maali.

Privacy Policy

Last updated 23 July 2026

Draft. This is placeholder copy that describes how Maali is designed to handle your data. The final Privacy Policy is under legal review and will replace this text before the app is submitted to the App Store.

Maali (“we”, “us”) helps you understand your money by connecting to your bank through a UAE-regulated open-banking provider. This policy explains what we collect, why, and the choices you have. Maali is read-only — we can see your account information, but we can never move your money.

What we collect

When you create an account and connect a bank, we may process:

Account details	Your name, account type, and the last four digits of connected accounts.
Balances	The current balance on each connected account.
Transaction history	Transactions, used to categorise spending and show insights.
Profile & contact	The phone number you sign in with, and any profile details you add.
Device & usage	Basic technical data needed to run the app securely and fix problems.

We access your bank data through Tarabut, a UAE-regulated open-banking provider. Maali never sees or stores your online-banking username or password.

How we use it

To categorise spending, calculate budgets, and generate insights.
To operate, secure, and support your account.
To meet our legal and regulatory obligations.

We do not sell your data, and we do not use it for third-party advertising.

Who we share it with

We share data only with service providers that help us run Maali — such as our open-banking provider, cloud hosting, and communication services — and only as needed to deliver the app. We may disclose information where required by law or regulation.

Where your data is stored & how it is protected

Data is stored on secure, access-controlled infrastructure and encrypted in transit. Access is limited to the systems and people who need it to operate the service.

Your rights & choices

You are in control of your data. From inside the app you can:

Withdraw consent and disconnect your banks at any time, which stops further access to your account data.
Permanently delete your account and data — this removes your account, connected banks, and all associated data, and cannot be undone.

Depending on your location, you may also have rights to access, correct, or export your data. Contact us using the details below to make a request.

Data retention & deletion

We keep your data only while your account is active. When you delete your account, we remove your personal data from our live systems, except where we are required to retain certain records to comply with the law.

Children

Maali is not directed to children under 18, and we do not knowingly collect their data.

Changes to this policy

We may update this policy from time to time. If we make material changes, we will update the date above and, where appropriate, notify you in the app.

Contact

Questions about your privacy? Contact us at privacy@maali.ae.