The short version
Malaya collects the information you log so the app can do its job — your account details, your profile, and the things you track. We never sell your data and we never show ads. Everything is tied to your account, so only you can read it, and you can export or permanently delete it anytime from the app. The full details are below.
Who we are
Malaya is a nutrition and wellness app operated by SingularX (“we,” “us,” “our”). This policy explains what we collect, why we collect it, and the choices you have. If anything here is unclear, email us at baec0777@gmail.com.
Information you give us
Account
When you create an account, we collect your email address and password. You can also sign in through a provider like Google or Apple — in that case we receive a basic account identifier from them, not your password.
Profile and goals
To set your calorie and macro targets, we collect the profile details you enter, such as your age, sex, height, weight, and activity level, along with the goals you choose.
What you log
This is the heart of the app: your food logs (meals, calories, macros, and micronutrients), water, fasting sessions, workouts and steps, weight and body measurements, mood check-ins, and journal entries. Your journal and mood entries are stored on our servers and, like everything else, are readable only by you.
Information we collect automatically
- Usage data. We use PostHog to understand how the app is used — which features you use and basic activity metrics, like how many glasses of water you logged — so we can improve it. This never includes the contents of your journal, your meal names or photos, or your messages.
- Crash reports. We use Sentry to receive diagnostic reports when the app crashes, so we can fix bugs. These may include basic device and app information.
- Device information. Basic details such as your device type and operating system version.
Photos and AI features
A few features rely on an AI provider, Anthropic, to do their work:
- Meal scan. When you photograph a meal, the photo is sent to Anthropic to estimate its nutrition. We do not store your photo — it is used to generate the result and then discarded.
- Companion chat and meal descriptions. The text you send is processed by Anthropic to generate a reply or a food estimate.
Your food searches are also sent to the USDA FoodData Central database to look up nutrition information. These providers process your data only to deliver the feature. According to Anthropic’s API terms, data sent through it is not used to train their models.
How we use your information
- To create and run your account.
- To calculate your daily targets and show your progress.
- To power features like the meal scan, barcode lookup, and companion chat.
- To fix bugs and make the app better.
We do not sell your data, share it with advertisers, or use it to build a marketing profile of you.
Who we share it with
We share data only with the service providers that help us run Malaya, and each one receives only what it needs:
- Supabase — stores your account and your data, and handles sign-in.
- Anthropic — powers the AI meal scan and chat, as described above.
- USDA FoodData Central — provides nutrition data for food searches.
- PostHog — usage analytics.
- Sentry — crash and error reports.
- Apple and Google — sign-in, and on the App Store, app distribution and payments.
We may also disclose information if the law requires it, or to protect the safety and rights of our users.
Where your data lives and how it’s protected
Your data is stored by Supabase, our database and authentication provider. Depending on Supabase’s infrastructure, it may be processed in the United States or other countries. Access is protected by row-level security, which means each person’s data is readable only by their own account, and data is encrypted in transit. No system is perfectly secure, but we take reasonable steps to protect your information.
Your choices and rights
- Edit or delete individual entries anytime in the app.
- Export your data from the app’s settings.
- Delete your account from Settings — this permanently removes your data from our systems.
- Email us at baec0777@gmail.com with any privacy request.
How long we keep your data
We keep your information for as long as your account is active. When you delete your account, we delete the data associated with it. Some records may linger briefly in backups before they are overwritten, and we may retain limited information where the law requires it.
Children’s privacy
Malaya is intended for adults 18 and older. We do not knowingly collect information from anyone under 18. If you believe a minor has given us their information, email us and we will remove it.
Changes to this policy
We may update this policy as the app changes. When we do, we’ll revise the date at the top and, for significant changes, let you know. Continuing to use Malaya after an update means you accept the revised policy.
Contact us
Questions about your privacy or this policy? Email us at baec0777@gmail.com.