Halal TableHalal Table — Privacy Policy
Effective date: October 5, 2026
Halal Table is operated by Shahreare Khan, an individual based in California, United States ("we", "us"). This policy explains what we collect when you use the Halal Table app, why, who sees it, and what you can do about it. It is written to be read.
Contact: support@halaltable.app
The short version
- We collect what you give us: an email address, a username, and whatever you choose to post.
- Your location is used on your phone and in a single search request to find places near you. We do not store it.
- We show no ads, run no advertising or analytics trackers, and never sell your data.
- Payments go through Apple. We never see your card.
- Reviews, photos and replies are public, with your username next to them.
- You can delete your account, and everything tied to it, from the Profile screen.
What we collect
Account. When you sign up we store your email address, a username, and a password that is stored only in hashed form by our authentication provider. You may add a display name and an avatar. Your email is never shown to other members.
Content you post. Reviews and ratings, photos and their captions, replies, confirmation votes with any note, places you submit, and reports you file. Content is stored with your account id and the time it was posted.
Members you block. If you block another member, we store that block against your account so their content can be hidden from you. It is stored and deleted the same way as any other content tied to your account — see "How long we keep it" below.
Support purchases. If you support Halal Table, Apple processes the payment and RevenueCat (our subscription service) tells us what happened: the product, price and currency, the dates, and whether it renewed, was cancelled, expired or was refunded. We store those events against your account so your badge can be shown and your support history displayed to you. We do not receive your card details, billing address or Apple ID.
Location. When you use the Nearby list or the map, the app reads your device location, with your permission, and sends the coordinates to our server in the search request so it can return places near you. We do not store your location or keep a history of where you have been. You can deny location access; the app then searches around a default area or the map position you choose.
Addresses you type. When you add a place, the address you enter is sent through our server to OpenStreetMap's geocoding service to find its coordinates. The address is a business address, not yours. We keep a record of when your account made a lookup, without the address, to limit how many lookups one account can make.
Technical data. Our hosting provider records ordinary server logs (such as IP address, request time and device type) for security and to keep the service running. RevenueCat's software in the app records a device identifier and app version so purchases can be matched to your device. We do not use analytics or advertising SDKs, and we do not fingerprint devices.
Why we use it
- To run the service: show listings, publish your content, count confirmation votes, award points and badges.
- To moderate: review reported content, hold content that trips the profanity filter, and act on abuse.
- To show your support status and history.
- To protect the service from abuse, and to comply with the law.
We do not use your data to build advertising profiles, and we do not sell or rent it.
What is public
Your username, display name, avatar, level, badges (including Supporter, Founding Supporter and Backer), reviews, ratings, photos, replies and the fact that you confirmed a place are visible to everyone who uses the app, including people who are not signed in. Your email address, support history, reports and the members you have blocked are private to you and to us.
Who we share it with
We use a small number of service providers, each of which processes data only to provide its service to us:
- Supabase — hosting, database, authentication and photo storage. Servers in the United States.
- RevenueCat — subscription and purchase management. Receives your account id and purchase events from Apple.
- Apple — payment processing for support purchases, and map display through Apple Maps, under Apple's own privacy policy.
- OpenStreetMap Foundation — geocoding of business addresses you enter. Receives the address only.
We share personal data otherwise only when the law requires it, to enforce our Terms of Use, or to protect the rights and safety of members, businesses or the public. If Halal Table is ever transferred to a new operator, your data would go with it under this same policy, and you would be told.
How long we keep it
Your account and content stay until you delete them. Deleting your account from the Profile screen removes your profile and the content posted under it — reviews, photos, replies, votes, badges and your block list. Support purchase records tied to a deleted account are kept without the account link, because Apple and tax rules require a record of payments. Server logs are kept for a short period and then discarded. Content that is the subject of an open report or a legal hold may be kept until the matter is closed.
Your choices and rights
- Access and correction. Your profile is editable in the app. Ask us for a copy of the data we hold about you at any time.
- Deletion. Delete your account in the app, or email us.
- Location. Change location permission in your device settings at any time.
- Marketing. We send none.
If you live in California, the California Consumer Privacy Act gives you the right to know what personal information we collect, to have it deleted, and not to be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined in that law. If you live in the European Economic Area or the United Kingdom, you have the rights to access, rectify, erase, restrict and port your data, to object to processing, and to complain to your supervisory authority; our legal bases are performance of our contract with you (running the service) and our legitimate interests (security and moderation). To exercise any right, email us. We will answer within 30 days.
Children
Halal Table is not directed to children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, tell us and we will delete it.
Security
Passwords are hashed, connections are encrypted, and access to our database is restricted by role so that the app can only read and write what a member is allowed to. No system is perfectly secure; if we learn of a breach affecting your data we will tell you as the law requires.
International transfers
Halal Table is operated from the United States and our providers store data there. If you use it from elsewhere, your data is transferred to and processed in the United States.
Changes
We may update this policy. If a change is significant we will tell you in the app or by email before it takes effect. The effective date at the top always shows the current version.