Privacy policy
Last updated: October 10, 2026.
Maliah is a family app: it follows each child from pregnancy through childhood and shares that record with the members you invite. This policy explains what the app keeps, where, why, and what you can do about it. It is written to comply with Quebec’s Law 25 and PIPEDA.
What Maliah keeps
- Your email, first name, language, profile photo (if you add one) and signed-in devices — to create your account, recognize you and protect access (two-factor authentication, remote sign-out).
- What your family records about your children: first name, birth date, photo, feeds, diapers, sleep, foods and allergens, temperatures, symptoms, medicines given, measurements, blood type, allergies, doctor, and, only if you choose to enter it, the health insurance number (encrypted, visible to parents only).
- Pregnancy: due date, preferred birth type, birth plan, hospital bag, reminders, and gestational diabetes only if you answer yes to that question.
- The family calendar and tasks; who wrote each entry and when; who viewed a health record (access log, visible to parents).
Maliah sells no data, shows no ads and does no ad tracking. No third-party analytics runs in the app.
Where the data lives
In Canada (Supabase, Canada Central region), encrypted in transit and at rest. Each family sees only its own data; access rules are enforced by the server, member by member, as set by the parents.
The assistant and AI
When you talk or write to the Maliah assistant, your sentence and the context needed to understand it (first names, latest entries, calendar) are sent to OpenAI in the United States for the duration of the answer. OpenAI does not use this data to train its models (API terms). Maliah keeps neither audio recordings nor transcripts; only the entries the assistant adds to your record remain, marked as added by voice, and you can undo them. The “Hey Maliah” wake word is off by default; when you turn it on, listening happens on your device and nothing is sent until the word is recognized. The assistant never calculates a medicine dose and gives no medical advice.
Who Maliah works with
Supabase (database, authentication, functions — Canada), OpenAI (assistant and summaries — United States, only when you use them), Anthropic (Claude, if Maliah uses it for the assistant or written summaries — United States, same terms as OpenAI), Resend (emails: account confirmation and invitations, with the address, the invitee’s first name and the inviter’s — United States), Expo (phone notifications: the notification text — United States), Stripe (web subscription payment: Maliah never sees your card) and RevenueCat (status of a subscription bought in the App Store or Google Play) — United States, Vercel (website hosting), Apple and Google (Google sign-in if you choose it, in-app purchases and subscriptions: Maliah never sees your card).
How long
As long as your family exists. You can export all of the family’s data and delete the family, or just your account, at any time: export in Family → Reports & sharing, deleting the family in Family → Settings → Privacy and data, deleting your account in My account → Delete my account. Deletion is final and immediate; backups are purged within 30 days.
Your rights
Access, correct, export, withdraw your data or your consent: all of it happens in the app. Questions, or to reach the person responsible for personal information: support page.
Children
Maliah is for parents and the adults they invite. Children’s information is entered by parents, who stay in control. The app creates no account for a child.