MALPHAPrivacy policy
This policy explains what Malpha collects, why, and what you can do about it.
What we collect
- Account: your email address, a hashed password (we never store your actual password) or your Google account ID if you sign in with Google.
- Profile: username, display name, bio, location, website, photos, topics and interests, and any wallets you choose to show.
- Activity: posts, replies, calls, likes, reposts, bookmarks, follows, blocks, reports and your watchlist.
- Messages: direct messages and photos you send, which only you and the other person can see.
- Devices: a push notification token if you turn notifications on, and technical logs (such as IP address) to keep the service secure and prevent abuse.
How we use it
To run Malpha: show your profile and posts, deliver messages and notifications, personalise your For You feed and Discover, prevent spam and abuse, and keep your account secure. We do not sell your data and we don't show third-party ads.
Who we share it with
Only with services that help us run Malpha (hosting, email delivery, and Apple or your browser's push service for notifications), and when the law requires it. Market data requests to price providers don't include your personal data.
How long we keep it
As long as your account exists. When you delete your account (Settings → Account → Delete account) we delete your profile, posts, replies, messages, follows and photos right away. Backups are overwritten within 30 days.
Your rights
You can see and change your data in the app, download a copy by emailing us, and delete your account at any time. If you live in the EU/EEA you also have the rights of the GDPR, including complaining to your data protection authority.
Security
Passwords are stored as scrypt hashes, never in readable form. You stay logged in with a secure, HttpOnly cookie, and every connection to Malpha uses HTTPS. Direct-message photos are only served to the two people in the conversation. If you find a security problem, please email support@malpha.fun.
Cookies
We only use a cookie that keeps you logged in. No tracking or advertising cookies.