Last Updated: March 22, 2026
1. Introduction
Welcome to NALLI PTE LTD ("we," "our," or "us"). We are committed to protecting your personal data and respecting your privacy in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application (the "App"). Please read this policy carefully. By using the App, you consent to the practices described in this Privacy Policy.
2. Information We Collect
We collect the following types of information to provide and improve our services:
2.1 Device Information
- Device model and manufacturer
- Operating system and version
- Unique device identifiers (e.g., IMEI, advertising ID)
- Screen resolution and hardware specifications
- Network information (Wi-Fi, mobile carrier)
- Browser type and version
2.2 Usage Data
- App usage patterns and session duration
- Features accessed and interactions within the App
- Crash reports and performance diagnostics
- Referral URLs and navigation paths
- Date and time of access
2.3 Location Data
- Approximate location based on IP address
- Precise geolocation data (with your explicit consent) via GPS, Wi-Fi, or cellular network triangulation
- Location history while the App is in use
2.4 Personal Information
- Name and contact details (when provided)
- Phone number (for WhatsApp communication)
- Email address
- Communication preferences
3. How We Use Your Information
We process your personal data based on the following legal bases under GDPR:
- Service Delivery: To operate, maintain, and provide you with the features and functionality of the App.
- Communication: To respond to your inquiries, send service-related notices, and facilitate customer support via WhatsApp Business and other channels.
- Improvement: To analyze usage trends, diagnose technical issues, and enhance the overall user experience.
- Personalization: To tailor content and features based on your preferences and location.
- Security: To detect, prevent, and address fraud, unauthorized access, and other security concerns.
- Legal Compliance: To comply with applicable laws, regulations, and legal processes.
4. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit (TLS/SSL) and at rest
- Regular security audits and vulnerability assessments
- Access controls and authentication protocols
- Employee training on data protection best practices
- Incident response procedures for data breaches
While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to promptly notifying affected users and relevant authorities in the event of a data breach, as required by GDPR.
5. WhatsApp Integration
Our App integrates with WhatsApp Business to provide seamless customer communication. When you interact with us through WhatsApp:
- Your phone number and WhatsApp profile information may be shared with us.
- Messages, media, and other content exchanged through WhatsApp are subject to WhatsApp's Privacy Policy.
- We may use WhatsApp Business API to send transactional notifications, order updates, and customer support messages.
- Conversation data may be stored for quality assurance and service improvement purposes.
- You can opt out of WhatsApp communications at any time by contacting us or blocking our business number.
6. Third-Party Services
We may share your information with third-party service providers who assist us in operating the App. These include:
- Analytics Providers: To help us understand how users interact with the App (e.g., Google Analytics, Firebase Analytics).
- Cloud Infrastructure: For secure data storage and processing.
- Communication Platforms: WhatsApp Business API and email service providers.
- Payment Processors: To securely handle transactions, if applicable.
All third-party providers are contractually obligated to protect your data and process it only for specified purposes in compliance with GDPR. We do not sell your personal data to third parties.
7. User Rights
Under the GDPR, you have the following rights regarding your personal data:
Right of Access
Request a copy of the personal data we hold about you.
Right to Rectification
Request correction of inaccurate or incomplete personal data.
Right to Erasure
Request deletion of your personal data ("right to be forgotten").
Right to Restrict Processing
Request limitation of how we process your personal data.
Right to Data Portability
Receive your data in a structured, commonly used format.
Right to Object
Object to processing based on legitimate interests or direct marketing.
To exercise any of these rights, please contact us using the information provided below. We will respond to your request within 30 days as required by GDPR.
8. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
9. Changes to This Privacy Policy
We reserve the right to update or modify this Privacy Policy at any time. When we make changes, we will:
- Update the "Last Updated" date at the top of this page.
- Notify you of material changes through the App or via email.
- Obtain your consent where required by applicable law before implementing significant changes.
Your continued use of the App after changes are posted constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically.