Privacy policy for Malai

Last updated: 2026-11-04

The short version: Malai collects no personal data. The app has no internet permission, no account, no advertising, no analytics and no crash reporting. Your learning progress stays on your device.

Controller

What is stored on your device

So that you can continue where you left off, Malai stores the following in the app's private storage on your device:

• your learning progress
• your settings, such as the interface language
• whether you have unlocked the full version

This data never leaves your device and is not transmitted to us. We cannot see it. Uninstalling the app deletes it. If Android backup is switched on, your device may include it in your own Google backup; you control this in the Android settings.

Permissions

Malai requests no special permissions: no internet access, no camera, no microphone, no location, no contacts and no access to your files. For in-app purchases the app uses the billing service of Google Play.

Google Play and in-app purchases

The app is distributed through Google Play. Downloads, updates and payments are handled by Google, for which Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, is responsible in its own right. The Google privacy policy applies.

For an in-app purchase you enter your payment details only with Google. We never see them. Google passes on to us only what is needed for billing and accounting, such as the order number, the product, price, date and country. The legal basis is the performance of the purchase contract (Article 6 (1) (b) GDPR) and our statutory duty to keep accounting records (Article 6 (1) (c) GDPR together with § 147 of the German Fiscal Code, usually 8 to 10 years).

The app also asks Google Play whether a purchase already exists, so that unlocked content is available again after reinstalling. The answer is stored on your device only.

Children

Malai is not specifically directed at children. Because the app collects no personal data, none is collected from children either.

Your rights

You have the right of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20) and to object to processing based on legitimate interests (Article 21). To exercise any of them, write to contact@vantoxstudio.com.

You also have the right to lodge a complaint with a data protection supervisory authority, for example the one responsible for us: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.

Changes

If the way data is handled ever changes, this policy will be updated before the change takes effect. The date at the top shows the current version.