Privacy Policy

1. Who we are and what this covers

Malo is operated by Austin Montgomery Inc. This policy covers Malo’s website, the web app, the Mac app (from the Mac App Store or downloaded from our website), the iPhone and iPad app, the command-line tool and the API.

2. What we collect

• Your account: your username, display name and email addresses; your password, stored only as a one-way hash; and the organizations, teams and projects you belong to. If you sign in with Google, we receive your name, email address and an account identifier from Google. If you sign in with Apple, we receive an account identifier from Apple, your email address (or a private relay address if you chose to hide it), and, the first time only, your name.
• What you put in Malo: projects, tasks, notes, goals, tags, custom views, themes and settings, and the files you import.
• Billing: Stripe handles payments. We keep your organization’s plan, seat count, subscription status and Stripe customer reference, and your card’s brand, last four digits and expiry date. We never see or store the full card number.
• How you use Malo: which days you used Malo and from which app (the web, Mac, iPhone and iPad, or the command-line tool); the app version and operating system version each app reports; and your sign-in sessions. We use these to run the Service, to tell an outdated app it needs updating, and to understand how Malo is used.
• Security data: IP addresses, used to protect sign-in and limit abuse, and records of security-relevant actions on your account, such as signing in, changing your password or deleting your account.
• Error reports: when the web app hits an unexpected error while you’re signed in, it sends us a short technical report (the kind of error, where in our code it happened, and the page’s address without its query), never the content you were working on. Crash reports from the Mac and iOS apps reach us only through Apple, and only if you’ve agreed to share them with app developers.
• Messages you send us: the details you give in our contact form or by email.

3. In the Mac, iPhone and iPad apps

The apps collect only what’s listed above: your name, email address and user ID; what you put in Malo; which days you used the app; and the app and system version it reports. All of it is linked to your account, and none of it is used to track you. The apps contain no advertising or third-party analytics code. They keep your sign-in in the device’s Keychain, and a copy of your work on the device so it’s there when you’re offline.

4. Cookies

Our website uses only the cookies it needs to work: one that keeps you signed in, one that tells our pages you’re signed in (so they show the right buttons), short-lived ones while you sign in with Google or Apple, and one that remembers display preferences, such as text size, on that device. We use no advertising or analytics cookies, and no third-party trackers.

5. What we don’t do

We don’t sell your personal data, show ads, or track you across other companies’ apps and websites.

6. How we use it

To provide Malo and keep it in sync across your devices; to keep accounts secure; to process payments; to send account email (confirming an address, password resets, invitations, receipts and notices about your account); to understand which apps and versions people use; and to answer you when you contact us.

7. Who else handles it

We use a small set of service providers, each of which processes data only to provide its service to us: Stripe, for payments; Amazon Web Services, to send email; our hosting providers; Google, if you sign in with Google; and Apple, if you sign in with Apple, or when you get our apps from the App Store (Apple’s own privacy policy applies to that).

Within Malo, the people in your organizations see what you share with them, and anyone with a public share link can see that project’s board or its progress.

8. How long we keep it

We keep your data while your account exists. Deleted projects and organizations are removed straight away. Sign-in sessions expire after at most 30 days without use.

9. Deleting your account

You can delete your account on the web or in the Mac app (Settings → Account), or in the iPhone and iPad app (the Account tab). If you own an organization, transfer it or delete it first. When you delete your account:

• Deleted: your sign-in methods and email addresses; every session, so every device is signed out; your organization memberships and project access; your personal settings, custom views and themes; and your private notes.
• Kept for your teammates: notes and goals you wrote in shared organizations stay, shown as written by a deleted user, and tasks assigned to you become unassigned.
• Recorded: that the account was deleted, in our security log, and a confirmation email to each address you had confirmed.
• Kept for the Free plan: a one-way hash of each address you had confirmed, with the number of tasks your account created, so that deleting an account doesn’t restart the Free plan’s trial. It can’t be read back into your address. We keep nothing for an account that created no tasks.
• Kept by organizations on Enterprise: an organization’s audit log keeps your username and any address you invited, as written at the time, against what you did as a member. It’s removed with the organization.

Deleting an organization removes its projects, tasks, notes and goals, and cancels its subscription immediately, with no refund.

10. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, or to object to how we use it. You can export your work from the web app or the Mac app and delete your account in any of our apps; for anything else, email us.

11. Security

Data travels encrypted. Passwords are stored only as one-way hashes, and sign-in tokens only in hashed form. No system is perfectly secure, but we treat your data as we’d want ours treated.

12. Children

Malo isn’t directed at children under 13, and we don’t knowingly collect their data.

13. Changes

We’ll post changes here, and tell you by email or in the app when they’re significant.

14. Contact

Privacy questions or requests? Email privacy@heymalo.com.