Privacy Policy

Chick Hal Hal respects your privacy. This policy applies to the Chick Hal Hal mobile application and website (together, the “Services”) and explains what data we collect, how we use it, and your choices.

1. Information we collect

Depending on how you use the Services, we may collect:

• Account data: your email address, display name, account identifier, profile details, and authentication information. If you use Sign in with Apple, Apple may provide a private relay email address instead of your personal email.
• Location data: your approximate or precise device location when you grant permission, for example to show nearby halal places or location-relevant content.
• User content: reviews, ratings, photos, comments, reports, saved places, favourites, and other content you submit.
• Communications: messages, support requests, survey responses, and newsletter preferences.
• Technical and usage data: device and operating-system information, app version, language, IP address, crash information, pages or features used, browser type, and referring website.

2. Location permissions

Location access is optional. We request it only when a feature needs it and use it to provide that feature, such as nearby results. Unless a feature clearly states otherwise, we do not continuously track your location in the background. You can disable location access at any time in your device settings; location-based features may then be limited. Content you publish may reveal a location if you choose to attach one.

3. CloudKit and iCloud

The app may use Apple CloudKit and your iCloud account to authenticate you, synchronize app data across devices, and store account data, favourites, reviews, photos, or other app records. Data in your private iCloud database is processed by Apple under Apple’s terms and privacy policy. Content intended to be public or shared, such as a published review, may be stored in a public or shared CloudKit database and visible to other users. Your use of iCloud is also subject to Apple’s iCloud terms, availability, and security controls.

4. How we use information

We use information to:

• create, authenticate, maintain, and secure your account;
• operate and personalize the app and website;
• provide nearby results and other location-based features;
• publish reviews and other content you choose to share;
• synchronize content through CloudKit and iCloud;
• respond to support requests and send requested communications;
• moderate content, investigate reports, prevent fraud, and enforce our Terms;
• analyze and improve performance, reliability, and accessibility;
• meet legal and regulatory obligations.

5. Reviews and public content

Reviews, ratings, profile names, photos, comments, and attached locations that you publish may be visible to anyone using the Services. Do not post sensitive personal information. We may review, restrict, or remove content that violates our Terms or applicable law. Deleting your account removes or anonymizes public content as described below, except where retention is legally required or needed to address safety, fraud, or disputes.

6. Cookies and analytics

The website may use essential cookies, and the Services may use privacy-respecting analytics and crash diagnostics. Where required, optional analytics are used only with your consent. You can restrict cookies in your browser and analytics permissions in your device settings, although some features may work differently.

7. When we share information

We do not sell or rent your personal information. We may share limited data with Apple through CloudKit/iCloud and with service providers that help us host, secure, analyze, support, or communicate through the Services. They may process data only to provide services to us. Public user content is shared according to your posting choices. We may also disclose information when required by law, during a business transfer, or when reasonably necessary to protect rights, safety, and the integrity of the Services.

8. Data retention

We apply the following retention periods unless a longer period is required by law:

• account and profile data: while your account is active;
• reviews and other user content: until you remove it or delete your account;
• precise location requests: used to return results and not retained as a location history unless you intentionally save or publish a location;
• support communications: up to 24 months after the request is closed;
• security, abuse, and moderation records: up to 24 months, or longer when needed for an active investigation or legal claim;
• analytics and diagnostic data: up to 14 months;
• backup copies: deleted or overwritten within 90 days after deletion from active systems.

CloudKit or iCloud copies may also remain for the periods determined by Apple. Aggregated or irreversibly de-identified information may be retained without a fixed time limit.

9. Access, changes, and account deletion

You can update available profile information in the app. You may delete your account through Settings → Account → Delete Account or request deletion by emailing us from the address associated with your account. We may ask you to verify your identity. Once confirmed, deletion from active systems is normally completed within 30 days. During that period, the account may be unavailable. Public content will be deleted or anonymized unless we must retain specific records for legal, security, fraud-prevention, or dispute purposes. Residual backup data is removed within the period stated above.

Depending on where you live, you may also request access, correction, restriction, objection, portability, or a copy of your personal data. You may unsubscribe from marketing emails at any time.

10. Security and international processing

We use reasonable administrative and technical safeguards, including platform security provided by Apple where CloudKit is used. No online service can guarantee absolute security. Data may be processed in countries other than your own, subject to applicable safeguards.

11. Children’s privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from them. If local law sets a higher minimum age for consent, that age applies. Contact us if you believe a child has provided personal information.

12. External links

The Services may contain links to third-party services. Their privacy practices are governed by their own policies, and we are not responsible for their content or practices.

13. Changes to this policy

We may update this policy from time to time. We will post the latest version here and, for material changes, provide notice in the app or by another appropriate method.

14. Contact us

For privacy questions, rights requests, or account deletion, email hello@chickhalhal.com.