Mallow
Privacy Policy

You do not need to create a Mallow account to use the app. We do not operate servers that receive, relay, or store chat requests. We do not receive or store your chat content, images, speech transcripts, API keys, or device tool data through Mallow. We do not track you for advertising purposes or collect information about your use of the app for analytics.

Mallow processes data on your device and connects to the relevant services based on the features you use and the settings you choose. The following describes the data involved in these features and how it is used.

Chat content. When you send a message, Mallow sends the current message, relevant conversation context, and image attachments to your configured AI service to generate a response. Conversation context may include previous messages, speech transcripts, and results from device tools.

Service settings and API keys. Mallow uses the server addresses, model options, and other settings you provide to connect to the relevant services. API keys authenticate your access to a service and are included in requests to that service when authentication is required.

Voice data. Mallow uses Apple’s speech recognition features to convert speech into text. Depending on your device, language, and system capabilities, audio may be processed on your device or sent to Apple’s servers for processing. The resulting text may be sent to your configured AI service as chat content. When you use an external text-to-speech service, the text to be read aloud and the relevant speech settings are sent to the service you have configured.

Camera images. When you take a photo and attach it to a message, or enable the visual chat feature, Mallow processes the corresponding images. The visual chat feature selects images from the camera feed and sends them with the associated chat requests to your configured AI service.

Device tools. Depending on the tools you enable, Mallow may access information such as your location, calendar events, reminders, and device motion data to fulfill your requests. Tool results may contain personal data and are sent to your configured AI service as part of the conversation when needed. Depending on your authorization settings, some read operations may run automatically without asking for confirmation each time.

Your communications with us. When you contact us by email or other means, we receive the contact information, description of your issue, and attachments you provide. We use this information only to respond to you, handle your requests, and resolve related issues.

Mallow allows you to connect to local servers or services provided by third parties. Chat requests and requests to external text-to-speech services are sent directly from your device to the service addresses you configure. They do not pass through servers operated by us. System features, such as Apple’s speech recognition, may connect to Apple’s services as part of their operation.

Before using a third-party service, we encourage you to review its privacy policy, your agreement with the provider, and the relevant service settings. These explain how the service uses the data it receives, how long it retains that data, whether it uses the data for model training or discloses it to others, and how it handles requests to access or delete data.

When Mallow loads externally hosted images, accesses online resources, or opens links, the websites or servers providing that content may receive your IP address, the time of your request, and other network request information. These websites and services have their own privacy policies.

Third-party services may store or process data outside your country or region. The locations where data is processed depend on the services you choose and how they are configured.

This Privacy Policy explains how Mallow accesses and transmits data. Third-party privacy policies separately explain how those services handle the data they receive. You may contact the relevant provider about data it holds, or contact us about Mallow’s access to and transmission of your data.

Chat history, image attachments, and app settings are stored on your device. API keys are stored in the keychain provided by your operating system. We do not keep copies of this data on our servers.

You can manage and delete local chat history and related data in Mallow, and use the data export feature to create backups. Backup files include chat history, images, app settings, and any saved API keys. Keep your backups secure and review their contents before sharing them to check for information you do not wish to disclose.

Your device’s system backups may include app data. Deleting records in Mallow does not remove copies from system backups or files you have already exported. These copies need to be managed separately.

Deleting local records, revoking device permissions, or uninstalling Mallow does not undo data transfers that have already taken place or automatically delete copies retained by third-party services. For information about the retention and deletion of that data, refer to the relevant service’s policies and documentation.

We retain information you provide when contacting us only for as long as necessary to handle your request. We delete it when it is no longer needed, unless we are required by law to retain it.

You can use Mallow’s settings to choose which services to connect to, change service configurations, and enable or disable device tools. You can manage permissions for the camera, microphone, speech recognition, location, calendars, reminders, and device motion data through your operating system settings.

You can decline to grant permissions or revoke permissions you have already granted. Features that depend on those permissions may become unavailable. Disabling tools or revoking permissions limits subsequent access to data but does not delete content previously saved in your conversations.

You can use the app’s features to view, export, or delete local data. Because we do not hold copies of this data, we cannot directly access or delete records on your device on your behalf.

For personal data we process, such as information provided in your communications with us, you may use the contact details in this policy to request access, correction, or deletion, or to submit another privacy-related request. We will handle your request in accordance with applicable law. Where we rely on your consent to process personal data, you may withdraw that consent. Withdrawal does not affect the lawfulness of processing carried out before you withdrew your consent.

Mallow uses the operating system’s keychain and permission controls to protect stored API keys and manage access to device resources.

The protection of data in transit depends on the connection you configure. HTTPS encrypts data in transit. HTTP alone does not provide this protection, and chat content and authentication information may be intercepted during transmission. When connecting to a remote server, we recommend using HTTPS, verifying the service address, and ensuring that you trust the provider.

Keep your device, API keys, and exported files secure. When reporting an issue to us, do not include API keys or personal data unrelated to the issue.

Mallow is not specifically directed at children. Minors using Mallow and the third-party services they connect to must comply with applicable age requirements. Where parental or guardian consent is required, it must be obtained before the relevant features are used.

If you believe that a child has provided us with personal data without appropriate authorization, please contact us using the details in this policy so that we can address the matter.

We may update this Privacy Policy to reflect changes to app features, data handling practices, or legal requirements. When we do so, we will publish the revised policy and update the date at the top of this policy.

We will notify you of changes that materially affect your privacy through an in-app notice or another appropriate means. Where required by law, we will obtain your consent before implementing the relevant changes.

If you have questions about this Privacy Policy or Mallow’s data handling practices, or would like to submit a privacy request or complaint, please contact us:

Email: privacy@lionwu.com

We will handle and respond to your request in accordance with applicable law. You may also lodge a complaint with a data protection authority that has jurisdiction over your complaint.