Introduction & Overview
Malani Jainil, operating under the brand MalaniSoftTech ("we", "us", or "our"), is committed to protecting your privacy and handling your personal information with transparency, care, and full compliance with applicable data protection laws as of 2026.
This Privacy Policy describes how we collect, use, store, share, and protect your personal data when you use our applications, websites, and related services (collectively, the "Services"). By accessing or using our Services, you agree to the terms of this Privacy Policy.
Malani Jainil — MalaniSoftTech
Contact: malanisofttech@gmail.com
Information We Collect
2.1 Information You Provide Directly
- Name and email address when registering or contacting us
- Username and password for account creation
- Profile information (avatar, preferences)
- Payment information (processed securely through third-party processors; we do not store raw payment data)
- Feedback, support requests, and communications you send us
2.2 Information Collected Automatically
- Device identifiers: Advertising ID (IDFA on iOS, GAID on Android), Device ID
- IP address and approximate geolocation (country / city level)
- Browser type, OS version, device model, screen resolution
- App usage data: session duration, pages/screens viewed, features used, crash logs
- Interaction data: clicks, taps, in-app events, purchase history
- Referral source and attribution data
2.3 Information from Third Parties
- Social login data (e.g., Google, Facebook) if you choose to log in via those platforms
- Analytics data from third-party analytics providers
- Advertising partner signals (opt-in consent required for personalized ads)
How We Use Your Information
We use the information we collect for the following purposes, based on a lawful legal basis under applicable regulations:
| Purpose | Legal Basis (GDPR) | DPDP Basis |
|---|---|---|
| Providing and improving our Services | Contract performance | Legitimate use |
| Account management & authentication | Contract performance | Consent / Contract |
| Sending transactional emails & notifications | Contract performance / Consent | Consent |
| Personalizing your experience | Legitimate interest / Consent | Consent |
| Analytics & performance measurement | Legitimate interest | Legitimate use |
| Showing advertisements | Consent | Consent |
| Fraud prevention & security | Legal obligation / Legitimate interest | Legitimate use |
| Compliance with legal obligations | Legal obligation | Legal obligation |
| Marketing communications (opt-in only) | Consent | Consent |
You may withdraw your consent for any consent-based processing at any time by contacting us or adjusting your in-app settings.
Advertising & Ad Partner Rules (2026)
4.1 Types of Ads We Show
- Contextual ads — shown based on content, not personal profiling (no consent required)
- Personalized / interest-based ads — shown only with your explicit opt-in consent
- Rewarded ads — optional video ads in exchange for in-app rewards
- Interstitial & banner ads — displayed at appropriate intervals per platform guidelines
4.2 Advertising Partners
We work with third-party advertising networks. Each partner has its own privacy policy. Where applicable, you can opt out of personalized advertising through their opt-out mechanisms:
- Google AdMob — policies.google.com/privacy
- Meta Audience Network — facebook.com/about/privacy
- Unity Ads — unity.com/legal/privacy-policy
- AppLovin — applovin.com/privacy
- IronSource / Unity LevelPlay — subject to Unity's privacy policy
4.3 Your Advertising Choices
- You can opt out of personalized ads via iOS Settings → Privacy → Tracking or Android Settings → Google → Ads
- You can reset your Advertising ID at any time in your device settings
- Non-personalized (contextual) ads may still appear after opting out
- Upgrade to a paid/premium version (if available) to remove ads entirely
4.4 Ad Data Usage Rules
- We never use health, financial, or sensitive-category data to target ads
- We never show behaviorally targeted ads to users identified as under 13
- We comply with the EU Digital Services Act (DSA) ad transparency requirements
- All ad impression data is used only for measurement and fraud prevention
Data Sharing & Third Parties
We do not sell your personal information. We may share information only in the following situations:
- Service providers: vendors who help us deliver the Services (analytics, hosting, payment processing, customer support) under strict data processing agreements (DPAs)
- Advertising networks: with your consent, for personalized advertising as described in Section 4
- Legal requirements: when required by law, court order, or government authority
- Business transfers: in connection with a merger, acquisition, or asset sale — you will be notified in advance
- Safety: to prevent harm, fraud, or illegal activity
- With your consent: any other sharing will be disclosed at the time of collection with your explicit consent
Cookies & Tracking Technologies
Our website and apps may use the following tracking technologies:
| Technology | Purpose | Can You Opt Out? |
|---|---|---|
| Essential Cookies | Login sessions, security | No (required) |
| Analytics Cookies | Usage measurement, improvement | Yes |
| Preference Cookies | Saving your settings | Yes |
| Advertising Cookies / SDKs | Personalized ads (with consent) | Yes (opt-out) |
| Firebase / Crashlytics | Crash reporting, analytics | Yes |
| Ad Attribution SDKs | Measuring install/campaign source | Yes (Limit Ad Tracking) |
You can control cookies via your browser settings. For mobile SDKs, use your device's privacy controls. Disabling certain cookies may affect functionality.
Data Retention
We retain personal data only as long as necessary for the purposes stated in this policy or as required by law.
- Active accounts: data retained for the duration of your use of the Services
- Deleted accounts: data anonymized or deleted within 90 days of account deletion request, except where legal obligations require longer retention
- Advertising data: aggregated, anonymized; event-level logs deleted after 13 months
- Legal / compliance records: retained for up to 7 years as required by applicable law
- Backup systems: residual copies may persist for up to 30 days in encrypted backups before being purged
Data Security
We implement industry-standard security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:
- TLS/SSL encryption for all data in transit
- AES-256 encryption for data at rest
- Access controls with role-based permissions and least-privilege principles
- Regular security audits and vulnerability assessments
- Incident response procedures; in the event of a breach, affected users will be notified within 72 hours as required by GDPR and applicable law
- Two-factor authentication for administrative access
Your Rights
Depending on your location, you have the following rights over your personal data. To exercise any right, contact us at malanisofttech@gmail.com. We will respond within 30 days.
Request a copy of your personal data we hold.
Correct inaccurate or incomplete data.
Request deletion ("right to be forgotten").
Limit how we process your data.
Receive your data in a machine-readable format.
Object to processing based on legitimate interest or for direct marketing.
Request human review of automated decisions that significantly affect you.
Withdraw consent at any time for consent-based processing.
You also have the right to lodge a complaint with your local data protection authority (e.g., the DPA in your EU member state, the ICO in the UK, or India's Data Protection Board).
Children's Privacy
We do not knowingly collect personal information from children. If we learn that we have inadvertently collected data from a child under the applicable age threshold, we will delete such information promptly.
- No behavioral advertising is shown to users identified or reasonably believed to be under 13
- If you are a parent or guardian and believe your child has provided us personal data, contact us at malanisofttech@gmail.com
- For apps rated for children on app stores, we comply with applicable Kids Category policies (Google Families, Apple Kids)
Regional-Specific Rights
🇪🇺 European Union / UK — GDPR
- Legal bases for processing are documented and available upon request
- International data transfers outside the EEA use Standard Contractual Clauses (SCCs) or equivalent safeguards
- You may contact your national Data Protection Authority to file a complaint
🇺🇸 California, USA — CCPA / CPRA
- We do not sell your personal information as defined by CCPA
- California residents may request disclosure of categories and specific pieces of personal information collected in the past 12 months
- You have the right to opt out of sharing for cross-context behavioral advertising via the "Do Not Sell or Share My Personal Information" option
- We will not discriminate against you for exercising your CCPA rights
🇮🇳 India — DPDP Act 2023
- We act as a Data Fiduciary under the DPDP Act 2023
- Personal data is collected only with free, specific, informed, and unambiguous consent
- You have the right to access, correct, and erase your data; to nominate a representative; and to grieve and seek redressal
- Significant data fiduciary obligations (if applicable) will be met including DPIA, data audits, and appointment of a Data Protection Officer
- Cross-border data transfers comply with the Government of India's notified list of permitted countries
🌏 Other Regions
Users in other jurisdictions (e.g., Canada — PIPEDA; Brazil — LGPD; Australia — Privacy Act 1988) are afforded equivalent protections under this policy to the extent legally required.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons.
- We will notify you of material changes via in-app notification, email, or a prominent notice on our website at least 30 days before the change takes effect
- The "Last Updated" date at the top of this page will always reflect the most recent revision
- Your continued use of the Services after the effective date constitutes acceptance of the updated policy
- For significant changes affecting your rights, we may request renewed consent
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out to us:
Get in Touch
Data Privacy & Support — MalaniSoftTech
malanisofttech@gmail.com
We aim to respond to all privacy-related requests within 30 days. For GDPR Subject Access Requests, we respond within 30 days (extendable to 90 days for complex requests, with notice). For DPDP Act requests, we respond within timeframes prescribed by the applicable rules.