Privacy policy
Last updated: August 2026
Malve is built so that there is as little as possible to explain. This page nevertheless lists in full what is collected, who processes it and how long it stays.
1 · Controller
Gabriel Suter
Neu-Bern 23
4658 Däniken, Switzerland
Email: contact@malve.app
Malve is developed by a private individual. For any data protection question, an email to the address above is enough; you will get a personal reply.
2 · The Malve app
This is the part where the policy is shortest: Malve collects no personal data and transmits no data, neither to us nor to third parties.
- There is no user account and no registration. We do not know who uses the app.
- Your entries (period, symptoms, mood, notes) are stored exclusively in a database on your device.
- Predictions and insights are calculated on your device. No transmission to a server takes place, because no server is operated for the app.
- No third-party analytics, tracking, advertising or crash reporting services are embedded.
- You create backups yourself as an encrypted file and store them wherever you want. If you use a cloud service for that (e.g. iCloud), that provider's privacy policy applies; we have no access to that file.
- When you share a forecast card or a report, the content leaves your device only through the app you pick at that moment (e.g. Messages or Mail), and only for the content you send then. No standing third-party access to your data is provided for.
- Purchases will run through the App Store. Apple processes payment and account data under its own privacy policy. Apple gives us no information that would identify individual people.
3 · This website
Server logs
This website is hosted by Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA). When a page is opened, Vercel processes technically necessary connection data such as IP address, timestamp, requested address, browser type and amount of data transferred. This data is required to operate and secure the site; we do not evaluate it on a personal basis and do not combine it with other data. As the provider is based in the USA, a transfer to the USA takes place.
Cookies and audience measurement
This website sets no cookies and uses no analytics or tracking services. No profiles are built and no third-party visitor statistics are collected.
Typefaces
The typefaces Fraunces and Inter are currently loaded via Google Fonts (Google Ireland Limited / Google LLC). Your IP address is therefore transmitted to Google when the page loads. Google sets no cookies for delivering the fonts. NOTE: once the fonts are self-hosted, this section must be deleted.
4 · Waiting list
Data collected: your email address, the language version you sign up through and, if you clicked a price beforehand, the price variant you chose. Nothing else: no name, no IP address, no time of your visit, no referring page.
Purpose: to notify you once when Malve is released. The price variant helps us decide on the pricing model, the language tells us which language to write to you in.
Legal basis: your consent given by submitting the form (Art. 6(1)(a) GDPR for visitors from the EEA; Art. 6 revFADP).
Storage location: Supabase (Supabase Inc.) in the region eu-central-2, Zurich. The data therefore sits on servers in Switzerland. The list is configured so that it can only be written to from the website, never read.
Retention: until the launch notification, after which the list is deleted. You can request deletion at any time before that, an email is enough.
No newsletter: the address is used exclusively for that one message and is not passed on, not sold and not used for advertising.
5 · Processors and recipients
Apart from the following service providers, which are necessary for operation, we pass on no data:
- Vercel Inc., USA: website hosting (server logs)
- Supabase Inc., Zurich region: storage of the waiting list
- Google Ireland Limited / Google LLC: delivery of the typefaces (IP address), see section 3
No sale of data takes place, and there are no advertising or data monetisation agreements.
6 · Your rights
You have the right to access the data stored about you, and to have it corrected, deleted, its processing restricted, to data portability, and to withdraw a consent you have given. For the waiting list this is simple in practice: write to contact@malve.app and the entry will be deleted.
For data inside the app you do not need us: it is on your device and you can view, export or delete it there at any time using the app.
People in Switzerland can complain to the FDPIC, and people in the EEA to their competent data protection authority.
7 · Data security
The website is delivered exclusively over an encrypted HTTPS connection. The transmission of your email address to the waiting list is encrypted as well.
8 · Changes
As the app develops, this policy may be adapted. The version published here applies. The principle stays the same: what is never collected does not need protecting.