Legal Document

Privacy Policy

Effective Date: January 1, 2026 Last Updated: April 2026 MalaniSoftTech
GDPR 2016/679 CCPA / CPRA India DPDP Act 2023 COPPA Ads Policy 2026
01

Introduction & Overview

Malani Jainil, operating under the brand MalaniSoftTech ("we", "us", or "our"), is committed to protecting your privacy and handling your personal information with transparency, care, and full compliance with applicable data protection laws as of 2026.

This Privacy Policy describes how we collect, use, store, share, and protect your personal data when you use our applications, websites, and related services (collectively, the "Services"). By accessing or using our Services, you agree to the terms of this Privacy Policy.

This policy complies with the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), India's Digital Personal Data Protection (DPDP) Act 2023, COPPA, and global advertising transparency requirements effective in 2026.
Data Controller / Owner

Malani Jainil — MalaniSoftTech
Contact: malanisofttech@gmail.com


02

Information We Collect

2.1 Information You Provide Directly

  • Name and email address when registering or contacting us
  • Username and password for account creation
  • Profile information (avatar, preferences)
  • Payment information (processed securely through third-party processors; we do not store raw payment data)
  • Feedback, support requests, and communications you send us

2.2 Information Collected Automatically

  • Device identifiers: Advertising ID (IDFA on iOS, GAID on Android), Device ID
  • IP address and approximate geolocation (country / city level)
  • Browser type, OS version, device model, screen resolution
  • App usage data: session duration, pages/screens viewed, features used, crash logs
  • Interaction data: clicks, taps, in-app events, purchase history
  • Referral source and attribution data

2.3 Information from Third Parties

  • Social login data (e.g., Google, Facebook) if you choose to log in via those platforms
  • Analytics data from third-party analytics providers
  • Advertising partner signals (opt-in consent required for personalized ads)
We do not collect sensitive personal information (e.g., biometric data, health data, financial account numbers, racial/ethnic origin, or political opinions) unless explicitly required and consented to.

03

How We Use Your Information

We use the information we collect for the following purposes, based on a lawful legal basis under applicable regulations:

Purpose Legal Basis (GDPR) DPDP Basis
Providing and improving our Services Contract performance Legitimate use
Account management & authentication Contract performance Consent / Contract
Sending transactional emails & notifications Contract performance / Consent Consent
Personalizing your experience Legitimate interest / Consent Consent
Analytics & performance measurement Legitimate interest Legitimate use
Showing advertisements Consent Consent
Fraud prevention & security Legal obligation / Legitimate interest Legitimate use
Compliance with legal obligations Legal obligation Legal obligation
Marketing communications (opt-in only) Consent Consent

You may withdraw your consent for any consent-based processing at any time by contacting us or adjusting your in-app settings.


04

Advertising & Ad Partner Rules (2026)

Our advertising practices comply with the IAB TCF v2.2, Google Play Policy 2026, Apple App Store Advertising Guidelines, and applicable national ad-tech regulations.

4.1 Types of Ads We Show

  • Contextual ads — shown based on content, not personal profiling (no consent required)
  • Personalized / interest-based ads — shown only with your explicit opt-in consent
  • Rewarded ads — optional video ads in exchange for in-app rewards
  • Interstitial & banner ads — displayed at appropriate intervals per platform guidelines

4.2 Advertising Partners

We work with third-party advertising networks. Each partner has its own privacy policy. Where applicable, you can opt out of personalized advertising through their opt-out mechanisms:

4.3 Your Advertising Choices

  • You can opt out of personalized ads via iOS Settings → Privacy → Tracking or Android Settings → Google → Ads
  • You can reset your Advertising ID at any time in your device settings
  • Non-personalized (contextual) ads may still appear after opting out
  • Upgrade to a paid/premium version (if available) to remove ads entirely

4.4 Ad Data Usage Rules

  • We never use health, financial, or sensitive-category data to target ads
  • We never show behaviorally targeted ads to users identified as under 13
  • We comply with the EU Digital Services Act (DSA) ad transparency requirements
  • All ad impression data is used only for measurement and fraud prevention

05

Data Sharing & Third Parties

We do not sell your personal information. We may share information only in the following situations:

  • Service providers: vendors who help us deliver the Services (analytics, hosting, payment processing, customer support) under strict data processing agreements (DPAs)
  • Advertising networks: with your consent, for personalized advertising as described in Section 4
  • Legal requirements: when required by law, court order, or government authority
  • Business transfers: in connection with a merger, acquisition, or asset sale — you will be notified in advance
  • Safety: to prevent harm, fraud, or illegal activity
  • With your consent: any other sharing will be disclosed at the time of collection with your explicit consent
We enter into Data Processing Agreements (DPAs) with all vendors who process your personal data on our behalf, ensuring they maintain the same privacy standards we do.

06

Cookies & Tracking Technologies

Our website and apps may use the following tracking technologies:

Technology Purpose Can You Opt Out?
Essential CookiesLogin sessions, securityNo (required)
Analytics CookiesUsage measurement, improvementYes
Preference CookiesSaving your settingsYes
Advertising Cookies / SDKsPersonalized ads (with consent)Yes (opt-out)
Firebase / CrashlyticsCrash reporting, analyticsYes
Ad Attribution SDKsMeasuring install/campaign sourceYes (Limit Ad Tracking)

You can control cookies via your browser settings. For mobile SDKs, use your device's privacy controls. Disabling certain cookies may affect functionality.


07

Data Retention

We retain personal data only as long as necessary for the purposes stated in this policy or as required by law.

  • Active accounts: data retained for the duration of your use of the Services
  • Deleted accounts: data anonymized or deleted within 90 days of account deletion request, except where legal obligations require longer retention
  • Advertising data: aggregated, anonymized; event-level logs deleted after 13 months
  • Legal / compliance records: retained for up to 7 years as required by applicable law
  • Backup systems: residual copies may persist for up to 30 days in encrypted backups before being purged

08

Data Security

We implement industry-standard security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:

  • TLS/SSL encryption for all data in transit
  • AES-256 encryption for data at rest
  • Access controls with role-based permissions and least-privilege principles
  • Regular security audits and vulnerability assessments
  • Incident response procedures; in the event of a breach, affected users will be notified within 72 hours as required by GDPR and applicable law
  • Two-factor authentication for administrative access
No system is 100% secure. We encourage you to use strong, unique passwords and to notify us immediately at malanisofttech@gmail.com if you suspect any unauthorized access.

09

Your Rights

Depending on your location, you have the following rights over your personal data. To exercise any right, contact us at malanisofttech@gmail.com. We will respond within 30 days.

👁
Right to Access

Request a copy of your personal data we hold.

✏️
Right to Rectification

Correct inaccurate or incomplete data.

🗑️
Right to Erasure

Request deletion ("right to be forgotten").

⏸️
Right to Restriction

Limit how we process your data.

📦
Data Portability

Receive your data in a machine-readable format.

🚫
Right to Object

Object to processing based on legitimate interest or for direct marketing.

🤖
Automated Decisions

Request human review of automated decisions that significantly affect you.

↩️
Withdraw Consent

Withdraw consent at any time for consent-based processing.

You also have the right to lodge a complaint with your local data protection authority (e.g., the DPA in your EU member state, the ICO in the UK, or India's Data Protection Board).


10

Children's Privacy

Our Services are not directed to children under the age of 13 (or 16 in the EU/UK, or as defined by applicable local law).

We do not knowingly collect personal information from children. If we learn that we have inadvertently collected data from a child under the applicable age threshold, we will delete such information promptly.

  • No behavioral advertising is shown to users identified or reasonably believed to be under 13
  • If you are a parent or guardian and believe your child has provided us personal data, contact us at malanisofttech@gmail.com
  • For apps rated for children on app stores, we comply with applicable Kids Category policies (Google Families, Apple Kids)

11

Regional-Specific Rights

🇪🇺 European Union / UK — GDPR

  • Legal bases for processing are documented and available upon request
  • International data transfers outside the EEA use Standard Contractual Clauses (SCCs) or equivalent safeguards
  • You may contact your national Data Protection Authority to file a complaint

🇺🇸 California, USA — CCPA / CPRA

  • We do not sell your personal information as defined by CCPA
  • California residents may request disclosure of categories and specific pieces of personal information collected in the past 12 months
  • You have the right to opt out of sharing for cross-context behavioral advertising via the "Do Not Sell or Share My Personal Information" option
  • We will not discriminate against you for exercising your CCPA rights

🇮🇳 India — DPDP Act 2023

  • We act as a Data Fiduciary under the DPDP Act 2023
  • Personal data is collected only with free, specific, informed, and unambiguous consent
  • You have the right to access, correct, and erase your data; to nominate a representative; and to grieve and seek redressal
  • Significant data fiduciary obligations (if applicable) will be met including DPIA, data audits, and appointment of a Data Protection Officer
  • Cross-border data transfers comply with the Government of India's notified list of permitted countries

🌏 Other Regions

Users in other jurisdictions (e.g., Canada — PIPEDA; Brazil — LGPD; Australia — Privacy Act 1988) are afforded equivalent protections under this policy to the extent legally required.


12

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons.

  • We will notify you of material changes via in-app notification, email, or a prominent notice on our website at least 30 days before the change takes effect
  • The "Last Updated" date at the top of this page will always reflect the most recent revision
  • Your continued use of the Services after the effective date constitutes acceptance of the updated policy
  • For significant changes affecting your rights, we may request renewed consent

13

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out to us:

Get in Touch

Data Privacy & Support — MalaniSoftTech

malanisofttech@gmail.com

Email Us
Response Time

We aim to respond to all privacy-related requests within 30 days. For GDPR Subject Access Requests, we respond within 30 days (extendable to 90 days for complex requests, with notice). For DPDP Act requests, we respond within timeframes prescribed by the applicable rules.