Skip to content

Privacy Policy

last updated: 2026-10-21

Malang Malang is a feelings journal with no account. Your entries are saved on your device, and while automatic backup is on, a backup file is kept in your own iCloud Drive. Entries are never sent to a developer server, and the developer cannot see them. The app moves your entries off your device only through iCloud backup, exports and cards you choose to share, and emails you choose to send us. Apart from that, only what is needed to check your Malang Malang Pro purchase status is exchanged. Separately, depending on your device settings, entries may be included with other device data in your iPhone's iCloud Backup or a computer backup.

Your entries

The feeling words you pick, Malang's face at that moment, the optional line you write, the date and time of each entry, and the feeling words you create are stored in a local database on your device, and settings such as language, theme, and reminders are kept in the device's settings storage. None of it is sent to a developer server. There is no account, so we never ask for your name or email. Malang Malang is a personal journal for your feelings. It does not collect health measurements and does not diagnose or treat any condition. The day counts in the calendar and look-back screens are tallied on your device, with no AI analysis or interpretation.

iCloud backup

Automatic backup is on by default. If iCloud Drive is turned on for your device, the app saves a backup file (JSON) to a Malang Malang folder in your own iCloud Drive from your first entry and whenever your entries change. The file holds your entries, the feeling words you created (including hidden ones), a random installation ID made by the app, the device type (iPhone or iPad), and the time it was saved; app settings are not included. Each installation gets its own file, stored by Apple iCloud; the developer cannot access it. Entries do not sync live between devices. On another device or after reinstalling, you choose a backup to restore. Turning automatic backup off in Settings stops new backups, and you can keep or delete the existing file. iCloud storage follows Apple's privacy policy.

Malang Malang Pro status checks

Malang Malang Pro (subscriptions and the Lifetime purchase) is bought and restored through the Apple App Store, and RevenueCat checks your purchase status. When the app launches, it contacts RevenueCat to check whether you have Pro and which products are for sale, even if you have never made a purchase. For this, RevenueCat receives a random anonymous user ID created by the app, the device's identifier for vendor (IDFV), your purchase history (product, purchase date, and expiration date, if you made a purchase), the app version, your device and OS type, your store country, and the time of the request. Your name, email, and payment method are handled by Apple; neither we nor RevenueCat receive them. This information is used only to verify purchases, provide Pro features, and see purchase and subscription statistics (subscriber counts, cancellations, and revenue). Your entries and how you use the app are never included, and none of this is used for ads or tracking. Your IP address may reach RevenueCat's servers as part of these requests.

App lock

When you turn on App Lock, iOS checks Face ID, Touch ID, or your device passcode, depending on your device. Malang Malang never receives or stores biometric data or your passcode; it only learns from iOS whether the check passed. App Lock covers the app, and widgets only when Hide in Widgets is also on. It does not lock exported files, iCloud backup files, or cards you have already shared or saved.

Location, contacts and sensors

Malang Malang does not use your location, contacts, calendars, health data, microphone, camera, or motion sensors, and it never reads your photo library.

Third parties

Malang Malang has no server of its own and uses no advertising networks, no tools that track how you use the app, no crash reporters, or any service that can see your entries. The purchase information above is handled by RevenueCat, Inc. under the RevenueCat Privacy Policy (revenuecat.com/privacy). If you turned on Share With App Developers in your device settings, Apple may collect crash information and pass it to the developer under Apple's privacy policy. Apple and RevenueCat, which handle backups and purchases, protect this information at a level equal to or higher than this policy.

Notifications

The once-a-day reminder is scheduled by iOS on your device. No remote push servers are involved. Notification permission is requested only when you choose to turn on reminders, during setup or in Settings.

Widgets

Widgets draw Malang's face, the first feeling word, and the number of entries for each day from what the app saved on your device. Your written line is never used in widgets. What widgets show never leaves your device either. With App Lock and Hide in Widgets (on by default) both on, widgets hide your entries too.

Export and import

Export your entries as a file (JSON) anytime from Settings and send it wherever you choose through the iOS share sheet. Import reads a file you pick, on your device.

Sharing a card

Today and year cards are made as images on your device, and your written line is never put on a card. A card is added to Photos only if you choose Save Image in the share sheet.

When things are hard

Tapping the external support resources in Settings (109 in Korea, 988 in the US, findahelpline.com) opens the Phone app or your browser. Malang Malang does not provide counseling, and never monitors your entries or passes them to anyone.

Data deletion

In Settings → Delete, you can erase this device's entries, your feeling words, Malang's line history, and this installation's iCloud backup file. If iCloud can't be reached, the deletion waits and runs when it can, so if you uninstall before then, delete the file from iCloud Drive in the Files app. Backups from other devices or earlier installations can be deleted one by one in Import → Restore from iCloud Backup, or from iCloud Drive in the Files app. App settings, the installation ID, and files or cards you exported or shared are not erased by this; delete those where you saved them. Uninstalling the app also erases the entries and settings on your device. No copy of your entries is kept on any developer server. The anonymous user ID and purchase history sent to RevenueCat are kept under the RevenueCat Privacy Policy to verify purchases, handle refunds, and keep accounting records. To ask for deletion, whether or not you made a purchase, email dev@indieway.xyz with the order ID from your App Store receipt so the purchase can be found, and we will ask RevenueCat to delete it.

Children

Malang Malang is not directed at children under 13 and never asks anyone for personal information such as a name or email.

Changes

If this policy changes, the update will appear here with a new date.

Contact

Questions? Reach out at dev@indieway.xyz. If you email us through Contact in Settings, what you write, your email address, and the details attached to the message (app version and bundle ID, device and iOS version, app and device languages, region and time zone, theme, whether reminders are on and their time, number of entries and feeling words but not their contents, and whether you have Pro) reach the developer's inbox. If no mail app can open, the same text is copied to your clipboard, and nothing reaches the developer until you send it yourself. You can remove these details before sending. Emails received through the app or this site are used only to reply and look into the issue, kept only as long as needed to handle it, and you can ask for deletion at dev@indieway.xyz.