calendar days. Opt-out and similar requests have separate statutory deadlines. We explain any applicable legal exceptions or extensions.
In other regions, you may also exercise rights under applicable law. Send requests through the contact below. We may request verification only as necessary. For information controlled by advertising providers, we also direct you to their procedures.
please use the contact form.