Privacy policy
Last updated: September 16, 2026
This policy explains what information Mal Al Sham, 388 E Main St, El Cajon, CA 92020, collects through the Mal Al Sham app and malalsham.com, and how we use it. Questions: [email protected] or (619) 401-1055.
What we collect and why
- Catering requests. When you send one, we receive your name, phone number, your email if you add it, the event date, the number of guests and your message. We use them only to reply with a quote.
- Chat with our AI agent. We receive and keep your messages and the replies so the agent can answer and so we can improve its answers. Replies are generated by our AI provider, OpenAI, which processes the messages for us.
- Notifications. If you turn them on, we store a notification token from Google Firebase Cloud Messaging, your language and the branch you follow, so we can send you specials and news.
- Hearts. When you love a dish, we store a random code created on your phone, not linked to your name, to count hearts.
- Order taps. When you tap DoorDash, Uber Eats or Grubhub, we record which service, branch and dish you tapped, with no personal details, to learn how guests order.
- Location. If you allow it, the app uses your phone's location on your phone only, to show the nearest branch. It is never sent to us.
Ordering and payment
Orders are placed and paid on DoorDash, Uber Eats or Grubhub under their own privacy policies. The app never takes payment.
Sharing
We do not sell your information. We share it only with service providers that run the service for us (our hosting, Google Firebase, OpenAI and our email provider), or when the law requires it.
Security
Information travels encrypted between the app and our servers.
Children
The app is not directed to children under 13, and we do not knowingly collect their information.
Your choices
You can turn notifications off and deny location access in your phone settings. To see or delete the information we hold about you, email [email protected]. California residents have the right to know, delete and opt out of the sale of their personal information. We do not sell it.
Deleting your data
To delete the information the Mal Al Sham app holds about you, email [email protected] with the subject "Delete my data". Include the name, phone number or email you used, and the date of any AI chat you want removed. Within 30 days we delete your catering requests, the chats you point us to and your notification registration, and confirm by email. Hearts and order taps are not linked to your name. We keep only the records the law requires. To stop notifications at once, turn them off in your phone settings.
Changes
We will post any changes on this page with a new date.
