Privacy Policy

Effective date: September 28, 2026

This privacy policy describes HalalInspector, the mobile-first successor to the Amna app and part of the broader isItHaram.com ecosystem. It covers the HalalInspector app and the platform services used by the app. A separate privacy notice may apply to the isItHaram.com website itself.

Guest use and account use

Guest discovery can be available without signing in. Features that create an authenticated profile or trusted activity use Sign in with Apple. The platform validates Apple identity tokens for supported account features; it does not receive your Apple ID password.

Information the app may process

• Catalog and search activity: searches, saved places, viewing history, ingredient or product records, catalog review activity and preferences stored by the app.
• Profile information: supported profile fields such as name, bio, photo and ingredient preferences when you choose to create or synchronize a private profile.
• Location: precise location is used only for location-dependent features such as explicit check-ins, nearby-place functions and arrival monitoring. Current check-in evidence records account, place, time, distance and reported accuracy rather than raw customer coordinates in the check-in record.
• Reviews and community activity: reviews, posts, follows, check-ins, photos and related moderation state when you choose to create them.
• Business and platform records: business claims, permissions, offers, staff invitations, purchase-confirmation records, review responses, appeals and moderation/audit information when those features are used.
• Receipt or evidence attachments: when a private receipt attachment is used, the app removes original photo metadata from the processed attachment and encrypts the stored attachment. Receipt submission does not by itself certify a purchase or halal status.

iCloud and local storage

The app can use a private CloudKit profile for supported personal profile data. The reviewed implementation stores profile uploads in encrypted CloudKit fields and uses Apple's platform protection for CloudKit assets. The app also stores local records on the device under iOS Data Protection. These protections are not a claim of custom end-to-end encryption for every item of app or service data.

HalalInspector platform service

Where the platform service is enabled, HalalInspector may send authenticated account, business, purchase-confirmation, review, appeal and permission data to WebbieFourth's HalalInspector service. The reviewed service encrypts sensitive stored fields and enforces authenticated sessions and authorization checks. Platform operators can access data when needed for authorized operations, verification, moderation, support, security and service administration.

Third-party services

HalalInspector uses Apple services for functions such as Sign in with Apple and, when enabled, private iCloud data. Product lookups may contact Open Food Facts. Map, location, notification and other Apple platform features are subject to Apple's own privacy terms. No connected payment processor or third-party POS provider was established in the reviewed development baseline.

Location and geofencing

Geofences are used to provide arrival prompts. They do not automatically create a visit, review, purchase or achievement. Explicit check-in and purchase-confirmation flows may process current location to evaluate proximity. Location can be inaccurate or spoofed; HalalInspector does not promise that location evidence is infallible.

Your privacy controls

• Delete online service account: the current app provides a control intended to invalidate platform sessions and remove the account's claims, permissions, reviews and owned service records through the platform deletion flow.
• Delete private iCloud profile: a separate control removes the signed-in account's supported private iCloud profile data; local records remain.
• Erase local app data: a separate control erases the app's local records on that device, stops arrival monitoring and notifications, and signs out; iCloud and online-service data are not removed by that local action.

These deletion scopes are intentionally separate. Deletion cannot promise forensic erasure from device backups, exported copies, third-party systems, or every previously created backup. Production backup-retention and legally required retention rules must be reflected here if they materially change before public release.

Support communications

If you contact WebbieFourth, we receive the information you choose to provide in order to respond. Do not send passwords, authentication tokens, full payment-card data or unnecessary sensitive documents through the general contact form.

Changes

HalalInspector remains under active development. This policy must be updated before release if the production service, retention practices, connected providers, or data flows materially differ from the reviewed implementation described above.