Privacy Policy

Who we are

Mallow.ai is operated by Mallow Labs Limited (“we”, “us”), a company registered in Hong Kong. We are the controller of the personal data described in this policy.

Mallow.ai helps you organize your own life and the life you share with a partner, with to-dos, Special Days, a shared calendar, trips, money tracking, cycle tracking and intimacy records.

Our promises

• Mallow.ai is funded by subscriptions. There are no ads, and we don’t sell your personal data, share it for advertising or give it to data brokers.
• We don’t track you across other companies’ apps or websites.
• Your cycle, intimacy, money and travel records and your Special Days start private. Connecting with a partner doesn’t share them until you choose to.
• Cycle and intimacy records are never sent to AI features, and none of your content is used to train AI models.
• You can get a copy of your data and delete it at any time.

Information we collect

Information you give us

• Account details: your email address, name, profile photo and sign-in method. If you sign in with Apple or Google, they give us your name and email address; Apple may give us a private relay address instead.
• Profile details you choose to add, such as your gender, birthday and the day your relationship started.
• Content you add: to-dos, Special Days and their moments, calendar events, trips, journals and checklists, money records and budgets, cycle data, intimacy records, and photos and videos, along with comments and reactions.
• Messages you send us in Help & feedback, and the feature ideas you submit or vote for.

Information from others

• Your partner: when you connect, you see each other’s name and profile photo and the records each of you chooses to share. Records your partner adds may mention you.
• Apple and Google, through RevenueCat: your subscription status and purchase events.

Information created as you use Mallow.ai

• Your partner connection, sharing choices, notification and reminder settings, notification history, AI requests and the plans they create, your subscription status and Plus allowances, and your privacy choices, including when you gave consent.

Technical information

• Device model, operating system, app version, language, time zone, push notification token, and crash and performance diagnostics.

You need an email address, or Sign in with Apple or Google, to create an account. Everything else is optional; if you leave something out, only the feature that needs it won’t work.

Health and sex-life data

Cycle data and intimacy records can reveal information about your health or sex life. The UK and EU GDPR treat this as special category data, and some US state laws treat it as consumer health data. We process it only with your explicit consent and only to run those features for you. Our Health & Intimacy Data Notice explains exactly what we collect, who can see it, and how to withdraw your consent and delete it.

How we use information and our legal bases

Under the UK GDPR and the EU GDPR, we use your personal data for these purposes and on these legal bases:

• To provide Mallow.ai, including your account, sync, partner sharing, reminders and notifications, the AI features you ask for, Plus subscriptions and support: performance of our contract with you.
• To process cycle and intimacy data: your explicit consent.
• To tell you about new features and changes to Mallow.ai in Updates and in notifications: our legitimate interest in keeping you informed about the service. You can turn these notifications off in Notification settings. We send promotional offers only if you have agreed to receive them.
• To keep Mallow.ai secure and reliable, including preventing fraud and abuse, applying Plus allowances and fixing crashes: our legitimate interest in running a safe service that works.
• To keep records required by tax and other laws, to respond to legally binding requests, and to keep proof of your consent: compliance with our legal obligations.

You can object at any time to processing based on our legitimate interests. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

Partner sharing

Your account stays separate from your partner’s, and connecting shares nothing you already have. Cycle, intimacy, money and travel records and Special Days stay private until you share them. While you’re connected, the to-dos and calendar events you add are visible to your partner unless you turn on Hide from your partner. To-dos and events for your partner or for both of you are always visible to both of you, because that’s what they’re for.

Your partner never sees your payment details, sign-in details, private settings or anything you haven’t shared.

If you disconnect, to-dos and events for your partner or for both of you, and other shared records, are hidden for both of you, and you each keep your personal records, hidden from the other again. If you connect with the same person again, your shared records come back. If either of you deletes their account, the records shared in that relationship are deleted for both of you, including shared records the other person created.

AI features

AI features are optional and run only when you start them. When you start one, you ask us to send the information below to our AI provider.

When you ask for a travel plan, we send the destination, the number of days, and the places and times already in that itinerary to Google Gemini, or to OpenRouter and the model providers selected through it. We never send your name, notes or other records, and never any cycle, intimacy or money data.

Our AI providers may not use these requests to train their models, though they may keep them for a short time to prevent abuse. The plan is saved in your trip, where you can edit or delete it.

Crash reports

We do not use usage analytics in Mallow.ai. If we add optional analytics in the future, we will update this policy and ask for your consent first.

We use Sentry to receive crash and performance reports so we can find and fix problems. They include technical details such as the error, app version, device model and operating system, but not your name, email address or the content of your records.

We do not use advertising identifiers or track you across other companies’ apps or websites.

Service providers and other recipients

We share personal data only with service providers that work on our behalf, only as needed to run Mallow.ai, and only under written contracts that require them to protect it at least as well as this policy does:

• Supabase (United States): database, file storage, sign-in and backend services
• Apple and Google: Sign in with Apple and Google, App Store and Google Play purchases, and push notifications through Apple Push Notification service and Firebase Cloud Messaging
• RevenueCat: subscription status, linked only to your account ID
• Resend: account emails, such as verification codes and the data copies you ask for
• Sentry: crash and performance reports
• Google Maps Platform, Apple WeatherKit and Unsplash: place search, weather and destination photos in Trips. When the app shows their photos, your device loads them directly from these providers, which can see your device’s IP address.
• Google Gemini and OpenRouter: AI travel plans, as described in AI features
• Cloudflare: hosting and protecting our website, mallowlabs.ai, which doesn’t use cookies, analytics or advertising trackers

We may also disclose information when the law requires it (see Requests from authorities), to protect the safety and rights of our users or others, or as part of a merger or acquisition. In that case, this policy will continue to apply to your data.

Requests from authorities

We disclose your data to police, courts or other authorities only when we receive a request that is legally binding on us. We review every request, challenge requests that are unlawful or too broad, and disclose only what is strictly required. Unless the law forbids it, we tell you before we disclose anything. We never hand over cycle or intimacy data voluntarily.

International transfers

Our main database is hosted by Supabase in the United States (Oregon). Mallow Labs Limited is based in Hong Kong, and some of our service providers process data in other countries. When we transfer personal data from the UK or the EEA to a country without an adequacy decision, we use the European Commission’s Standard Contractual Clauses with the UK International Data Transfer Addendum, or rely on the recipient’s certification under the EU-U.S. Data Privacy Framework and its UK Extension. Contact us for a copy of these safeguards.

Subscriptions

Payments are handled by Apple (App Store) or Google (Google Play). We receive your subscription status, product, renewal state and entitlement information from them through RevenueCat, but never your payment card details. Your partner can see whether your connection has Plus, but never your payment details.

Data retention

We keep personal data only as long as we need it:

• Your account and the records you add: while your account exists. You can delete single records at any time.
• Cycle and intimacy data: until you delete it, withdraw your consent or delete your account.
• Your Updates history: until you delete an update or your account.
• Help & feedback conversations: until you delete your account.
• Copies of your data that we prepare for you: deleted within 7 days of being created; the download link works for 24 hours.
• Records of actions our team takes on accounts: kept for security, and deleted when no longer needed for that purpose.
• Crash reports: up to 90 days.

Deleting your account: in the app, go to Me > Account & Profile > Delete Account. If you are connected to a partner, you’ll be asked to disconnect first, and we ask you to sign in again to confirm it’s you. Your account is then locked and you are signed out on every device. We permanently delete your account and its data, usually within 24 hours. This includes your profile, your records, all cycle and intimacy records, the records shared in your past relationships (including those your former partner created), and all photos and media you uploaded. Deletion cannot be undone, and signing up again creates a new, empty account. Records your former partner keeps in their own account are not deleted, but your name and photo are removed from them.

If you can’t use the app, you can ask us to delete your account on our website, mallowlabs.ai, or by emailing [email protected] from the email address on your account.

We keep only a short record that the deletion took place, without your profile or content, for up to 60 days so that deleted data is not restored from a backup. If you tell us why you are leaving, we keep that reason without anything that identifies you. RevenueCat may keep your purchase history linked only to a random account ID, without your name or email. Deleted data may remain in our encrypted backups for up to 30 days before it is overwritten. Deleting your account does not cancel your App Store or Google Play subscription; cancel it in your store settings.

To get a copy of the data you created before you delete your account, go to Me > Export all my data. For any other copy of your data, use Ask about privacy in Help & feedback or email [email protected].

Your privacy rights

Depending on where you live, and in all cases if you are in the UK or the EEA, you have the right to access, correct or erase your personal data, to restrict or object to its processing, and to receive a portable copy. Where we rely on your consent, you can withdraw it at any time; for cycle and intimacy data, our Health & Intimacy Data Notice explains how.

To make a request, use Ask about privacy in Help & feedback or email [email protected]. We respond within one month, which may be extended where the law allows. We may need to confirm your identity, and we won’t disclose another person’s private data to you, including your partner’s.

You also have the right to complain to a data protection authority: in the UK, the Information Commissioner’s Office (ico.org.uk); in the EEA, the authority in the country where you live or work. We would welcome the chance to address your concern first.

US state privacy rights

If you live in a US state with a consumer privacy law, such as California, Colorado, Connecticut, Oregon, Texas, Virginia or Washington, you have the right to know what personal data we collect and how we use and disclose it, to get a copy, to correct it and to delete it.

In the past 12 months, we collected the categories of personal data described in Information we collect, for the purposes described in this policy, and disclosed them only to the service providers listed above. We do not sell personal data or share it for cross-context behavioral advertising, and we have not done so in the past 12 months. We use sensitive personal data, such as cycle and intimacy data, only to provide the features you ask for, and not to infer characteristics about you.

You can make a request yourself or through an authorized agent, and we won’t treat you differently for exercising your rights. If we decline your request, you can appeal by replying to our decision. Our Health & Intimacy Data Notice is our Consumer Health Data Privacy Policy for Washington, Nevada and other states with consumer health data laws.

Children

Mallow.ai is only for people aged 18 or over. We do not knowingly collect personal data from children. If you believe a child is using Mallow.ai, contact us and we will close the account and erase its data.

Security

We protect your data with encryption in transit and at rest, access rules that limit each record to the people allowed to see it, and optional App Lock. Only a small number of authorized team members can access account details and support conversations, and only to help you or keep Mallow.ai safe. They cannot browse the records you add, and the changes they make and any data copies they prepare are logged. No system is completely secure, so please also protect your device, passcode and sign-in details. If a security incident affects your personal data, we will tell you and the authorities as the law requires. Report security issues to [email protected].

Changes to this policy

We may update this policy from time to time. If we make material changes, we will tell you in the app before they take effect. If we ever want to use your cycle or intimacy data in a new way, we will ask for your consent again first. The date at the top shows when this policy was last updated.

Contact

Mallow Labs Limited
RM D07, 8/F, Kai Tak Factory Building Stage 2, 99 King Fuk Street, San Po Kong, Kowloon, Hong Kong
Privacy questions and requests: [email protected]
Security reports: [email protected]
General support: [email protected]