HalallO Privacy Policy
How the HalallO app and halallo.com handle your information, in plain language.
1.Who we are
[COMPANY LEGAL NAME], [REGISTERED ADDRESS], company number [COMPANY NUMBER], is responsible for your personal information in HalallO (the “controller”). Privacy contact: [DPO / PRIVACY CONTACT]. Restaurant owners and managers: see the Privacy Notice for Business Users.
2.What you give us
- Account: name, email address and password (stored only as a secure hash by our authentication provider). With Apple, Google or Facebook sign-in, an account identifier and the name and email that provider shares; Apple lets you hide your email.
- Profile: display name, username, photo, bio and any links you add.
- Contributions: reviews and ratings, photos, Spots (the place, the pin you choose and how long it runs), questions, answers, comments, helpful votes and halal evidence.
- Saves and connections: saved places and posts, collections, people you follow and accounts you block.
- Reports and messages: content you report and why, and what you send us.
3.What we collect when you use HalallO
- Location, only with your permission and only while the app is open, to show nearby places and Spots and distances. We don’t keep a history of where you’ve been. When you post a Spot, we store the pin and area you chose.
- Search history while signed in, to show your recent searches. You can clear it in Search.
- Push token: if you allow notifications, a token for your device and its platform (iOS or Android).
- Technical data: IP address, device and operating system, app version and timestamps, in our hosting provider’s logs, to keep the Service secure and working.
- On your device only: settings such as appearance, distance unit and whether you have seen the introduction.
Photos you add are re-encoded on your device before upload, which removes embedded metadata such as where the photo was taken.
4.The waitlist on halallo.com
Before the app launches you can join a waitlist on halallo.com. We keep:
- Your email address, the city you picked (New York City, London or somewhere else) and your browser’s language, to tell you when HalallO opens where you are.
- When you joined, confirmed or unsubscribed, and a salted, one-way hash of your IP address (never the address itself), to limit abuse such as one network signing up thousands of addresses.
- A hash of the confirmation link we email you. We add you to the list only after you tap that link (double opt-in).
We use it only to send the confirmation email and launch news for HalallO, a few times at most. Legal basis: your consent, which you can withdraw at any time with the unsubscribe link in every email. We keep it until you unsubscribe, or until 12 months after the app launches in your city, whichever comes first. Emails are sent through Resend. When the security check is switched on, Cloudflare Turnstile checks that a person, not a bot, sent the form.
5.Analytics
Today the app contains no advertising, analytics or tracking SDKs. We plan to add privacy-friendly product analytics (PostHog, hosted in the EU) to understand which features help people. Before we do, we will update this policy, keep the data pseudonymous and free of precise location, and add a switch in Settings to opt out (or ask for consent first where the law requires it).
6.What we don’t do
- We don’t sell your personal information or share it for cross-context behavioural advertising.
- We don’t track you across other companies’ apps or websites.
- We don’t ask for, record or infer your religion. Using a halal food app doesn’t tell us your beliefs, and we never treat it as doing so. Your public profile and posts are visible to others, so share only what you are comfortable sharing.
7.How we use it, and our legal bases
| Purpose | Legal basis (EEA, UK, Switzerland) |
|---|---|
| Create and secure your account; show nearby places; save places; publish what you post; send notifications you asked for | Contract |
| Device location and push notifications | Your consent, which you can withdraw in your device settings |
| Moderation, reports, blocks, and preventing spam, fraud and abuse | Legitimate interests in a safe service |
| Fixing bugs and understanding overall use from aggregated information | Legitimate interests (or consent where required) |
| Answering messages and telling you about important changes | Contract; legitimate interests |
| Waitlist confirmation and launch emails | Your consent, which you can withdraw with the unsubscribe link |
| Meeting legal obligations and enforcing our Terms | Legal obligation; legitimate interests |
8.What other people can see
Your display name, username, profile photo, bio, reviews, Spots (with the area and pin you chose), questions, answers and comments are public to other HalallO users. Your email address, saves, search history, blocks and reports are private. When you answer a question about a restaurant, the restaurant’s verified owner can see your answer like anyone else.
10.International transfers
Our servers are in the United States. If you use HalallO from another country, your information is processed there. Where data protection law requires it, we rely on appropriate safeguards such as the EU–US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.
11.How long we keep it
- Account and profile: while you have an account.
- Content you post: until you delete it or your account.
- Search history: until you clear it or delete your account.
- Push tokens: until you sign out on that device, turn off notifications, or delete your account.
- Waitlist: until you unsubscribe, or 12 months after launch in your city, whichever comes first.
- Server logs: a short period, typically a few days.
- Backups: deleted data disappears as backups expire, normally within 30 days.
- Records we must keep by law, or to handle a dispute or safety issue: only as long as needed, anonymised where possible.
12.Deleting your account
You can delete your account at any time in the app: Settings → Delete account. This permanently deletes your account, profile, reviews, ratings, Spots, posts, comments, photos, saves, collections, follows, blocks, search history, notifications, reports you filed and push tokens. Halal evidence you added to a restaurant may remain on that listing without your name or any link to you, because others rely on it. If you signed in with Apple, we also ask Apple to revoke HalallO’s access.
Can’t open the app? Email [DPO / PRIVACY CONTACT] from the address on your account and we will delete it for you.
13.Your rights
Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict how we use it, and to withdraw consent. EEA, UK and Swiss residents can complain to their data protection authority. California residents can know, delete and correct their information, opt out of its sale or sharing (we do neither), and limit the use of sensitive information (we use precise location only for the features you ask for), without discrimination; an authorised agent can act for you.
To make a request, email [DPO / PRIVACY CONTACT]. We verify it, usually from the email on your account, and respond within the time the law requires.
14.Children
HalallO is not intended for children under 13, and we do not knowingly collect their personal information. If you believe a child under 13 has an account, contact us and we will delete it.
15.Security
We encrypt data in transit, store passwords only as secure hashes, restrict database access per account with row-level security, and keep private files such as Spot photos behind short-lived links. No system is perfectly secure, so please use a strong, unique password.
16.Changes to this policy
We update this policy when our practices change. If a change materially affects you, we tell you in the app or by email before it takes effect.
17.Contact
[COMPANY LEGAL NAME], [REGISTERED ADDRESS]. Privacy questions and requests: [DPO / PRIVACY CONTACT]. Everything else: support@halallo.com.