Privacy Policy for HalalChecker

Last Updated: 2026-06-21

Thank you for using HalalChecker ("we," "us," or "our"). This Privacy Policy explains how we collect, use, share, and protect your information when you use our website at https://www.halalchecker.app (the "Website") and our mobile applications for iOS and Android (the "App"). Together the Website and App are referred to as the "Service."

By accessing or using the Service, you agree to this Privacy Policy. If you do not agree with the practices described here, please do not use the Service.

1. Information We Collect

1.1 Information You Provide

Scan Content: When you scan a product, you may give us photos of products and ingredient labels captured with your camera or chosen from your photo library, barcode numbers, and any ingredient text you type. We process this content to determine a halal status.

Onboarding Responses: During setup we ask a few questions to tailor your experience, including how often you shop, what you want to use the App for, your country, and your preferred school of Islamic jurisprudence (madhab). Your selected madhab reflects a religious preference; it is sent with your scans so that results match it and is stored together with your scan results. Your other onboarding answers are stored on your device, and we receive analytics about which setup steps you complete. The notification step is optional and can be skipped.

Account and Contact Details: The core scanning features of the App do not require you to create an account. If you create an account on our Website, contact support, or otherwise reach out to us, we collect the information you provide, such as your name and email address.

1.2 Subscription and Purchase Data

We offer optional premium subscriptions. Purchases are processed by the Apple App Store and Google Play Store. We do not collect or store your full payment card details. Through our subscription provider (RevenueCat) we receive subscription status, purchase and renewal events, store transaction identifiers, and an anonymous subscriber identifier so we can unlock premium features and prevent abuse.

1.3 Device and Identifier Data

To operate, secure, and measure the App we process device and operating system information (model, OS version, app version, locale and language) and approximate region inferred from your IP address. We use a device identifier provided by your operating system (the Identifier for Vendors (IDFV) on iOS, or the Android ID on Android) to recognize your device, enforce scan limits, and count unique usage. For advertising and attribution purposes we may also process advertising identifiers, such as the Google Advertising ID on Android and, on iOS where you grant App Tracking Transparency permission, the Identifier for Advertisers (IDFA), along with identifiers from our attribution and analytics partners. We use Firebase App Check (App Attest on iOS, Play Integrity on Android) to verify that requests come from a genuine, untampered instance of our App.

1.4 Usage and Diagnostic Data

We collect product analytics about how features are used (for example scans started, screens viewed, paywall and subscription events) and diagnostic data such as crash reports, error logs, and performance information so we can fix problems and improve the App.

1.5 Push Notifications

To deliver push notifications and support measurement, the App registers with Firebase Cloud Messaging and may generate a push notification token when it starts, which can happen before you have enabled notifications. We use this token and your notification preferences to send you the updates and reminders you have opted into. You can disable notifications at any time in your device settings.

1.6 Cookies and Similar Technologies

On the Website we may use cookies and similar technologies for essential functionality and, where applicable, analytics. You can control cookies through your browser settings.

1.7 Advertising and Attribution Data

We work with advertising and attribution partners to understand how people discover the App and to measure our marketing. For this purpose we and these partners process app events (such as installs, app launches, scans, and purchases), your device's advertising identifier, and related attribution identifiers. Our partners for this are Tenjin (mobile measurement and attribution) and Meta (Facebook App Events). Through our subscription provider we may also share an anonymous Facebook identifier and purchase events so purchases can be attributed to campaigns. We handle platform-restricted identifiers according to your platform's consent rules: on iOS, the Identifier for Advertisers (IDFA) is accessed only if you grant App Tracking Transparency permission, while other measurement events and non-restricted identifiers may still be processed; on Android, the advertising ID is processed subject to your Android ad settings, which you can change or reset at any time. We do not use this data to build advertising profiles beyond measuring and attributing app installs and purchases.

2. How We Use Your Information

We use the information we collect to:
- Analyze products and ingredients and return a halal status;
- Provide, maintain, personalize, and improve the Service and our AI analysis;
- Process subscriptions and manage premium access;
- Secure the Service, prevent fraud and abuse, and enforce usage limits;
- Send notifications you have opted into and respond to support requests;
- Understand usage trends and diagnose and fix technical issues;
- Measure marketing performance and attribute app installs and purchases to campaigns;
- Comply with legal obligations.

3. On-Device Processing

Barcode detection from the camera is performed on your device using Google ML Kit. The barcode image itself is not uploaded for this step. We send the resulting barcode number, and any photos or text you submit for analysis, to our backend for processing. Photos you submit are uploaded to and stored by our storage provider (Supabase) and are linked to the scan result; see "Data Retention" below.

4. How We Share Information

We do not sell your personal information for money. We share information with the providers and partners listed below, and only as needed for them to perform their function.

Service providers:
- Google (Gemini AI) to analyze ingredients and product content and generate halal status results;
- Brave Search to retrieve up to date public information used to verify ingredients;
- Open Food Facts, a public product database, for barcode product lookups;
- RevenueCat to manage subscriptions and entitlements;
- Apple App Store and Google Play Store to process payments;
- Firebase (Google) for app integrity (App Check), push notifications, and analytics;
- Supabase for image and backend data storage;
- PostHog for product analytics (hosted in the European Union);
- Sentry for crash and error reporting;
- Our cloud hosting provider for running our backend infrastructure.

Advertising and attribution partners:
- Tenjin for mobile measurement and marketing attribution;
- Meta (Facebook) for advertising attribution and measurement.

We may also disclose information if required by law, to respond to legal process, or to protect the rights, safety, and property of HalalChecker, our users, or the public.

Some privacy laws (for example in California and other US states) define "sale" or "sharing" broadly to include disclosing identifiers to advertising and attribution partners for measurement or cross-context advertising. Under those definitions our use of advertising and attribution partners may be considered a "sale" or "share." You can opt out by declining the tracking permission prompt or by limiting ad tracking and resetting your advertising ID in your device settings.

5. Data Retention

We retain information for as long as needed to provide the Service and for the purposes described in this policy. Photos and ingredient text you submit for analysis are uploaded to our storage provider and may be retained, together with the scan result, to show your scan history, improve accuracy, and speed up repeat scans. Scan results may also be cached to reduce cost. Diagnostic and analytics data is retained for a limited period. You can request deletion of your data, including stored scan images, by contacting us, and we delete or anonymize information when it is no longer needed.

6. International Transfers

Our service providers may process data in countries other than your own, including the United States and the European Union. Where required, we rely on appropriate safeguards for these transfers.

7. Data Security

We take reasonable technical and organizational measures to protect your information, including transport encryption and app integrity checks. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on where you live, you may have rights to access, correct, delete, or restrict the processing of your personal information, to object to certain processing, and to data portability. To exercise these rights, contact us using the details below. You can also control camera and photo access, tracking, and notifications through your device settings.

9. Children's Privacy

HalalChecker is not intended for children under the age of 13, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will post any updates on this page and revise the "Last Updated" date above. Significant changes may also be communicated within the App.

11. Contact Us

If you have questions, concerns, or requests about this Privacy Policy or your data, contact us at:

Email: durianatorsoftware@gmail.com

By using HalalChecker, you consent to this Privacy Policy.