Privacy Policy

Malibu helps people check products before buying, pause purchases, and receive price alerts. This policy explains what information we collect and how we use it.

Information we collect

Account information: email address, account identifier, authentication records, and subscription status.
Product information: product URLs, titles, prices, stores, analyses, paused products, tracked products, and alert preferences.
Usage information: meaningful actions such as completed checks, saved products, tracking actions, and opened alerts. Malibu does not award engagement for passive app opens.
Device information: a push notification token and app-generated device identifier when notifications are enabled.
Support information: information you choose to include when contacting support.

How we use information

We use this information to authenticate your account, produce product analyses, synchronize paused and tracked products, generate price alerts, prevent abuse, maintain service reliability, and respond to support requests. We do not sell personal information or use it for third-party advertising.

Service providers

Malibu uses service providers to operate the product, including Supabase for authentication and data storage, Vercel for application hosting, Stripe for subscription billing, Apple for push notification delivery, and search/data providers used to locate public product listings. These providers process information only as needed to deliver their services under their own privacy terms.

Product links and prices

When you submit a product URL, Malibu processes the URL and product details to find comparable public listings. Retailer pages and prices can change. Malibu stores submitted products when you pause or track them so they remain available across devices.

Retention and deletion

We retain account data while your account remains active and as needed for security, legal, and operational requirements. You can permanently delete your account from Settings in the Malibu iOS app. Deletion removes your profile and associated product, alert, activity, and push-token data, except information we must retain by law. Active Malibu subscriptions are cancelled during deletion.

Security

Authentication tokens are stored in iOS Keychain-backed secure storage. Data is transmitted using encrypted HTTPS connections. No system can guarantee absolute security, but Malibu limits access and uses service-role credentials only on the server.

Children

Malibu is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Your choices

You can disable notifications in iOS Settings, remove individual paused or tracked products in the app, or delete your account from Malibu Settings.

Contact

Questions or privacy requests can be sent to support@malibu.llc.