HalalFlow sells curated halal meat boxes, delivered. This policy describes what we collect when you use the HalalFlow apps and website, how we use it, and the choices you have.

“We”, “us”, and “HalalFlow” refer to HalalFlow Inc., the company that operates the HalalFlow service. If you have questions, contact us at privacy@halalflow.ca.

When you create an account we collect the email address and password you provide. If you enter a name or phone number during checkout, we store those too. We use Supabase Auth to manage your login session; your password is hashed and never stored in plain text.

For each order we store the items and quantities you selected, any preparation preferences, your delivery address and window, special instructions, and the estimated and final totals.

Card details are collected and processed by Stripe. HalalFlow never sees or stores your full card number. We store a reference to the Stripe payment (a PaymentIntent ID) and the amounts authorized, captured, and refunded — nothing more. Stripe’s handling of your card data is governed by their own privacy policy.

To show you nearby stores, we may ask permission to read your device location. If you decline, you can still pick a city manually. When you save a city, we convert it to approximate latitude / longitude using OpenStreetMap’s Nominatim service (the address you type is sent to their servers to return coordinates; nothing else). Only the approximate coordinates are stored locally on your device — they are not sent to our servers.

If you allow notifications, we store an Expo push token so we can send you order-status updates (confirmed, on its way, delivered). You can disable notifications in your device settings at any time; we will stop sending them.

We use Sentry to capture crash and error reports so we can fix bugs. These reports may include a device model, OS version, and technical details of the error. We take care to scrub personal data from these reports before they are sent.

We do not sell your personal information. We do not use your information for third-party advertising.

The supplier who prepares your box sees only what they need to prepare it — the items, quantities, and delivery window. They never see your address, phone, email, or the prices; a courier handles delivery.

We share information with the services that make the app work: Supabase (database and auth), Stripe (payments), Expo (push notifications), Resend (transactional email), Sentry (error monitoring), and OpenStreetMap Nominatim (address geocoding). Each of these services has its own privacy policy.

We may disclose information if required by law, to protect our rights or the safety of others, or in connection with a corporate transaction (merger, acquisition, sale of assets).

We keep your account and order history for as long as your account is active. When you delete your account we remove your profile within 30 days, except for records we are required to keep for tax, accounting, or fraud-prevention reasons (typically up to 7 years for financial records).

HalalFlow is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with information, contact us and we will delete it.

We use Row-Level Security in our database, HTTPS in transit, and industry-standard practices to protect your information. No system is perfectly secure; if we ever have a breach that legally requires notification, we will notify affected users in accordance with applicable law.

We may update this policy from time to time. The effective date at the top will change and, for material changes, we will notify you in-app or by email.

Questions or requests? Reach us at privacy@halalflow.ca.