Maali (“we”, “us”) helps you understand your money by connecting to your bank through an Open Finance provider. This policy explains what we collect, why, and the choices you have. Maali is read-only — we can see your account information, but we can never move your money.
If you join the waitlist on this site, this is all that happens with what you give us.
| What we collect | Your email address, and your first name and emirate if you choose to add them. To stop abuse of the form we also keep the type of browser you used and a scrambled (salted and hashed) form of your internet address, never the address itself. |
| Why | Only to email you when maali opens. We do not send marketing, we do not sell the list, and we do not share it with anyone except the hosting provider that stores it for us. |
| How long we keep it | Until maali has opened and we have told you, and no longer than 12 months after you join. Then we delete it. |
| Leaving the list | To remove your details, message us on Instagram @maali.app with the email you signed up with, and we will delete it. We never share what we hold over Instagram. |
This site measures how quickly its pages load and respond, using Vercel Speed Insights. It sets no cookies and collects nothing that identifies you: only timings, the page address, and the kind of device and browser.
When you create an account and connect a bank, we may process:
| Account details | Your name, account type, and the last four digits of connected accounts. |
| Balances | The current balance on each connected account. |
| Transaction history | Transactions, used to categorise spending and show insights. |
| Profile & contact | The phone number you sign in with, and any profile details you add. |
| Device & usage | Basic technical data needed to run the app securely and fix problems. |
Maali connects to your bank through a third-party open-banking provider. Maali never sees or stores your online-banking username or password.
We do not sell your data, and we do not use it for third-party advertising.
We share data only with service providers that help us run Maali — such as our open-banking provider, cloud hosting, and communication services — and only as needed to deliver the app. We may disclose information where required by law or regulation.
Data is stored on secure, access-controlled infrastructure and encrypted in transit. Access is limited to the systems and people who need it to operate the service.
You are in control of your data. From inside the app you can:
Depending on your location, you may also have rights to access, correct, or export your data. Contact us using the details below to make a request.
We keep your data only while your account is active. When you delete your account, we remove your personal data from our live systems, except where we are required to retain certain records to comply with the law.
Maali is not directed to children under 18, and we do not knowingly collect their data.
We may update this policy from time to time. If we make material changes, we will update the date above and, where appropriate, notify you in the app.
Questions about your privacy? Message us on Instagram @maali.app. To remove your details, message us there with the email you signed up with, and we will delete it. We never share what we hold over Instagram.