Privacy policy

Last updated 20 September 2026. Draft pending legal review.

Who we are

Malilu World is made by an independent developer based in Ontario, Canada. For privacy questions, and as the person responsible for the protection of personal information, contact privacy@malilu.app.

What the app collects

Nothing. The app has no account system, makes no network connections, and contains no analytics, advertising or third-party software.

When a grown-up sets up the app they choose a nickname and an age band for each child. These are saved in a file inside the app on your device. They are never transmitted, and we have no way to read them. Deleting the app deletes them, and the grown-ups area has a button that deletes them without uninstalling.

The app keeps a record of trails walked, activities completed, and whether each was done independently or with a hint, so it can show you a weekly summary. That record lives in the same on-device file and is subject to the same rules: never transmitted, never readable by us.

Children

Malilu World is designed for children aged one to six and is offered in Apple's Kids Category. Because the app collects no personal information from anyone, it does not collect any from children. There is no chat, no user-generated content, no camera or microphone use, and no way for a child to contact anyone through the app. Every purchase and every link out of the app sits behind a parental gate that a young child cannot pass.

If you believe a child has somehow provided us with personal information, email privacy@malilu.app and we will delete it.

Purchases

Malilu World membership is bought through Apple's App Store. Apple processes the payment and holds your payment details; we never see them. Apple acts as our agent for these sales. Apple's own privacy policy governs what Apple collects. We receive from Apple only aggregated sales reports that do not identify individual customers.

What we hold outside the app

If you email us, we hold your email address and what you wrote, for as long as needed to help you and to keep a record of the conversation. We do not add you to any mailing list and we do not share support correspondence with anyone. You can ask us to delete it at any time.

Sharing

We share no personal information with anyone. There is nothing to share.

Your rights

Because the app holds your data only on your device, you already control it completely. For support correspondence, you may ask to see what we hold, correct it, or have it deleted, by writing to the address above. We will respond within thirty days. Residents of Canada may contact the Office of the Privacy Commissioner of Canada, and residents of Quebec the Commission d'accès à l'information, if they are not satisfied with our response.

Security incidents

Because the app stores nothing with us, an incident affecting the app's data is not possible on our side. We keep a register of confidentiality incidents for the small amount of support correspondence we hold; it is currently empty.

Changes

If this policy changes we will update the date at the top and, where the change is material, note it inside the app's grown-ups area. Because the app makes no network connections, it cannot notify you on its own.

Malilu World · Ontario, Canada · privacy@malilu.app