Privacy Policy

Last Updated: May 5, 2026
Effective Date: June 4, 2026

Network Systems Corporation, doing business as Malama Go (“Malama Go,” “we,” “us,” or “our”), respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Malama Go mobile application, the associated merchant web portal, and our informational website located at malamago.com (collectively, the “Platform”).

Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the Platform.

1. Information We Collect

We collect information that identifies, relates to, describes, or could reasonably be linked to you (“Personal Information”) in the following ways:

  • Consumer Information: When you register for an account or place an order, we collect your name, email address, phone number, and delivery address. You may also provide supplementary delivery instructions and order ratings.
  • Organizational Account Data: If your account is created in connection with a school, university, or other organization (e.g., to use Meal Points), we receive your name, email address, and grade level directly from the organizational administrator to facilitate account creation.
  • Merchant Business Information: When Merchants register on our web portal, we collect basic business details (name, description, address, business hours, and store categories), as well as tax identification documents (such as a W-9 upload).
  • Payment & Payout Information:
    • Consumers: Financial transactions are processed via Stripe. We do not store your full credit card numbers.
    • Merchants: For payout processing, Merchants are redirected to a secure “Stripe Connect” portal. Malama Go does not collect, process, or store Merchant bank routing or account numbers on our servers.
  • Location Data: To connect consumers with Merchants within their delivery radius, the mobile app retrieves precise GPS location (latitude and longitude) exactly once upon opening, utilizing Google Maps and Google Places APIs.
  • Device Access (Camera): The Merchant web application requests access to the device’s camera strictly for the operational purpose of scanning event tickets and order QR codes. We do not record or store video/audio feeds.
  • Technical Data: We use Google Single Sign-On (SSO) and Apple SSO to authenticate consumer accounts. We collect automated diagnostic and usage data via Flutter and Firebase SDKs to monitor application stability.

2. How We Use Your Information

We use the information we collect for the following business and operational purposes:

  • To create, manage, and secure user and merchant accounts.
  • To facilitate the processing and fulfillment of orders, deliveries, pickups, and merchant payouts.
  • To communicate regarding order statuses, technical notices, and security alerts (including SMS One-Time Passwords).
  • Marketing Communications: To send marketing emails and push notifications regarding promotions or platform updates. Users may opt out of these communications at any time by navigating to Account Settings > Notifications within the mobile app.
  • To analyze Platform usage and improve the user and merchant experience.

3. How We Share Your Information

We do not sell, rent, or share your Personal Information with third-party marketing or advertising partners. We only share your information in the following limited circumstances:

  • With Merchants to Fulfill Orders:
    • Standard Users: When you place a standard order, the fulfilling Merchant receives only your name, order details, and any special delivery instructions.
    • Organizational Users: When utilizing Meal Points, the fulfilling Merchant receives your name and email address.

    Note: Merchants never receive consumer payment card information.

  • With Service Providers: We share data with trusted third-party service providers who perform services on our behalf:
    • Stripe: For secure payment and payout processing.
    • Google Cloud Platform (GCP) & Firebase: For secure database hosting.
    • Google Maps/Places: For location-based routing.
    • Bird: For transmitting SMS One-Time Passwords (OTPs) and notifications.
  • Strict SMS / Mobile Data Restriction: Notwithstanding any other provision in this Privacy Policy, no mobile information or mobile opt-in data will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent information will be kept strictly confidential and only used to provide the requested SMS services.
  • For Legal Compliance: We may disclose your information if legally required to do so to comply with applicable laws, governmental requests, court orders, or to protect the rights, property, and safety of Malama Go, our Users, or Merchants.

4. Children’s Privacy (COPPA & FERPA)

Malama Go acts strictly as a service provider when facilitating accounts for minors under the age of 18 (or under 13) associated with a school or organization.

We do not allow children to sign up for the Platform directly. When a school or organization provides Malama Go with a student’s name, email, and grade to create an account, Malama Go relies entirely on that Organization’s representation and warranty that it has obtained all verifiable parental consents required by the Children’s Online Privacy Protection Act (COPPA), the Family Educational Rights and Privacy Act (FERPA), and any applicable local or international laws.

Data Use and Sharing Restrictions for Minors: Malama Go strictly prohibits the use of any Personal Information collected from minors for marketing, advertising, or promotional purposes. We will not send marketing communications or push notifications to minor accounts. Furthermore, we do not, under any circumstances, sell, share, or otherwise disclose personal data belonging to minors to third-party advertisers, data brokers, or external organizations. Information is strictly limited to being shared with the fulfilling Merchant only to the exact extent necessary to process and fulfill an organizational order.

If you are a parent or guardian and believe your child’s data was provided to us without your consent, please contact the associated school/organization directly to revoke consent, and contact us at support@malamago.com to request immediate data deletion.

5. Cookies and Tracking Technologies (Merchant Portal)

While the consumer mobile application does not utilize tracking cookies, the Malama Go Merchant Web Portal utilizes standard cookies and tracking pixels. These are used strictly to maintain secure merchant login sessions, track portal usage, and ensure the functionality of the web interface.

6. Data Retention and Account Deletion

We retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy. You have the right to request the complete deletion of your account and associated personal data at any time.

You may initiate a data deletion request through any of the following methods:

Upon receiving a deletion request, your data will be permanently removed from our active Google Cloud Platform and Firebase databases. Please note that we may be legally required to retain certain transactional data (e.g., Stripe payment records) or tax documents (e.g., Merchant W-9s) for accounting, tax, and legal compliance purposes.

7. Security of Your Information

We use administrative, technical, and physical security measures, powered by Google Cloud Platform and Firebase, to help protect your personal information. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against interception or misuse.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or relevant laws. The updated version will be indicated by an updated “Effective Date” at the top of this policy. We encourage you to review this Privacy Policy periodically to stay informed of how we are protecting your data.

9. Contact Us

If you have questions or comments about this Privacy Policy, our data practices, or your organizational account, please contact us at:

Network Systems Corporation (dba Malama Go)
2469 South King St.
Honolulu, HI 96826
Email: support@malamago.com