This Privacy Policy explains how ZeSheng (HongKong) Technology Co., Ltd. ("Malla," "we," "us," or "our") collects, uses, discloses, stores, and protects information in connection with the Malla iOS application and related services. It is limited to the features currently provided by the Malla app.
1. Information We Collect
1.1 Account and Authentication Information
- Phone number, country or region code, and password when you sign in with phone credentials.
- Apple identity token when you use Sign in with Apple.
- Authentication tokens and current user profile data used to keep you signed in and provide authenticated community features.
1.2 Profile Information
- Nickname, avatar, gender, date of birth, country or region, and other profile details you choose to provide or update.
- Profile album images, avatar images, uploaded image identifiers, and related image metadata needed to display or manage those images.
1.3 Community and User-Generated Content
- Posts, comments, discussion-room messages, image messages, likes, check-ins, and similar community interactions.
- Reports, blocks, moderation-related actions, and the identifiers needed to process safety requests and enforce community rules.
1.4 Feedback Information
- Text, screenshots, images, or other attachments you submit through the feedback feature.
1.5 Device, Network, and Diagnostic Information
- Device identifier such as identifierForVendor, device brand, hardware model, operating system version, app version, locale, and User-Agent.
- Server logs that may include IP address, request time, API endpoint, response status, error information, and similar diagnostic data generated when you use the service.
1.6 Permission-Based Information
- Microphone and speech recognition access, used only when you choose to use voice-to-text input in a discussion room.
- Photo picker access, used when you choose images to send or upload.
- Add-only Photos access, used when you choose to save generated share images to your photo library.
- Calendar write access, used when you choose to add a selected concert to your system calendar and create a reminder.
2. How We Use Information
- To create, verify, secure, and maintain your account and authenticated session.
- To display, edit, and synchronize your profile, avatar, album, and community identity.
- To provide concerts, concert details, tour map, content feed, comments, likes, discussion rooms, check-ins, feedback, and related app features.
- To process image uploads, image loading, generated image saving, calendar reminder creation, and voice-to-text input that you actively request.
- To maintain service security, investigate abuse, process reports and blocks, troubleshoot bugs, debug API issues, and improve service reliability.
- To comply with applicable law, respond to lawful requests, enforce our terms, or protect the rights, safety, and security of users, the public, and our services.
3. Disclosure and Sharing
- Content you post in public or community areas, such as posts, comments, and discussion-room messages, may be visible to other users.
- We may share limited information with service providers that support authentication, API hosting, image storage, image delivery, feedback handling, security, or maintenance. We require such providers to protect user data at least as carefully as described in this Policy and to process it only for the services they provide to us.
- Features such as Sign in with Apple, iOS speech recognition, the system photo picker, saving to Photos, calendar writing, and MapKit rely on Apple or iOS system services. Information processed by Apple is governed by Apple's applicable terms and privacy practices. We are responsible for the information we collect from those features in our app.
- We do not sell personal information. We do not use personal information for cross-app tracking, targeted advertising, data broker disclosure, or third-party marketing.
- We may disclose information when required by law, legal process, regulatory request, dispute resolution, or when reasonably necessary to protect users, the public, or our services.
4. Practices Not Used by the Current App
Based on the current Malla iOS app, we do not collect or process the following categories or use cases:
- Payment card numbers, PayPal, Google Pay, orders, refunds, taxes, shipping, or other payment and transaction information.
- Facebook, X, Google, or other third-party social login data, social friend lists, contacts, or imported social profiles.
- Precise GPS location, continuous location tracking, background location, or location-based services. The tour map displays concert venue coordinates and does not request your current location.
- SMS, device contacts, Bluetooth, motion sensors, push notifications, or camera capture permissions.
- Cookies, web beacons, pixel tags, advertising identifiers, third-party advertising SDKs, targeted advertising, offer walls, cart reminders, or marketing emails.
- Sexual orientation, sex life, religious beliefs, financial accounts, health data, or other sensitive information unrelated to the current app features.
5. Retention and Deletion
We retain personal information only for as long as reasonably necessary to provide the services described in this Policy, maintain security, resolve disputes, enforce our terms, or comply with legal obligations. Community content that you submit may be retained for display, moderation, safety audit, dispute handling, or legal compliance.
You may request access, correction, or deletion of your personal information by contacting us. We may need to verify your identity before processing a request. We will delete or de-identify information when it is no longer needed, unless retention is required or permitted by law, security, dispute resolution, or legitimate service operation needs.
6. Security
We use reasonable technical and organizational measures designed to protect personal information, including access controls, token management, log redaction, and permission minimization. No method of transmission or electronic storage is completely secure, and we cannot guarantee absolute security.
7. Your Choices and Controls
You may review or update profile information in the app where supported. You may manage microphone, speech recognition, Photos, and calendar permissions in iOS Settings. If you revoke a permission, the related feature may no longer work. You may also contact us to request access, correction, deletion, or other assistance regarding your personal information.
8. Age Requirement
Malla is intended for users who are at least 18 years old. Users under 18 should not register for or use the service.
9. Changes to This Policy
We may update this Privacy Policy when our features, practices, or legal obligations change. When we do, we will update the "Last Updated" date and, where appropriate, provide additional notice.
10. Contact Us
If you have questions, requests, or concerns about this Privacy Policy or our handling of personal information, please contact us:
Email: [email protected]
Address: RM 02, 21/F, Hip Kwan Commercial Building, 38 Pitt Street, Yau Ma Tei, Kowloon, Hong Kong, China