Makkal › Privacy policy

Privacy policy

In English for now. The other languages follow once a solicitor has read the text.

Makkal Limited ("Makkal", "we") makes Makkal Apps: GageMakkal (calibration), MainteMakkal (maintenance) and the apps that follow, on the web and as phone apps. This policy says what personal data we handle, why, where it is kept, and what you can ask of us.

Last updated: 18 October 2026

1. Two roles

For our customers' data we are a processor. When a company (our customer) uses our apps, the people, equipment, calibration and maintenance records it puts in belong to that company. The company decides what goes in and who sees it; we keep and process it on its behalf, under our data processing agreement (sent on request: write to privacy@makkal.app). If you use our apps through your employer, your employer is the controller: questions about your data there go to them first, and we help them answer.
For our own relationship with you we are the controller: when you visit our website, sign up for a trial, write to us, or send us feedback from the app.

2. What we handle

What	Examples	Why	Legal basis (GDPR art. 6)
Account details	Name, work email, job title, mobile number (if given), profile picture (if given), password (stored only as a one-way hash)	To let you sign in and to show colleagues who did what	Contract with our customer; our legitimate interest in running the service
Sign-in with Microsoft or Google	Your name, email address and the provider's id for you; whether the provider vouches for your company's domain	To sign you in without a password	Contract; your choice to use it
What you do in the app	Changes you make, calibrations you record or approve, with time, and the address and browser they came from	The audit trail quality standards (ISO 9001, IATF 16949, ISO/IEC 17025) require	Contract; our customer's legal obligations
Files	Certificates, pictures of equipment, attachments	The records themselves	Contract
Feedback	What you write, a picture or recording of your screen if you choose to send one, the page and app version	To fix problems and improve the product	Legitimate interest; you choose to send it
Sign-up and website	Email address, company name; on the websites, anonymous visit counts (Cloudflare Web Analytics, no cookies) and a robot check on forms (Cloudflare Turnstile)	To create a trial and answer you	Steps before a contract; legitimate interest
Emails we send	Invitations, password resets, calibration reminders, notices about apps started or asked for	The service itself	Contract

We do not sell personal data, use it for advertising, or build profiles of people.

3. Reading certificates with AI (optional)

An organization can let GageMakkal read dropped calibration certificates with AI (Google Gemini), to fill in the record for a person to check. When it is on, the certificate file is sent to Google for that one reading. Under the terms we use with Google, the files are not used to train Google's models (we use Google's paid Gemini API). An organization can switch this off; when it is off, nothing is sent.

4. Who else handles data (sub-processors)

The current list, with what each does and where, is on our Trust page (makkal.app/trust/). We tell customers at least 30 days before adding one.

5. Where data is kept

In the European Union: Oracle Cloud Infrastructure, Paris, France (eu-paris-1). Backups are kept in the same region. When a sub-processor is outside the EU (for example Microsoft or Google for sign-in), transfers rely on the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

6. How long we keep it

Customer data: for as long as the customer's subscription runs, then deleted within 90 days of the end, unless the customer asks for an export first. Backups age out within 30 days after that.
The audit trail is kept with the customer's data; customers may need it for years for their own audits, and decide that themselves.
Feedback: 2 years, or until the matter is closed if you ask.
Sign-up requests that were never completed: 30 days.

7. Security

Data is encrypted on the way (HTTPS) and at rest (Oracle encrypts its disks, backups included). Each customer's data is kept apart in the database by row-level security, so one organization can never read another's. Passwords are stored as one-way hashes. Access by Makkal staff is limited to what is needed to run and support the service, and is logged.

8. Your rights

Under the GDPR you can ask to see, correct, export or delete your personal data, to restrict or object to its use, and to complain to a data protection authority. Where we are the processor we pass your request to your employer and help them answer. Write to privacy@makkal.app. We answer within one month.

In Ireland the authority is the Data Protection Commission (dataprotection.ie). You can also complain where you live or work.

9. Cookies

Our apps use only the cookies they need to keep you signed in and to protect forms from forgery. No advertising or tracking cookies. Our websites set no cookies: their visit counts (Cloudflare Web Analytics) are anonymous and cookie-free.

10. Children

Our apps are business tools and not meant for anyone under 16.

10a. The phone apps

The GageMakkal phone app (Android; iPhone later) opens your organization's own address inside the app. It keeps only that address and your signed-in session on the phone. It doesn't read your contacts, location or advertising identifier, and shows no ads. It uses the camera only when you choose to take a picture or scan a code. What you do in it is the same as on the web, under this policy.

10b. Deleting your account

Ask your organization's Owner or Admin to remove you, or write to privacy@makkal.app from the address of the account; we delete it within one month, except the audit trail entries your organization must keep. An Owner can ask us to delete the whole organization the same way. Details: makkal.app/delete-account/.

11. Changes

We will say on this page when it changes, and tell customers by email of any change that matters.

12. Contact

Makkal Limited, 96 Fanan, Letteragh Road, Rahoon, Galway H91 R7WE, Ireland. Registered in Ireland, company number 777742 (CRO). Email: privacy@makkal.app.