Privacy notice.

This notice describes how Malai handles the small amount of information visitors can send us through this website. It applies to the marketing site (this domain) only — the demo webapp at app.malaibank.com runs entirely on synthetic data and never receives information about real people.

If you send us a message through the contact page, we receive your name, your email address, and the message text. We do not ask for, and do not retain, any financial information, identity documents, or banking credentials. The website itself does not run product analytics, advertising scripts, or session-replay tools in production.

The demo webapp shown elsewhere on this project is a reference customer journey populated with generated data. Every account holder, balance, transaction, and audit event you see inside it is synthetic. No real banking data is, has been, or will be loaded into it. Opening an account inside the webapp creates a synthetic profile only — it never becomes a real customer record anywhere.

Contact-form submissions are used only to reply to your message and to keep a short audit trail of the exchange. We do not sell, rent, share with marketers, or otherwise disclose the information you send. It is read by the project maintainer and is not exposed to third parties beyond the email-delivery provider routing the reply.

Contact-form submissions are retained for up to twelve months from the date of the last exchange in the conversation, then deleted. You can ask for earlier deletion at any time using the contact page.

You can ask us to confirm what information we hold about you, request a copy, correct anything inaccurate, or ask for it to be deleted. Send the request through the contact page; we will respond within thirty days. If you believe we have mishandled your information, you can also raise a complaint with the UK Information Commissioner's Office.

The marketing site is a static site and does not set tracking cookies. The demo webapp uses a session cookie strictly for keeping a synthetic visitor signed in to their synthetic account — it carries no personal data and is not used for advertising.

This notice may change as the project evolves. The date below shows the last revision. Material changes will be flagged on the site rather than applied silently.