Privacy Policy
Last updated: November 6, 2025
Introduction
Mali ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use Mali wallet and related services.
Our Privacy Principles
Mali is built on privacy-first principles. We use blind signature cryptography and the Cashu ecash protocol to ensure that transactions are private by default. We cannot see who you pay or who pays you.
Information We Collect
Information You Provide
- Beta Access: When you sign up for beta access, we collect your name, email address, platform preference, and optional context you provide.
- Builder Access: When requesting builder/developer access, we collect your name, work email, company name, and use case description.
- Support Requests: When you contact support, we collect information you provide in your communications.
Information We Do NOT Collect
- Transaction Details: We cannot see who you send money to or receive money from due to blind signature technology.
- Transaction Amounts: Individual transaction amounts and recipients are cryptographically hidden from us.
- Personal Identity: No KYC (Know Your Customer) requirements.
- Location Data: We do not track or store your location information.
Automatically Collected Information
- Technical Data: Basic server logs including IP addresses, browser type, and access times for security and abuse prevention.
- Usage Analytics: Anonymized usage statistics to improve the service (opt-out available).
How We Use Your Information
We use the information we collect for:
- Processing beta access and developer access requests
- Sending you notifications about your beta access status
- Providing customer support
- Improving our services and developing new features
- Preventing fraud and abuse
- Complying with legal obligations
Information Sharing
We do not sell your personal information. We may share information only in these cases:
- Service Providers: Third-party services that help us operate (e.g., email delivery, data storage). Currently using: Upstash (Redis), Vercel (hosting).
- Legal Requirements: When required by law or to protect our rights and safety.
- Business Transfers: In connection with a merger, acquisition, or sale of assets.
Data Security
We implement industry-standard security measures to protect your information, including encryption in transit (HTTPS), secure data storage, rate limiting to prevent abuse, and regular security audits. However, no method of transmission over the internet is 100% secure.
Data Retention
We retain your information for as long as necessary to provide services and comply with legal obligations. Beta signup data is retained until beta program completion. Support communications are retained for operational purposes. You may request deletion at any time.
Your Rights
Depending on your location, you may have the right to:
- Access your personal information
- Correct inaccurate information
- Request deletion of your information
- Object to processing of your information
- Data portability
- Opt-out of marketing communications
To exercise these rights, contact us at privacy@mali.app.
Children's Privacy
Mali is not intended for users under 13 years of age. We do not knowingly collect information from children under 13.
International Users
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the app.
Contact Us
If you have questions about this Privacy Policy, please contact us at:
Email: privacy@mali.app
Support: support@mali.app