Privacy Policy

This policy explains what information Halfy (“Halfy”, “we”, “us”) collects when you use our mobile apps (iOS and Android) and this website (collectively, the “Service”), why we collect it, who we share it with, and the choices you have. It is written to meet our obligations under the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), and to be clear to a reader outside Australia.

Halfy is operated from Australia. If you are reading this somewhere else, your information will be handled in Australia and in the countries where our service providers listed below operate.

Halfy is independent. We are not affiliated with, endorsed by, sponsored by, partnered with, or otherwise associated with Coles, Woolworths, Chemist Warehouse, Harris Farm or any other retailer in any way. Deal information shown in the app is aggregated from each retailer’s own publicly available catalogues, specials pages and product listings — we don’t receive a data feed, commercial arrangement or any other cooperation from the retailers. See our Terms of Service for more.

1. Summary (the short version)

• We only collect what we need to show you relevant deals, run your account and keep the app stable.
• We don’t sell your personal information. Ever.
• On iOS we ask for your App Tracking Transparency permission before enabling any cross-app tracking for advertising. If you say no, we don’t track you.
• You can delete your account and your data from inside the app at any time.

2. Information we collect

2.1 Information you give us

• Sign-in identifiers. Signing in is required to use Halfy. When you sign in with Sign in with Apple or Google Sign-In we receive a user identifier and (where the provider supplies it) your email address. We never see your password.
• Onboarding preferences. The household profile and shopping preferences you choose during the 60-second onboarding (e.g. household size, store preferences, categories you care about).
• Saved deals and reactions. Products you pin, share, or react to so we can keep them available across your devices.
• Support correspondence. If you email us or use the in-app feedback link, we receive whatever you send.

2.2 Information we collect automatically

• Device and app information. Device model, operating system version, app version, language, time zone, and a randomly generated installation identifier.
• Usage analytics. Screens viewed, buttons tapped, deal categories browsed, and similar in-app events — used to understand which features help people save and which don’t.
• Crash diagnostics. When the app crashes we collect a stack trace plus device and OS information so we can fix the bug.
• Push-notification token. A device token from Apple Push Notification service or Firebase Cloud Messaging, used to deliver the deal alerts you’ve opted into.
• Purchase state. If you subscribe to Halfy Plus, we receive the subscription status and a pseudonymous app-store identifier from our subscription processor (see section 4).
• Advertising identifiers (free tier only, with consent). On iOS, only if you grant App Tracking Transparency permission, we receive your IDFA. On Android, Google’s advertising ID may be used by the ad SDK in line with your device settings. If you opt out (iOS) or reset (Android), we fall back to non-personalised ads.
• Referral / deep-link data. If you open Halfy through a shared link, we receive the referring link parameters so we can take you to the right screen.

2.3 Information we do not collect

• We do not collect your contacts, calendar, photos, microphone audio, or precise GPS location.
• We do not collect payment card details — subscription purchases are handled entirely by the App Store or Google Play.
• We do not knowingly collect information from children under 13 (see section 9).

3. How we use your information

• Run the app. Show you the deals and categories that match your preferences, sync your saved items, and let you sign in on multiple devices.
• Send notifications. Deliver the deal alerts you’ve opted into. You can disable them at any time in your device settings.
• Improve Halfy. Analyse aggregated usage patterns, diagnose crashes, and A/B test new features.
• Handle subscriptions. Check whether you’re a Halfy Plus subscriber and unlock the corresponding features.
• Advertising (free tier). Show ads from the Google Mobile Ads network. Ads are either personalised (if you’ve consented) or non-personalised (if you haven’t).
• Safety and integrity. Detect abuse, fraud, and violations of our Terms of Service.
• Legal obligations. Comply with applicable laws, respond to lawful requests, and enforce our agreements.

4. Service providers we share with

We use a small number of trusted third parties to run Halfy. We only share the minimum information each of them needs, and each acts as our processor under a data processing agreement. We do not sell personal information.

• Google Firebase (Google Ireland Ltd / Google LLC) — Authentication, Firestore database, Cloud Messaging (push), Remote Config, Crashlytics, Analytics, and Dynamic Links. Stores your user ID, preferences, saved deals, push token, analytics events and crash logs. firebase.google.com/support/privacy
• Supabase (Supabase Inc.) — Backend database for deal data and some account information. supabase.com/privacy
• Apple — Sign in with Apple and Apple Push Notification service. apple.com/legal/privacy
• Google — Google Sign-In. policies.google.com/privacy
• RevenueCat (RevenueCat, Inc.) — Subscription management for Halfy Plus. Receives a pseudonymous user identifier and your subscription status. revenuecat.com/privacy
• Google Mobile Ads (AdMob) — Serves ads in the free tier. Receives advertising identifier (if you’ve consented) and contextual data about the app. support.google.com/admob
• The App Store (Apple) and Google Play — Handle all purchase transactions. Halfy never sees your card details.

We may also share information where required by law, in response to valid legal process, to protect the rights and safety of users or the public, or in connection with a sale or merger of the business (in which case we’ll notify you in advance).

5. International transfers

Some of the providers listed above process data outside Australia, including in the United States and the European Union. Where we transfer personal information overseas, we take reasonable steps (including contractual safeguards with each provider) so that it receives a comparable level of protection to that required by the Australian Privacy Principles.

6. How long we keep it

• Account and preferences. Kept while your account is active. Deleted within 30 days after you delete your account, except where we need to keep it to meet a legal obligation.
• Crash and analytics logs. Retained for up to 14 months, then deleted or fully anonymised.
• Subscription records. Kept for as long as required by tax and consumer-law rules (typically 7 years in Australia).

7. Your rights and choices

• Access and correction. You can view and edit your preferences in the app, or email us to request a copy of the personal information we hold about you.
• Deletion. You can delete your account from Account → Delete account inside the app. This removes your profile, saved deals and reactions from our systems. Copies may persist in encrypted backups for up to 30 days before they expire.
• Notifications. Turn off push notifications any time in the app or your device settings.
• Tracking & ads. On iOS, use Settings → Privacy → Tracking to revoke Halfy’s ATT permission. On Android, reset or opt out of your Advertising ID from your device settings. Halfy Plus subscribers don’t see ads.
• Complaints. If you think we’ve mishandled your information, email us first. If you’re not satisfied you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

8. Security

We use industry-standard measures to protect your information in transit (TLS 1.2+) and at rest (encrypted storage with our cloud providers). No system is perfect, though — if we ever become aware of a data breach likely to cause you serious harm, we’ll notify you and the Office of the Australian Information Commissioner in line with the Notifiable Data Breaches scheme.

9. Children

Halfy is intended for adults who do the household shopping. The Service is not directed at children under 13 and we don’t knowingly collect personal information from them. If you believe a child has given us information, email halfy@deucks.com and we’ll delete it.

10. Changes to this policy

If we make a material change to this policy we’ll update the “Last updated” date at the top and, where the change is significant, alert you in the app before it takes effect. Your continued use of Halfy after the new policy comes into force means you accept it.

11. Contact us

Privacy Officer — Halfy
Email: halfy@deucks.com