Mallnest privacy policy

1. Who we are

Mallnest is an application developed and published by ImagoStack (“we”), operating from Argentina. For any privacy enquiry you can write to us at support@imagostack.com.

2. What data the application handles

The app handles only the information you enter so that it can work. In detail:

• Default store and cart. To remember which store you picked so the app opens straight into it, and the products you added to each store's cart while shopping. It is stored on your own device.

We do not use that data to show advertising, we do not sell it or share it with third parties beyond the providers listed in section 5, and we do not build user profiles or track you across apps.

3. Where your data is stored

Some information is processed on our own servers or on those of infrastructure providers contracted by ImagoStack, with security measures appropriate to the type of data.

Mallnest requires no account to shop. When you use the personal shopper, the text of your search and the list of available products are sent to Google's Gemini API through our server to find the matching products; neither ImagoStack nor the app keeps a copy of your searches. If that service is unavailable, the app falls back to the regular search. When you pay, you complete the purchase in the chosen store's Shopify checkout: your shipping and payment details go to that store, as the seller, under its own privacy policy. Mallnest never sees or stores your card details.

If you back up your phone, the operating system may include the app's data in that backup. That backup is managed by Google or by your device manufacturer under their own policies, not by ImagoStack.

For how long. We keep the information for as long as it is needed to provide the service. When it is no longer needed, or if you ask us to delete it, we erase it —unless a legal obligation requires us to retain some data for a set period, and only for that period.

4. Permissions the app requests

Mallnest requests no sensitive Android permissions: no camera, no microphone, no location, no contacts and no external storage.

5. Sharing information with third parties

So that some features can exist, the app uses the following third-party services, which may process data under their own policies:

• Shopify. To show each store's products and process the purchase in its checkout. Each store is the seller and responsible for your order data. See their privacy policy.
• Google Gemini (API). To interpret what you ask the personal shopper and pick the matching products. Google processes that text under its own service terms. We ask you not to type identifying details or sensitive information in your searches. See their privacy policy.
• Amazon Web Services. To host Mallnest's server: the store list, its configuration and passing searches on to Gemini. See their privacy policy.

We may disclose information only where a competent authority requires it through a valid legal order.

The providers named above may process that information on servers located outside your country, under the safeguards set out in their own policies and in the legal frameworks that apply to them.

Under no circumstances do we make automated decisions that affect you, nor do we build user profiles.

6. Content you share yourself

If you use a feature of the app to share content (for example, sending an image or a summary by messaging), that sending is done by you through the application you choose. ImagoStack does not take part in that content and keeps no copy of it.

7. Minors

Mallnest is not directed at children under 13 and does not knowingly collect data from minors. If you believe a minor has given us information, write to support@imagostack.com and we will delete it.

8. How to delete your data

You can request the deletion of your data by writing to support@imagostack.com. We process the request within 30 days.

More details on the data deletion page.

9. Your rights

Under the regulations that apply to you —the GDPR if you are in the European Union, the LGPD in Brazil, Personal Data Protection Law 25.326 in Argentina, or whichever governs in your country— you have the right to access your data, rectify it, erase it, restrict it or object to its processing. Write to us to exercise them.

Legal basis. We process the information in order to provide the service you request and, depending on the case, on the basis of your consent or of our legitimate interest in keeping the application running and preventing abuse.

If you believe we did not handle a request properly, you have the right to lodge a complaint with the supervisory authority of your country of residence: for example, the Garante per la protezione dei dati personali in Italy, the Spanish Data Protection Agency in Spain, the National Data Protection Authority in Brazil, or the Agency for Access to Public Information in Argentina.

10. Security

We apply reasonable technical measures to protect information, including the use of the operating system's private storage. No method is infallible, but we minimise the risk with the simplest strategy: not accumulating data we don't need.

11. Changes to this policy

If we update this policy, we publish the new version at this same address and change the date in the header. If the change is significant, we announce it inside the app.

12. Contact

ImagoStack — Argentina. Support and privacy: support@imagostack.com.