Malya is built on a simple belief: your health data belongs to you. This policy explains exactly what we collect, why, and how — in plain language, without fine print.
Who we are
Malya is a women's health companion for iOS, built and operated by Anton Mykhaylov ("we", "us", "our"). If you have questions about this policy, you can reach us at privacy@malya.app.
What we collect and why
Malya collects only what is necessary to provide the app's core features. We never collect data for advertising purposes.
Information you provide directly:
- Display name — optional, entered during onboarding. Used to personalise greetings in the app. Never shared with third parties.
- Health data — cycle dates, last period start, cycle length, pregnancy due date, postpartum start date, symptoms, mood, and energy levels. Used to generate your cycle insights, pregnancy progress, and daily cards.
- Journal entries — text you write in the journal. Stored locally on your device and, if you have an account, synced to our secure database. Never read by us for any purpose other than delivering it back to you.
Information generated automatically:
- User identifier — a unique ID created when you first open the app. For anonymous users this is a locally-generated random value. For signed-in users it is derived from your Apple ID via Apple's secure authentication system (we never receive your Apple ID email unless you choose to share it).
We do not collect device identifiers, IP addresses, advertising IDs, location data, contacts, or any data unrelated to the features you use.
How your data is stored
Anonymous users: All data is stored exclusively on your device using iOS secure storage. Nothing is transmitted to our servers. If you delete the app, all your data is deleted with it.
Signed-in users: Your data is synced to a secure cloud database (Supabase, hosted on AWS in the United States, us-east-2 region) so you can access it across devices. Data is encrypted in transit (TLS) and at rest. You can delete your account and all associated data at any time from Settings → Delete account.
AI-generated insights
The "Daily Insight" feature generates personalised health cards using an AI model. When you view this feature, we send a minimal summary of your current health context — your app mode (e.g. cycle tracking or pregnancy), cycle day or pregnancy week, phase, and any symptoms, mood, or energy you have logged that day — to our secure server. This data is processed by Anthropic (Claude) to generate your insight cards.
This data is not retained by Anthropic beyond the processing of your request, and is not used to train AI models. Your display name is included only if you have provided one, and only to personalise the text of your cards.
You can see Anthropic's privacy policy at anthropic.com/privacy.
Third-party services
Malya uses a small number of third-party services, each chosen for their privacy practices:
- Supabase — database and authentication for signed-in users. Data is stored in the United States (AWS us-east-2). Privacy policy →
- Apple Sign In — optional account creation. Apple's privacy-preserving sign-in means we receive only the minimum information needed to create your account. Privacy policy →
- Anthropic (Claude) — powers the Daily Insight feature. See the section above for details. Privacy policy →
We do not use any advertising SDKs, analytics SDKs, crash reporting services, or social media integrations. There are no third-party trackers in the app.
Notifications
If you grant notification permission, Malya may send you gentle reminders such as period predictions, fertile window alerts, or pregnancy week updates. All notification scheduling happens locally on your device — we do not use push notification services that transmit your data to a server. You can disable notifications at any time in iOS Settings → Malya.
Your rights
- Access: You can view all your data within the app at any time.
- Export: You can request a copy of your data by emailing privacy@malya.app.
- Deletion: Anonymous users can delete all data by deleting the app. Signed-in users can delete their account and all associated data from Settings → Delete account, or by emailing us.
- Correction: You can edit or delete any data you have entered directly within the app.
Children
Malya is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at privacy@malya.app and we will delete it promptly.
Changes to this policy
If we make material changes to this policy, we will notify you within the app and update the effective date above. Continued use of Malya after changes take effect constitutes acceptance of the revised policy.
Contact
Questions, requests, or concerns about your privacy: privacy@malya.app
Our commitment, plainly stated: We will never sell your health data. We will never share it with advertisers. We will never use it to manipulate you. Your body, your journey — your data.