Privacy Policy

  Translation Disclaimer

This website provides automatic translations for your convenience. The original text is written in English, which constitutes the sole legally binding version. In the event of any discrepancy, conflict, or error between the translated text and the English original, the English version shall always prevail.

Effective Date: 10/09/2026


1. Introduction and Data Controller

Welcome to Målby. This Privacy Policy explains how Óscar García Carrero (Målby EU), registered address at Av. Pérez Galdós 78-5 in Valencia(Spain) ("we", "us", or "our"), acting as the Data Controller, collects, uses, and protects your personal data.

We are committed to ensuring your privacy is protected and strictly adhere to the General Data Protection Regulation (GDPR) (EU) 2016/679 and the Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).

2. The Data We Collect

We believe in strict data minimisation. The only personal information we require to operate your account is:

  • Email Address: Used solely to communicate with you if necessary and to process your PRO subscription (should you choose to upgrade).

What We Do Not Collect: We have no access to your login credentials, your tasks, your notes, or your achievements. All your application data is strictly anonymised and remains under your sovereign control.

3. How We Use Your Data and Legal Basis

Under the GDPR and LOPDGDD, the legal basis for processing your email address is the performance of a contract (providing the Service to you) and your explicit consent when upgrading to a PRO account. Your email is used exclusively for:

  • Providing and maintaining our Service.

  • Managing your PRO subscription.

  • Notifying you about critical changes or security updates.

We will never sell, trade, or share your data with third parties for commercial purposes.

4. Data Storage and Security

Your data is processed and stored securely on servers located in Europe's largest data centre in France, ensuring full compliance with European digital sovereignty standards.

We implement robust, state-of-the-art security measures to protect your information, including:

  • Secure encryption protocols (HTTPS/TLS) for all data in transit.

  • Strict global security headers (including CSP, X-Frame-Options SAMEORIGIN, and X-XSS-Protection) enforced by our backend infrastructure.

  • Complete database isolation from public access.

5. Your Rights

As a user, you retain full ownership and control over your data. Under the GDPR and LOPDGDD, you have the right to:

  • Access: Request a copy of the personal data we hold about you.

  • Rectification: Request correction of any inaccurate or incomplete data.

  • Erasure (The Right to be Forgotten): Delete your account and all associated data instantly with a single, simple click within the application.

  • Data Portability: Download your data in a structured, commonly used format.

  • Restriction & Objection: Object to or restrict the processing of your data.

To exercise any of these rights, please contact us at info@maalby.eu.

Furthermore, if you believe your data protection rights have been violated, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) via their website: www.aepd.es.

6. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Effective Date".