Privacy Policy
Last updated: September 2026
This Privacy Policy explains what personal data YaHalalo collects when you use our website and services, why we collect it, who we share it with, and the rights you have over it. We built this app to help people find verified halal food with confidence, and we take the same care with your data that we ask restaurants to take with their halal claims.
What we collect
Account information: your name and email address when you create an account (via email/password or Google/Apple sign-in). Profile information: a display name and optional avatar. Content you create: reviews, ratings, photos, favorites, and tips or reports you submit about restaurants. Order information: delivery addresses and order history, once ordering is live. Business information: if you register or claim a restaurant, the verification documents and halal-practice details you submit. Technical data: standard log data (IP address, browser type, pages visited) collected automatically by our hosting and security providers.
How we use it
To create and maintain your account, show your reviews and favorites, process orders once ordering is live, review and verify halal claims submitted by restaurant owners, respond to support requests, send you account-related emails (like sign-up confirmation), protect the platform against abuse and fraud, and comply with legal obligations.
Our legal basis for processing
We process most of your data because it's necessary to provide the service you've asked for (performance of a contract) — for example, creating an account or submitting a review. Some processing (like fraud prevention and rate-limiting) relies on our legitimate interest in keeping the platform safe and reliable. Where we ever ask for marketing consent, we'll process that data only with your explicit opt-in.
Cookies
We use a small number of strictly necessary cookies (like keeping you signed in) that don't require consent, and we ask for your consent before using any analytics or marketing cookies. See our full Cookie Policy for the complete list and how to change your choice at any time.
Third parties we share data with
We use a small number of service providers to run YaHalalo, each acting as a data processor on our behalf: Supabase (hosting, authentication and our database), Resend (sending account emails like sign-up confirmations), Mapbox and Google Maps (interactive maps), Aladhan (prayer time calculations), Cloudflare (bot and spam protection), and ipapi.co (approximate location from your IP address, used to suggest nearby restaurants). We don't sell your personal data to anyone.
International data transfers
Some of our service providers process data outside the EU/EEA. Where that happens, we rely on their compliance with recognised safeguards such as the EU Standard Contractual Clauses or an adequacy decision, so your data stays protected to a comparable standard regardless of where it's processed.
How long we keep your data
We keep your account data for as long as your account is active. If you ask us to delete your account, we remove your personal data within a reasonable time, except where we're required to keep certain records for legal or accounting reasons. Short-lived technical logs (like rate-limiting records used to prevent spam submissions) are automatically deleted after a short period.
Your rights under GDPR
You have the right to access the personal data we hold about you, correct anything that's inaccurate, ask us to delete it, restrict or object to certain processing, and receive a copy of your data in a portable format. You also have the right to lodge a complaint with Sweden's data protection authority, Integritetsskyddsmyndigheten (IMY), at imy.se. To exercise any of these rights, contact us using the details below.
Children's privacy
YaHalalo is not directed at children, and we don't knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us and we'll remove it.
How we protect your data
We use industry-standard technical and organisational measures — including encryption in transit, access controls, and row-level security on our database — to protect your data. No system is completely secure, but we work to keep your information as safe as reasonably possible and to respond quickly if anything ever goes wrong.
Changes to this policy
We may update this Privacy Policy from time to time as the service evolves. We'll update the "last updated" date above, and for significant changes we'll make a reasonable effort to let registered users know.
Who we are and how to contact us
YaHalalo is currently operated as a pre-launch project based in Sweden; our registered company name and organisation number will be added here once incorporation is complete. For any privacy question or to exercise your rights, email us at info@yahalalo.com.