This Privacy Policy explains how Halalroo ("we", "us", "our") collects, uses, and protects your personal information when you use the Halalroo mobile application and related services (collectively, the "Service").
We are committed to handling your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
By using Halalroo, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.
1. Who We Are
Halalroo is a mobile application and directory that helps users discover halal and halal-friendly restaurants across Australia. For the purposes of the Privacy Act, Halalroo is the entity that collects and holds your personal information.
You can contact us at halalroo.support@gmail.com.
2. Information We Collect
We collect the following categories of information:
Information you provide directly
- Account information — your name, email address, and a password (stored securely in hashed form; we never store your password in plain text).
- Communications — any messages you send us directly (for example, support requests or feedback you submit).
Information collected automatically
- Purchase information — whether you have unlocked all cities. We do not receive your payment card details; purchases are processed by Apple's App Store or Google's Play Store and verified through RevenueCat.
- Device and usage information — device type, operating system version, app version, and general usage patterns (which screens you visit, which restaurants you save).
- Crash and diagnostic data — technical information about errors that occur in the app, used solely to diagnose and fix bugs.
- Location information — only if you explicitly grant location permission. You can revoke this at any time from your device settings. We do not track your location in the background.
Information collected by third parties on our behalf
- Restaurant data — our restaurant directory is compiled from publicly available sources and information provided to us by restaurant operators.
3. How We Use Your Information
We use the information we collect for the following purposes:
- To create and manage your account.
- To authenticate you when you sign in.
- To verify your email address and enable password resets.
- To provide the core functionality of the Service (restaurant discovery, saved favourites, filtering).
- To process and verify one-time unlock purchases.
- To improve the Service, including diagnosing crashes, analysing usage trends, and developing new features.
- To send service-related emails (verification emails, password reset emails). We do not currently send marketing emails; if this changes, we will update this policy and give you a way to opt out.
- To comply with our legal obligations.
4. Third Parties We Share Data With
We use a small number of trusted service providers to operate the Service. Each only receives the minimum information necessary to perform its function.
| Provider |
Purpose |
Data shared |
| Render |
Cloud hosting of our backend API |
All backend traffic (encrypted in transit) |
| Neon |
Managed PostgreSQL database |
Your account data, saved favourites, entitlement records |
| Resend |
Transactional email delivery |
Your email address, name, and email content |
| RevenueCat |
In-app purchase verification |
Anonymised user ID, purchase receipts from Apple/Google |
| Cloudflare R2 |
Image and file storage |
Restaurant photos (no personal user content) |
| Sentry |
Crash and error monitoring |
Technical diagnostic data only (no passwords, no email content) |
| PostHog |
Product analytics |
Anonymous usage events, screen views, tap events |
| Google Maps |
Map display |
Approximate location (only when you view the map) |
We do not sell your personal information to anyone, and we do not share it with advertisers.
5. Data Storage & Security
Your information is stored in encrypted form on servers located in Australia and Singapore. We use industry-standard security measures including:
- Passwords hashed using bcrypt with a per-user salt.
- All network traffic encrypted using HTTPS / TLS.
- Authentication tokens (JWTs) with a 7-day expiry.
- Rate limiting on authentication endpoints to prevent brute-force attacks.
- Sensitive fields redacted from error logs before transmission to Sentry.
No system is completely secure. While we take reasonable steps to protect your information, we cannot guarantee absolute security.
6. Data Retention
We retain your personal information for as long as your account is active. When you delete your account from within the app:
- Your account record, email, and name are permanently deleted.
- Your saved favourites and entitlement records are deleted.
- Server-side backups may retain data for up to 30 days before being overwritten.
- Purchase records held by Apple, Google, and RevenueCat are governed by their own retention policies and are outside our control.
You can delete your account at any time from the Profile screen in the app.
7. Your Rights
Under the Australian Privacy Principles, you have the right to:
- Access the personal information we hold about you.
- Correct any information that is inaccurate or out of date.
- Delete your account and the information associated with it.
- Complain about how we handle your information.
To exercise any of these rights, contact us at halalroo.support@gmail.com. We will respond within 30 days.
If you believe we have not resolved your concern, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
8. Children
Halalroo is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.
9. Halal Status Disclaimer
Important: The halal status displayed for each restaurant is based on information provided to us by restaurant operators, publicly available sources, and community contributions. Halal status and restaurant practices may change without notice. We are not a halal certification authority. You should always confirm halal status directly with the restaurant before ordering. See our
Terms of Service for the full disclaimer.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top and, for material changes, notify you through the app. Your continued use of the Service after an update means you accept the revised policy.
11. Contact Us
For any questions about this Privacy Policy or your personal information:
Email: halalroo.support@gmail.com
Address: [To be provided upon company registration]