Privacy Policy

1) Who we are

Halaly is a marketplace platform for listing and discovering livestock, halal products, and real‑world services (e.g., veterinary services).

2) Data we collect

• Account data: Email, password (stored securely/hashed on the server), account type (customer/company), and phone number if you add it.
• Profile data: Name, company (if applicable), profile photo, optional city/address, bio.
• User-generated content: Listings and services (title, description, photos, price, location/city), notebooks/records (animal/production data), and reviews/ratings if available.
• Order data: Order details (type, amount, notes, status, timestamps).
• Photos & camera: We may request photo library/camera access so you can select or capture images for listings/services/profile.

3) How we use your data

• Create your account, sign you in, and manage sessions.
• Publish listings/services and manage notebooks/records.
• Create and manage orders within the app.
• Prevent fraud/abuse and improve security.

4) Phone verification (SMS messages)

When you register or reset your password, we may ask you to verify your mobile phone number. By entering your phone number and tapping the “Send Code” button (or equivalent), you give us your express consent to send an SMS text message containing a one-time password (OTP) to that number.

We use Twilio, Inc. (“Twilio”) — a licensed U.S. communications provider — as our service provider to send SMS messages and to verify the OTP code. When we dispatch a verification code:

• Your phone number and the verification code are sent to Twilio’s servers for delivery over local mobile-carrier networks.
• These data are used solely to deliver the message and to verify the code. We do not use your phone number for SMS marketing, nor share it with third parties for marketing.
• Standard carrier message and data rates may apply — rates vary by country and carrier and are outside our control.
• The code is valid for a limited time (typically 10 minutes) and is invalidated upon use or expiry.
• We retain message-delivery records (timestamp, delivery status, partial phone number) for security and fraud-prevention purposes for up to 18 months.

Twilio processes these data under its own privacy policy and the Data Processing Addendum (DPA) we have with them. Twilio Privacy Policy.

To opt out: you may decline to use your phone number on the platform, or delete your account at any time from (Settings → Delete account). If you receive unsolicited messages, please contact us immediately.

5) Sharing of data

We do not sell your personal data. We may share limited data with essential service providers required to operate the platform, including:

• Twilio: to deliver verification SMS messages (phone number + OTP only).
• Tap Payments: to process electronic payments when using the payment gateway for a service.
• Cloudflare R2: for secure image storage.
• Apple / Google: for notifications and in-device payment gateways (Apple Pay / Google Pay).
• Or when required by law or valid legal process.

Some listing/service information may be publicly visible in the platform (e.g., title, description, images, city, price) based on what you publish.

6) Payments

In-app service payments are processed through the Tap Payments gateway. We do not store or process card data on our servers — all sensitive card information is handled directly by Tap Payments under PCI-DSS standards. Peer-to-peer transactions (e.g., purchasing livestock) may occur outside the app.

7) Data retention

We retain your data as long as your account is active or as needed to provide the service, comply with legal obligations, resolve disputes, and prevent abuse. SMS verification records are deleted after a maximum of 18 months.

8) Data security

We use reasonable security measures to protect data, including secure connections (HTTPS/TLS), secure on-device token storage, password hashing (bcrypt), and SMS code verification over an encrypted channel with Twilio.

9) Your rights & choices

• You can update your profile within the app.
• You can delete your account in-app via (Settings → Delete account).
• You can request a copy of your data or corrections by contacting us at info@halaly.com.
• To withdraw your consent to phone verification at any time, delete your account or contact us — after which we may be unable to provide services that require phone verification.

10) User-generated content & reporting

The app includes user-generated content. We provide reporting and blocking tools to address abuse.

11) Children’s privacy

The platform is not directed to children under 13. We do not knowingly collect data from children.

12) Changes to this policy

We may update this policy from time to time. We will post the updated version here and update the effective date.

13) Contact

Contact: info@halaly.com