Last updated: 12 July 2026
This Privacy Policy explains how Naalu ("Naalu", "we", "us") handles information when you use the Naalu mobile app and the website at naaluapp.com (together, the "Service"). Naalu is a tool for Maldivian inter-island cargo boat operators to manage freight bookings, clients, and invoicing.
By creating an account or using the Service, you agree to this Policy.
Account information you give us. When you register we collect your name, mobile number, email address, and a password (stored only as a secure one-way hash — we never store or see your actual password).
Business data you enter. To operate the Service you add records such as your boat's details, routes, trips, the goods carried (naalus), your clients and their details, items and rates, expenses, and invoices. This is your business content; we store and process it so the Service can function for you.
Technical information. When you sign in we issue an access token to keep you logged in on your device, and our servers keep standard logs (such as IP address and request time) needed to run and secure the Service.
We do not sell your personal information, and we do not share it with third parties for advertising or marketing. We do not use your data for tracking across other apps or websites.
We share information only with service providers that host and operate the Service on our behalf, and only as needed to run it, or where required by law.
Invoice share links. When you share an invoice, Naalu creates a link containing a unique code. Anyone who has that link can view that invoice without signing in. Share links only with the intended recipient.
You can delete your account at any time from within the app: More → Account → Delete account. You may also request deletion by contacting us using the details below.
When you delete your account, we remove or anonymise your personal details (name, email, mobile number), revoke your access, and sign you out on all devices. Because a boat's operational records (trips, invoices, clients, and similar) may be needed for the business's accounting and legal obligations, those records may be retained; where they are, they are dissociated from your personal identity.
All traffic between the app and our servers is encrypted in transit using HTTPS. Passwords are stored as secure hashes. No system can be guaranteed perfectly secure, but we take reasonable measures to protect your information.
Naalu is a business tool and is not directed to children. We do not knowingly collect personal information from children.
We may update this Policy from time to time. When we do, we will revise the "Last updated" date above. Significant changes will be communicated through the Service.
If you have questions about this Policy or your data, contact us at: