Legal
App Privacy Policy
For the Mr. Malayali app on Android and iOS. Last updated September 2026.
Who we are
The Mr. Malayali app is made by Mr. Malayali, a design and technology studio. Our clients use it to request our services (design, branding, websites, apps and marketing), follow live progress updates on their projects, chat with our team, and see their invoices and payments. Our own team uses the same app to manage that work. This policy explains what the app collects and why.
Account information
You sign in with your Google account. We receive your name, email address and profile photo from Google to create and identify your account. We never see or store your Google password.
Your projects and requests
The service requests you send, your project details, files you share, messages with our team, and your invoices and payment records are saved to your account so you and our team see the same, up-to-date information on every device. For our own staff, the app also keeps work data such as tasks, attendance and payslips. This data is used only to deliver our services. We do not sell it, and we do not use it for advertising.
Contacts
If you choose "Import from Contacts", the app opens your phone's contact picker so you can fill in a person's name, phone number and email. Only the contact you pick is saved. The app does not upload your address book.
Location
Location is used only for staff attendance: when a team member punches in or out, the app records their location at that moment so the entry can be confirmed. Clients are never asked for their location, and the app does not track anyone in the background.
Camera, photos, microphone and files
The app uses the camera to scan QR codes and to take photos you choose to attach, the microphone to record voice messages you choose to send in chat, and your photos and files when you attach them to a message or work item or save an invoice or payslip. Text and QR scanning happen on your device.
Fingerprint and Face ID
Fingerprint or Face ID can be used to unlock an employee's own salary and payslip details. This check is done entirely by your phone's operating system. The app never receives or stores your biometric data.
Notifications
To send reminders and team notifications, the app stores a device notification token. You can turn notifications off at any time in your phone's settings.
Where your data is stored
Your data is stored in Google Firebase (Authentication, Cloud Firestore and Cloud Messaging), operated by Google. These services process data on our behalf to run the app. We do not share your data with anyone else, except where the law requires it.
Deleting your data
You can delete your account and all of its data from inside the app: Settings, then Danger Zone, then Delete account. You can also email us and we will delete it for you within 30 days.
Children
The app is made for our business clients and our staff. It is not intended for children under 13, and we do not knowingly collect their data.
Changes
If this policy changes we will update this page and the date below.
Contact
Questions, or want your data deleted? Write to designs@mrmalayali.in.