HalalScreener, a service of LUMINFUTURE HOLDINGS, LLC ("we," "our," or "us"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services at halalscreener.app (the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Information You Provide

Account Information: When you create an account, we collect your name, email address, and authentication credentials (via Google OAuth or email magic link).
Subscription Information: If you subscribe to a paid plan on the website, payment processing is handled by Stripe. Purchases made inside our iOS and Android apps are billed by Apple or Google, with subscription status managed by RevenueCat. Subscriptions created before we moved to Stripe are still administered by Polar. We do not store your credit card details on our servers.
User Preferences: Your watchlist selections, settings, and language preferences.

Information Collected Automatically

Usage Data: We collect information about how you interact with the Service, such as stocks viewed, searches performed, and features used.
Device Information: Browser type, operating system, and device identifiers.
Log Data: IP address, access times, pages viewed, and referring URLs.
Location (prayer features only): If you use the prayer times or Qibla features and grant location permission, your device uses your coordinates to calculate prayer times and the Qibla direction on the device itself. Your coordinates are also sent to the place-name and weather providers named in Section 3. Location is never requested for the screening or watchlist features.
Cookies: We use essential cookies for authentication and session management. On the website we also load third-party analytics and advertising tags that set their own cookies. See Section 5 for the full list, and for which of them run on the website but not inside our apps.

2. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve the Service
Process your transactions and manage your subscription
Send you important service updates and security notices
Personalize your experience (e.g., watchlists, language preferences)
Analyze usage patterns to improve our screening tools and features
Detect, prevent, and address fraud or technical issues
Comply with legal obligations

3. Data Sharing and Disclosure

We do not sell your personal information. We may share your data only in the following circumstances:

Service Providers: We use third-party services to operate the platform. Each one receives only what it needs for the purpose listed, and processes it on our behalf:
- Vercel: Hosting, serverless functions, and TLS termination
- Turso (libSQL): Primary database
- Stripe: Payment processing for subscriptions bought on the website
- RevenueCat: Subscription status for in-app purchases made in our iOS and Android apps, which are billed by Apple or Google
- Polar: Our former payment processor. It still holds the records of subscriptions created before we moved to Stripe
- Google: OAuth authentication ("Sign in with Google")
- Google Gemini API: AI features. The questions you ask the AI Scholar, the ingredient and menu text or photos you submit to the food scanner, and any brokerage statement or screenshot you upload for portfolio import are sent to Google's Gemini API so it can generate the answer or read the document
- Resend: Transactional email, including sign-in links, receipts, and alerts
- Upstash (Redis): Rate-limit counters and short-lived caching
- Sentry: Error monitoring. Reports are scrubbed before they are sent
- SnapTrade: Read-only brokerage account linking, used only if you choose to connect a broker to import your portfolio
- BigDataCloud: Turns your coordinates into a place name for the prayer features. Sent from your device, and only when you grant location permission
- MET Norway: Weather shown on the prayer screens. Your device sends your coordinates to our server, which rounds them to a grid cell of roughly 11 km before requesting the forecast, so MET Norway never receives your exact position
- OpenStreetMap: Map tiles for the Qibla map
- Telegram: Only if you choose to use our Telegram bot, in which case Telegram carries the messages you send it
- Namecheap / PrivateEmail: DNS hosting, and the mailboxes that receive email you send to our support addresses
- Financial Modeling Prep & CoinGecko: Financial and crypto market data. We send ticker symbols only, never your personal data
- Advertising and analytics partners: Listed in Section 5, together with what they receive and where they run
Legal Requirements: If required by law, subpoena, or government request.
Business Transfers: In connection with a merger, acquisition, or sale of assets.
With Your Consent: When you give explicit permission for a specific sharing purpose.

4. Data Storage and Security

Your data is stored securely using Turso (LibSQL) database with encryption at rest. We implement industry-standard security measures including:

HTTPS encryption for all data in transit
Secure authentication via NextAuth.js with OAuth 2.0
Hashed and salted authentication tokens
Regular security reviews and updates

While we strive to use commercially acceptable means to protect your information, no method of transmission over the Internet or electronic storage is 100% secure.

5. Cookies and Tracking

We use the following types of cookies and similar technologies:

Essential Cookies: Required for authentication and session management. These cannot be disabled.
First-party Analytics: We record usage events (pages viewed, features used, the referring page, your browser user agent, and the country your IP address resolves to) in our own database to improve the Service. We do not sell this data and we do not pass it to advertising networks.
Third-party Analytics and Advertising: The website also loads tags belonging to the partners below. They set their own cookies and receive your IP address, your browser user agent, and the pages you view, and they may use that data to measure our advertising and to show you our ads elsewhere:
- Google Analytics: Traffic and audience measurement
- Google Ads: Conversion measurement and remarketing
- Meta Pixel: Conversion measurement and remarketing for Facebook and Instagram ads
- Tolt: Attributing a sign-up to the affiliate who referred you
- TikTok Pixel and LinkedIn Insight Tag: Conversion measurement, loaded only while we are running campaigns on those platforms

Website and mobile apps are not the same

These tags do not all run everywhere. Google Analytics and the Google Ads tag load on the website and also inside our iOS and Android apps. The Meta Pixel, the Tolt affiliate script, the TikTok Pixel, and the LinkedIn Insight Tag load on the website only: they are switched off in code inside the app, so they never load there.

You can control cookies through your browser settings. You can also opt out of Google Analytics with Google's browser add-on, and manage ad personalization in your Google and Meta account settings. Disabling essential cookies may prevent you from using certain features of the Service.

6. Browser Extension (Halal Check)

If you install our Halal Check browser extension, the following applies in addition to the rest of this policy:

Data the Extension Reads

Shopping and recipe sites (grocery and product stores such as Amazon, Walmart, iHerb, Target, Instacart, Kroger, Whole Foods, Sam's Club, Safeway, Albertsons, H-E-B, Publix, Meijer, Wegmans, ShopRite, Tesco, Sainsbury's, ASDA, Ocado, Morrisons, Waitrose, Carrefour, Noon, LuLu Hypermarket, Costco and Aldi, and recipe sites such as AllRecipes, BBC Good Food, NYT Cooking, Tasty, Delish and Epicurious, automatically; plus any other product page when you click "Scan this page" in the popup): the extension reads the product title, the ingredient text visible on the page (including a recipe's ingredient list), the product barcode (GTIN/UPC) when the page exposes one, and the addresses of product gallery images, in order to check the product against our halal ingredient database.
Finance, crypto, and broker sites (stock research pages such as Yahoo Finance, Google Finance, TradingView, Bloomberg, CNBC, Nasdaq, MarketWatch, Seeking Alpha, Investing.com, StockAnalysis, Stocktwits, Finviz, Barchart, Benzinga, TipRanks, Zacks, Morningstar, Motley Fool, MSN Money, WSJ, Barron's, Simply Wall St, Macrotrends, GuruFocus and Markets Insider; brokerages such as Robinhood, Webull, eToro, Public, Moomoo, Trading 212, Vanguard, Fidelity and Wealthsimple; and crypto sites such as CoinMarketCap, CoinGecko, Binance, Coinbase, Kraken, Crypto.com, KuCoin, OKX, Bybit, Gemini, Bitget, MEXC and CoinDesk): the extension reads the stock or crypto ticker symbol of the page you are viewing in order to display its Shariah compliance status.
Food delivery and restaurant pages (such as Uber Eats, DoorDash, Grubhub, Deliveroo, Just Eat, Talabat, HungerStation, Zomato, Swiggy, Foodpanda, Wolt, SkipTheDishes, Menulog, OpenTable, TripAdvisor restaurant pages, Google Maps and Yelp): the extension reads the menu item names and descriptions, and the restaurant name, on your device to flag pork and alcohol items by name. The first check runs entirely on your device. If it flags something, the flagged menu item names and the restaurant name are sent to our servers to confirm the result before a warning is shown, so that a menu is never labelled wrongly on a keyword alone.
Search engines (Google, Bing, DuckDuckGo): when your search is about whether something is halal, the extension reads your search query so it can show a HalalScreener answer card at the top of the results.
Right-click menu: if you highlight text and choose the "Is it halal?" right-click option, the selected text is used to open the matching HalalScreener page. The selection is read only when you click that menu item.
The extension does not read your browsing history, passwords, or payment information. Outside the sites above, it reads a page only when you explicitly click "Scan this page".

Data Sent to Our Servers

Stock checks: the ticker symbol you are viewing or searching.
AI ingredient analysis: the product name, the flagged ingredient names, an excerpt of the page text around the ingredient list, the product barcode when available, and up to 4 product gallery image addresses (so the AI can read the ingredient label photo when the page hides its ingredient text), used solely to generate the analysis.
Menu confirmation: when a restaurant menu check flags a possible pork or alcohol item, the flagged menu item names and the restaurant name are sent so the result can be confirmed before any warning is shown.
AI Scholar questions: the question text you type.
Feedback: the message and email address you submit through the feedback form.
Anonymous usage events (only if you opt in on the consent screen, off by default): aggregated, non-identifying events such as which tickers are checked most, scan result categories, and which of our detection rules matched (for example "bacon" or "wine"), which we use to find rules that are flagging things incorrectly. These events never include the web address, the product name, or the restaurant name. You can turn this off anytime in the extension Settings.
Wrong-result reports: if you tap "Wrong?" on a result, we receive the site name, the result you were shown, which detection rules matched, and the menu item or ingredient text you are disputing, so we can reproduce and fix it. Nothing is sent unless you tap that button.
Usage limits: the randomly generated install identifier described below, sent with ingredient and Scholar requests so we can apply the free plan's scan limits fairly. It is not linked to your identity.

Data Stored on Your Device

A randomly generated install identifier (not linked to your identity) used to apply free usage limits.
A sign-in token if you connect your HalalScreener account, your settings, cached results, and your recent scan history. All of this stays in your browser's extension storage and can be cleared from the extension Settings or by uninstalling the extension.

The extension does not sell this data, does not collect data for advertising, and uses it only to provide the features described above. The only third parties involved are the service providers in Section 3 that process data on our behalf, in particular Google's Gemini API, which generates the AI ingredient analysis and the AI Scholar answers.

7. Your Rights

Depending on your jurisdiction, you may have the following rights:

Access: Request a copy of the personal data we hold about you.
Correction: Request correction of inaccurate data.
Deletion: Request deletion of your account and associated data via the Settings page.
Portability: Request your data in a portable format.
Objection: Object to certain types of processing.

To exercise these rights, please contact us at support@halalscreener.app.

8. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required by law to retain certain information.

Anonymized usage data may be retained indefinitely for analytics and service improvement purposes.

9. Children's Privacy

The Service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and maintained on servers located outside of your country of residence. By using the Service, you consent to such transfers. We ensure appropriate safeguards are in place for any international data transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us at:

Company: LUMINFUTURE HOLDINGS, LLC
Email: support@halalscreener.app
Website: halalscreener.app