Privacy Policy

Last updated: 11 June 2026

Maloca helps you find the right area of London and keep track of your house hunt. To do that it stores some personal information, and we want to be completely clear about what that is, where it lives, and what we do (and don't do) with it.

What we collect

Your Google account basics — when you sign in with Google we receive your name, email address and profile photo. We use these to identify your account; nothing else.
What you put into Maloca — your commute preferences and work stations, the areas you rate and comment on, your must-haves, your wishlist, and your property viewings (which can include addresses, dates, prices, agent details and personal notes).
Couple linking — if you link with a partner, we store the connection between your two accounts so you can share viewings and shortlists.
AI usage counts — we count how many AI requests your account makes each month to apply the monthly allowance. We don't store the content of AI conversations on our servers.

We do not use advertising trackers or analytics services, and we never sell your data.

Where your data lives

Your data is stored in Google Firebase (Realtime Database), hosted in the EU (europe-west1, Belgium). Access is protected by security rules: only you — and your linked partner, if you choose to link — can read or change your data.

Maloca also keeps some working data in your own browser's local storage (for example, cached area insights so the map loads instantly). That data stays on your device and you can clear it any time through your browser settings.

Services we rely on

Maloca uses a small number of third-party services, each for a specific job:

Google Firebase — sign-in, database, and the server that handles AI requests.
Anthropic — generates the AI area insights. When you ask for insights, the area name and your search context are sent to Anthropic's API via our server. Your name and email are not included.
OpenStreetMap (Nominatim) — address search. The address text you type when adding a viewing is sent to OpenStreetMap's public geocoding service to find the location.
Carto / OpenStreetMap — the map tiles themselves. Like any map service, tile requests include your IP address.
Google Fonts — loads the typeface; Google receives your IP address as part of serving the font files.

The calendar feed

If you connect your viewings to a calendar app, Maloca creates a private link containing a secret token. Anyone with that link can see your viewing schedule (including addresses), so treat it like a password and only paste it into calendar apps you trust.

How long we keep it, and how to delete it

We keep your data while your account is active so your house hunt is there when you come back. Signing out does not delete anything.

To permanently delete your account and all data associated with it, email us at nickcarrjones@gmail.com from the address you sign in with, and we'll remove it within 30 days.

Your rights

Under UK data protection law (UK GDPR) you have the right to access the personal data we hold about you, correct it, delete it, or receive a copy of it. Email the address above to exercise any of these. If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ico.org.uk).

Children

Maloca is a house-hunting tool and is not intended for anyone under 16.

Changes to this policy

If we change this policy we'll update the date at the top of this page. For significant changes we'll let you know in the app.

Contact

Questions about your data? Email nickcarrjones@gmail.com.