Review
Privacy and personal-data review
We map personal data in the app, third-party SDKs, and consent screens, then compare the behaviour with your privacy notice.
Typical duration: 4–8 working days
A privacy notice can be carefully written and still drift from what the installed app does. We treat the running software as the source of truth. That includes first-launch prompts, permission timing, analytics and advertising SDKs, crash reporters, and any data that leaves the device when a screen is opened in the background.
For teams selling to Malaysian residents, we pay attention to Personal Data Protection Act duties: purpose, notice, and the practical ability to access or correct records. We do not give legal opinions. We do record where the product’s behaviour would be hard to defend in a complaint, and we flag SDK behaviour that is easy to miss in a store listing.
The review is useful before a new permission, a loyalty programme, or a cross-border processor is added — and after a vendor change that nobody fully inventory-checked.