Privacy Policy

1. Controller and privacy contact

• Controller: Hallie (할리)
• Representative and privacy officer: Namgi Kim (김남기)
• Email: info@halalmap.org

2. Information we process

• Google/Apple sign-in and profiles: account identifier, provider-supplied email (including Apple private relay), name, profile image and authentication/session information. Apple may withhold optional information according to the user's choices.
• User content: place submissions, corrections, halal-attribute votes, reviews, comments, posts, photos, reports, evidence, and related timestamps.
• Place information supplied or confirmed by a user: name, address, coordinates, telephone number, website, opening hours, category, and supporting notes.
• Technical and security data: session cookies, request and CSP error information, device/browser information made available by the browser, and an HMAC-hashed IP-derived rate-limit identifier.
• Location is used to show and search nearby places after you select current location and grant OS/browser permission. You can move the map or search places without granting location access.

3. Purposes of processing

• Provide sign-in, profiles, contributions, community features, maps, search, moderation, and support.
• Review submissions, prevent duplicate or abusive activity, enforce service rules, and investigate reports.
• Measure service use, diagnose errors, improve performance, and serve and measure advertising.
• Comply with legal obligations and protect users, the public, and Halalmap.

4. Public content

Approved place information, display names, posts, comments, reviews, votes, and uploaded photos may be visible publicly. Do not include private or sensitive personal information in public submissions.

Deletion removes your community posts, comments, replies, attachments, place reviews, uploaded photos, profile and account data. Other people’s replies remain with an empty deletion marker where needed to connect the thread. Registered place names, addresses, coordinates and contacts remain without the deleted account link. Personal reviews/photos and unapproved submission originals/evidence are not retained.

5. Retention and deletion

• Account and profile data are kept while the account is active and until an account-deletion request is completed, except where law or dispute handling requires longer retention.
• Deletion removes your community posts, comments, replies, attachments, place reviews, uploaded photos, profile and account data. Other people’s replies remain with an empty deletion marker where needed to connect the thread.
• Hashed rate-limit identifiers are automatically cleaned up after approximately 48 hours.
• Contribution search drafts stored in browser session storage expire after about 10 minutes or when the browser session storage is cleared.
• Data whose purpose has ended is deleted or de-identified using methods appropriate to the storage medium.

6. Service providers and data sharing

• Supabase: authentication, database, and media storage. The linked Halalmap project is hosted in Tokyo, Japan.
• Google: OAuth sign-in, Maps and Places, Cloud Translation for place-name review, Tag Manager, Analytics, AdSense, and related fraud/security services.
• Algolia: indexing and searching approved place information.
• Firebase App Hosting / Google Cloud: hosting and delivery. The configured application backend is in Seoul, South Korea.
• Information may also be disclosed when required by law, to protect safety or rights, or as part of a business transfer with appropriate safeguards. We do not sell personal information.

7. International processing

Using the providers above may transmit account, content, search, analytics, or technical information to Japan and to other countries where Google, Supabase, or Algolia and their subprocessors operate. Transfers occur over encrypted networks when a related feature is used, and data is retained according to the purposes and periods described in this policy or the provider contract.

You may contact us for current transfer details. Refusing a transfer may make sign-in, search, maps, media, analytics, or other related features unavailable.

8. Cookies, analytics, and advertising

Halalmap and Supabase use cookies or similar storage to maintain sign-in sessions and security. Google Tag Manager and Google Analytics may collect cookie identifiers, approximate location, device/browser information, and usage events to measure the service.

Google AdSense and its partners may use cookies, web beacons, IP addresses, or other identifiers to select, deliver, limit, personalize, and measure ads and detect fraud. You can control cookies in your browser and manage Google ad personalization in Google Ads Settings. Blocking cookies may affect some features.

9. Geolocation

The current-location button asks the browser for permission and uses the returned coordinates to move the map and show a marker. Halalmap does not persist that precise device location in its database through this function. You can withdraw permission in browser or device settings.

10. Your rights

You may request access, correction, deletion, suspension or restriction of processing, or account deletion by emailing info@halalmap.org. Send the request from the account email where possible. We may verify identity and may refuse or limit a request where permitted by law, explaining the reason.

11. Children

You must be at least 14 to register. This is a self-declaration, not verified age. The account identifier and provided name and email have already been shared during login.

12. Security and policy changes

We use access controls, encrypted transmission, restricted service credentials, input and media validation, rate limiting, and moderation controls appropriate to the service. No internet service can guarantee absolute security.

Material policy changes will be posted on this page with a new effective date and, when appropriate, additional notice. Questions or complaints may be sent to info@halalmap.org.

Before you continue

Data collected: Google or Apple account identifier, email and name provided, nickname and optional profile photo, login and security records, agreement and AI permission versions and timestamps, self-declaration of being at least 14, and marketing choices. We do not collect a date of birth or identity document.

Retention: kept while the account is active and deleted with account deletion. Where a legal retention obligation applies, only the necessary data is kept for the required period. Explicit signup cancellation deletes a new incomplete account. Closing the app alone does not delete it.

After Google or Apple login, completing signup requires accepting the service terms, personal data collection and use, community rules and OpenAI text sharing, and confirming you are at least 14. Optional push and email marketing choices can be managed separately and refusal does not prevent service use.

You must be at least 14 to register. This is a self-declaration, not verified age. The account identifier and provided name and email have already been shared during login.

Personal data in the mobile app

Photos/camera are used to attach images you choose for profiles, reviews, community posts or place submissions. Uploads are re-encoded and EXIF metadata is removed. Text and images in public content may be visible to others.

For push notifications we associate a Firebase Cloud Messaging (FCM) registration token, platform, app version and language with your account. Delivery depends on OS permission and app settings; you can turn notifications off. Registered push tokens are deleted on account deletion.

The app stores sessions and settings locally and caches some public information. Personal state is cleared on sign-out/account changes. Website cookie, Analytics and AdSense descriptions apply to those web features and do not imply identical advertising tracking in the app.

Apple provides Apple sign-in; Google/Firebase provide maps, sign-in and push delivery. Processing countries and retention depend on each provider and its subprocessors. Contact info@halalmap.org for international processing or rights requests.

At signup you agree to the community rules and sending published text to OpenAI for safety checks. Text in posts, comments, replies and place reviews is checked before publication and may include personal information you type. Photos are not inspected or sent to OpenAI. Flagged text is held for administrator review; service failures wait and retry. Pending edits do not replace the public version. Withdrawal stops new submissions and external transmission of unsent work. Posting again requires renewed permission; old held work is not automatically resumed.

The external AI provider is OpenAI. Titles and text in posts, comments, replies and place reviews are sent to detect harmful content, including any personal information you write there. Photos and separate account ID, email and location fields are not sent.

Apple tokens are encrypted on the server and revocation is requested on account deletion. Legacy accounts without tokens can still be deleted. If automatic revocation is unavailable, remove Halalmap access in your device’s Apple account settings.

Originals are retained while needed for review; completed records are cleared after at most 30 days and on account deletion. Failed deletion/revocation keeps minimum retry information until completion. OpenAI API data is not used for training by default; processing/retention follow current provider documentation.