Privacy Policy

Effective 27 May 2026

HalalScan.AI ("we", "the app") is operated by the developer of com.APhalalscan.app. This policy explains what data the app collects, how it is used, and your rights.

Information we collect

On-device only (never sent to our servers):

• Your scan history (products you have scanned, ingredients, AI verdicts)
• Your madhhab preference and other app settings
• A locally generated anonymous device identifier used to rate-limit AI requests

Sent to our backend (Cloudflare Worker) only when you scan:

• The product name, ingredients text, or photo you are checking
• The anonymous device identifier (used to enforce the weekly free-scan quota)
• Your IP address, processed transiently to enforce rate limits — not stored

We do not collect:

• Your name, email, phone number, or any other personal identifier
• Your precise location
• Contacts, photos beyond what you submit for a scan, or any other on-device data
• Cross-app tracking identifiers

How your data is used

• Ingredient and image data are forwarded to Anthropic's Claude API to generate a halal verdict, then discarded by our backend. We retain only aggregate rate-limit counters keyed to the anonymous device identifier.
• Anthropic processes the data under its own privacy terms: anthropic.com/legal/privacy. We do not authorize Anthropic to use submissions to train its models.
• Open Food Facts (world.openfoodfacts.org) is queried for product metadata. Only the barcode or search query you provide is sent.

Data retention

• On-device data stays on your device. Uninstalling the app removes it.
• Rate-limit counters on our backend expire automatically (rolling 7-day window).
• We do not maintain user accounts, and there is nothing personally identifiable to delete.

In-app purchases

If you subscribe to a paid plan, the transaction is processed by Apple's App Store. We receive only an anonymous entitlement flag from Apple — never your payment details.

Children

HalalScan.AI is not directed to children under 13. We do not knowingly collect data from children.

Your rights

Because we do not collect personally identifiable information, traditional GDPR/CCPA access or deletion requests do not apply. To remove all app data, uninstall the app.

Contact

Questions? Email support@halalscan.org.

Changes

If this policy materially changes, we will update the effective date at the top and post a notice in the app.