Mali Fund

Privacy Policy — Asl

Last updated:

This policy explains how the Asl app (أصل) for iPhone, iPad and Android handles your information. Asl is made by Mali Fund (“we”).

In short: your portfolio, Zakat and settings stay on your phone. Asl has no accounts, no ads, no analytics and no tracking. We do not sell or share your personal data.

Information you enter

You can add stocks, funds, gold, silver, cash, bank balances, debts, purchase prices and dates, Zakat dates and payments, a watchlist and your settings.

This information is saved only in the app’s storage on your device. It is not sent to us or to anyone else. We cannot see it.

The assistant in the app answers on your device. Your questions are not sent to a server.

Information the app downloads

To show prices, Shariah screening results, metal prices and exchange rates, the app downloads data from these services:

  • Our market data server, hosted by Supabase (supabase.com). Requests name the stock or fund you open, so the server can send its prices and report. They do not include your holdings or amounts.
  • Currency API, a free exchange rate feed served from Cloudflare Pages and jsDelivr.

Like any internet service, these services receive your device’s IP address and basic technical details, such as the app and system version, when the app connects. They use them only to deliver the data and to keep their service secure, and they keep their logs for a short time. We do not use this information to identify you, and we do not combine it with other data.

What we do not collect

  • No account, name, email address or phone number.
  • No location, contacts, photos, camera or microphone.
  • No advertising identifiers, ads, analytics or tracking.
  • No crash reporting tools in the app.
  • No payments. Asl is free and has no in-app purchases.

Asl does not track you across apps or websites that belong to other companies.

Sharing and selling

We do not sell, rent or share your personal data. Your portfolio stays on your device, so we have no personal data to share.

App stores and backups

Apple (App Store) and Google (Google Play) handle downloads and can collect information under their own privacy policies, for example crash reports that you agree to share with developers. We receive only summary statistics from them.

Your phone can include app data in your own iCloud or Google backup if you turned backups on. Your Apple or Google account controls those backups, not us.

Keeping and deleting your data

Your data stays on your device until you delete it.

To delete everything, open Settings in the app and tap “Clear all my data”, or uninstall the app.

We keep no copy, so we cannot restore deleted data.

Security

The app downloads data over encrypted HTTPS connections. Your phone’s own security, such as your passcode, protects the data on your device. Keep your phone locked.

Children

Asl is made for adults. It is not directed at children under 13, and we do not knowingly collect information from children.

Your rights

Data protection laws, such as the Saudi Personal Data Protection Law and the EU GDPR, give you the right to access, correct and delete your personal data. Asl keeps your data only on your device, so you can see, change and delete it yourself at any time. If you have a question or a request, contact us. In Saudi Arabia, you can also complain to the Saudi Data & AI Authority (SDAIA).

The app can open other websites, such as a data provider’s page. Their own privacy policies apply there.

Changes to this policy

If we change how Asl handles data, for example by adding optional accounts or price alerts, we will update this policy and the date at the top before the change goes live. We will also show important changes in the app.

Contact

Questions about privacy: email info@malifund.com.