Legal
Privacy Policy
Last updated: 12 April 2026
HalalFree (“we”, “us”, or “our”) operates the HalalFree mobile application (the “App”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the App.
By downloading or using the App, you agree to this Privacy Policy. If you do not agree, please do not use the App.
1. Information We Collect
1.1 Information You Provide
- Account information. When you create an account, we collect your email address and a display name. If you sign in with Google or Apple, we receive limited profile information (such as your name and email) from those providers as authorised by you.
- Profile data. You may upload a profile photo (avatar). Avatar images are stored on our servers and accessible via a public URL.
- Reviews and ratings. When you submit a review, we collect the review text, star rating, and associate it with your user account and the listing you reviewed.
- Favourites. When you save a listing, we record that preference against your account.
- Feedback and support messages. If you submit feedback through the App, we collect your name, email address, message content, and any rating you provide.
- Suggested listings. If you suggest a new food location, we collect the business name, description, address, city, postcode, phone number, website, and your user ID as the submitter.
- Review reports. If you report a review, we collect the report reason, optional detail text, and your user ID.
1.2 Information Collected Automatically
- Location data. With your permission, the App accesses your device’s approximate location (using “When In Use” authorisation) to show nearby listings and display your position on the map. Your GPS coordinates are used on-device for distance sorting and are not uploaded to our servers.
- Device and usage data. The Mapbox mapping SDK may collect technical data such as your IP address, device type, and map interaction data in accordance with Mapbox’s Privacy Policy. We do not operate separate analytics or advertising SDKs.
1.3 Information We Do NOT Collect
- We do not use advertising identifiers or participate in ad tracking.
- We do not use the App Tracking Transparency framework because we do not track you across other companies’ apps or websites.
- We do not collect precise location data for purposes other than showing nearby listings and your position on the map.
- We do not collect health, financial, or biometric data.
2. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the App and its features.
- Create and manage your account.
- Process and manage your subscription.
- Display your reviews, ratings, and display name to other users.
- Show you listings near your location.
- Respond to your feedback and support enquiries.
- Moderate user-generated content (reviews, suggested listings, reported reviews) to maintain community standards.
- Improve and develop the App.
3. Subscriptions and Payments
The App offers auto-renewable subscriptions processed entirely by Apple through the App Store. We do not collect, process, or store any payment information such as credit card numbers or billing addresses. All payment data is handled by Apple in accordance with Apple’s Privacy Policy.
Subscription details (such as your subscription status and expiry date) are communicated to us by Apple’s StoreKit framework to unlock premium features. We do not have access to your payment method details.
You can manage or cancel your subscription at any time through your Apple ID settings.
4. How We Store and Protect Your Information
- Hosting. Your account data, reviews, favourites, and other content are stored on Supabase, a cloud-hosted database platform. Data is encrypted in transit (TLS) and at rest.
- Authentication tokens. Session credentials are stored securely on your device using the system keychain.
- Local storage. The App stores non-sensitive preferences on your device (such as your preferred region, notification settings, and onboarding status) using standard device storage. If you enable “Remember me”, your email address is stored locally for convenience.
- Avatars. Profile photos are stored in cloud storage and are accessible via public URLs.
While we implement commercially reasonable measures to protect your data, no method of electronic storage or transmission is 100% secure.
5. Sharing and Disclosure
We do not sell your personal information. We may share your data only in the following circumstances:
| Recipient | Purpose |
|---|---|
| Supabase | Cloud infrastructure provider that hosts our database, authentication, and file storage. |
| Mapbox | Map rendering and related services. Subject to Mapbox’s Privacy Policy. |
| Apple | Authentication (Sign in with Apple), subscription payment processing, and geocoding services via MapKit. Subject to Apple’s Privacy Policy. |
| Authentication only (Sign in with Google), if you choose this sign-in method. Subject to Google’s Privacy Policy. | |
| Other users | Your display name, avatar, and review content are visible to other App users. |
| Law enforcement | If required by law, regulation, or legal process. |
6. Your Rights and Choices
6.1 Account and Data
- Access and update. You can view and update your display name and profile photo at any time in the App’s profile settings.
- Delete your account. You can permanently delete your account and all associated data from within the App. This action is irreversible and removes your profile, reviews, favourites, and feedback.
- Location permission. You can grant or revoke location access at any time in your device’s Settings. The App will continue to function without location access, but distance-based sorting and the map location indicator will be unavailable.
- Notification permission. You can enable or disable notification permissions in your device’s Settings.
6.2 UK and EEA Residents
If you are located in the United Kingdom or European Economic Area, you have additional rights under the UK GDPR and EU GDPR, including the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request erasure of your data (“right to be forgotten”).
- Object to or restrict processing of your data.
- Data portability.
- Lodge a complaint with a supervisory authority (in the UK, this is the Information Commissioner’s Office at ico.org.uk).
Our lawful bases for processing are:
- Contract performance — to provide the App and its services to you.
- Legitimate interests — to improve the App, moderate content, and ensure safety.
- Consent — for location data and notifications, which you can withdraw at any time.
7. Data Retention
- We retain your account data for as long as your account is active.
- When you delete your account, all associated personal data (profile, reviews, favourites, feedback) is permanently removed.
- Anonymised or aggregated data that cannot identify you may be retained for analytical purposes.
8. Children’s Privacy
The App is not intended for children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
9. Third-Party Links
The App may display links to third-party websites (such as restaurant websites or blog content links). We are not responsible for the privacy practices of those websites. We encourage you to read their privacy policies.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page. Your continued use of the App after changes constitutes acceptance of the revised policy.
11. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:
Email: hello@halalfree.co.uk
Website: halalfree.app