Privacy Policy

Last updated: August 2026

Mahalatly (“we”, “us”) provides a delivery order-management platform used by businesses and their staff to receive, track, and fulfil customer orders. The Mahalatly mobile app is a companion to the Mahalatly web dashboard. This policy explains what data we handle and how.

Who uses the app

The app is for authorised staff of a business that uses Mahalatly (owners, admins, employees, and delivery drivers). Accounts are created by the business; the app does not offer public sign-up.

Information we process

• Account information — the email address and role of the staff member who signs in, used to authenticate them and control access.
• Order and customer information — order details and the customer contact and delivery information (name, phone number, address) that the business records to fulfil an order. This data belongs to the business; staff access it only to do their job.
• Device token — if the staff member enables notifications, a push token is stored so we can alert them about order events (new order, delivered, cancelled, paid). It is used only for these notifications.
• On-device credentials — the login is stored only in the device’s secure Keychain (optionally protected by Face ID / Touch ID) so the user need not retype it. It never leaves the device and is not synced to iCloud.

How we use it

Solely to operate the service: authenticate staff, display and manage the business’s orders, send order notifications, and keep the account secure. We do not sell personal data, and we do not use it for advertising or tracking across other apps or websites.

Sharing

We share data only with infrastructure providers that operate the service on our behalf (hosting, database, and Apple Push Notification service for delivering notifications), and where required by law. These providers process data only to provide their service to us.

Security & retention

Data is transmitted over encrypted connections (HTTPS) and access is restricted by role. Order data is retained for as long as the business keeps its account. A staff member can sign out at any time, which removes the saved login from the device.

Your choices

Staff can turn notifications and the Face ID lock on or off in the app’s settings, and sign out to clear stored credentials. Businesses can request access to, correction of, or deletion of their data by contacting us.

Contact

Questions about this policy or your data: support@mahalatly.com.