Privacy policy

Last updated October 1, 2026

Malaab is a basketball app for Lebanon and the region, on the web, iPhone and Android. This page says what Malaab collects, why, who else sees it, how long it's kept, and how to have it deleted.

Malaab is run by JesusOS, who is responsible for your data. Write to jesusos.dev@gmail.com with any question about it.

In short

• You can use Malaab without an account. Without one, Malaab keeps nothing about you beyond the request logs every website keeps.
• To use Ask, you sign in with your email. Malaab keeps your email and what you ask, so it can answer and show you your conversations.
• The text of each question is erased after 90 days.
• Usage analytics are anonymous, and you can turn them off.
• Malaab doesn't sell your data or show ads.
• You can download or delete your data in Settings, or by writing to us.

What Malaab collects

If you sign in

• Your email address, to sign you in. Malaab emails you a 6-digit code instead of using a password.
• Your sessions: when each device signed in and was last used. A session ends when you sign out, or after a year without use.
• What you ask, and the answers, so you can return to them.
• Your ratings of answers, and any note you add to one.
• How many questions you ask each day, to keep to the daily limit.
• What each question was about, such as a team or a player, and how it was answered, to improve Ask.

When you ask for a sign-in code

• Your email and your network (IP) address, to stop abuse such as sending many codes. These are deleted after 30 days.

Usage analytics

• Anonymous events, such as opening a screen, viewing a game, asking a question (never its text) and errors (only their type). Each comes with the app's version, your platform, your device's language and a random ID made for this install. They're never linked to your account, your email, your questions or the answers.
• Analytics are on unless you turn them off, in Settings, under Privacy, with Share usage analytics. The choice applies to that device or browser.

On your device

• Your session, your theme, the language you speak to Ask in and your analytics choice. The session is kept in the Keychain on iPhone, in the Keystore on Android and in the browser's storage on the web. Signing out or deleting your account removes it.

Voice

• If you ask by voice, your device's own speech recognition turns what you say into text: Apple's on iPhone and Mac, Google's on Android, or your browser's on the web. Those companies may process the audio under their own privacy policies. Malaab only receives the text you send.

Server logs

• Like most websites, Malaab's server records the requests it receives, including your network address and browser, to run and protect the service. Malaab's own logs and metrics hold no emails, questions or network addresses.

Who else sees it

Malaab uses these services to run. Each gets only what it needs.

• Hetzner hosts Malaab's server and database, in Germany.
• Resend sends your sign-in codes. It receives your email address and the code.
• An AI provider writes Ask's answers: Google (Gemini), Anthropic (Claude) or OpenAI (GPT). If one isn't available, the next receives the same. It receives your question, the earlier messages in that conversation and basketball data from Malaab, never your email or account.
• PostHog, in the United States, receives the anonymous analytics above. It sees your network address when they arrive, but Malaab tells it not to work out your location or build a profile of you.
• Grafana Cloud receives Malaab's server logs and metrics, which hold no emails, questions or network addresses.
• Player photos load from the websites that host them, which see your network address as any website does.
• Streams open YouTube or the broadcaster's site, only when you tap them.

Malaab may keep a copy of a question to check that Ask answers it well, with nothing that links it to you. Malaab doesn't sell your data or share it for advertising.

How long it's kept

• Question text: erased 90 days after you ask, with the conversation's title. The answers, your ratings and notes stay until you delete your account.
• Your account and everything linked to it: until you delete your account.
• Sign-in codes: a day after they expire. Each works for 10 minutes.
• Email and network address from sign-in requests: 30 days.
• Backups of the database: 14 days.
• Daily counts of what people ask about, which don't link to anyone: kept.

Your choices

• See your data: in Settings, under Privacy, Download my data gives you a file of everything kept about your account.
• Delete your data: in Settings, under Privacy, with Delete my data, or by email.
• Turn off analytics: in Settings, under Privacy, with Share usage analytics.
• Anything else, such as a question or a correction: write to jesusos.dev@gmail.com.

Children

Malaab isn't meant for children under 13, and doesn't knowingly collect their data. If you think a child has signed in, write to us and we'll delete the account.

Changes

If this policy changes, the new version will be posted here with a new date.