Effective Date: September 3, 2026 Website: www.malaka.cy

At Malaka Cyprus, we develop mobile applications designed to streamline bookings, empower company staff, manage specialized client data, and leverage AI to enhance productivity. This Privacy Policy explains how we collect, use, and protect your information across our website and applications—whether accessed for free, via subscription, or through a one-time payment.

1. Information We Collect & Device Permissions

Depending on the specific application you use, we may request explicit access to device hardware and personal data. For specialized applications like DentaCare, these permissions are critical for clinical and administrative functions:

• Contacts (NSContactsUsageDescription): We request access to your device’s contacts solely to allow you to import and save patient contact information and to facilitate the sending of automated appointment reminders.
• Camera (NSCameraUsageDescription): We request camera access to enable the secure capture of clinical dental photographs and patient profile pictures directly within the application environment.
• Photo Library (NSPhotoLibraryUsageDescription): We require access to your photo library to allow you to select and upload existing patient dental photos, X-ray records, and historical clinical documentation.
• Account & Profile Data: Name, email address, and authentication credentials required to access subscription or staff-portal apps.
• API & System Data: Information transmitted when our apps connect via API to our website or your internal company systems.
• AI Generation Prompts: Text and context provided by you to utilize our AI content-generation features.

2. How We Use Your Information

We use your data strictly to operate our software. Your data is used to:

• Facilitate app core functionalities, including syncing staff portals, managing clinical records, and executing API connections.
• Process your inputs through AI models to generate requested text or emails.
• Analyze app statistics to diagnose technical issues and optimize app performance.
• Conduct targeted marketing for Malaka Cyprus applications (excluding sensitive clinical or patient data, which is never used for marketing).

3. Data Processing & Patient Confidentiality

For applications handling clinical documentation (such as DentaCare), the user (the clinic or practitioner) acts as the Data Controller, and Malaka Cyprus acts as the Data Processor.

• Consent: You are responsible for obtaining explicit consent from your patients before capturing, uploading, or storing their clinical photos, X-rays, and contact details.
• No Selling of Data: We absolutely do not sell, rent, or trade your personal data, nor any patient data uploaded to our apps, to third parties.

4. Security & Limitation of Liability

We implement industry-standard security measures to protect API transmissions and stored data. However, no digital system is entirely impenetrable.

By using our applications and website, you acknowledge that Malaka Cyprus assumes no legal liability for any data loss, corruption, unauthorized access, hacking incidents, or subsequent damages. You entrust your data to our systems at your own risk, and you are solely responsible for maintaining independent, secure backups of all critical business information, patient records, and generated content.

5. Your Rights

Under GDPR and applicable data protection laws, you retain the right to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request the deletion of your personal data from our active systems.