This page describes what Halulu collects, why, who else receives it, and how long it is kept. It describes what the software actually does.
Halulu needs your location, or a place you type, to find restaurants near you, and your craving text to rank them. It stores both. It sends your search area and search words to Google to find nearby places, and your craving and the review text to Anthropic for analysis. It does not sell your data, and it shows no advertising.
Halulu is operated by Osama Khalil. Write to eat@halulu.app with any question about this page.
Your account. Your email address, your name, your chosen language, and optionally a username and a short bio. If you sign in with Google, Halulu receives your email address and your name from Google. Passwords are hashed by the authentication provider and are never written to a log. If you sign in with Apple, Halulu receives the name and the email address that Apple shares, which can be a private relay address. An account made with Sign in with Apple works in the iPhone app only, until the website adds Sign in with Apple.
Your searches. Every search stores the craving text exactly as you typed it, the precise latitude and longitude that your browser or the iPhone app reported, or the place you typed, the city and country derived from your IP address, the filters you chose, how long the search took, and which restaurants were shown to you and at what rank. Halulu uses this to measure whether the ranking is any good and what each search costs to run.
What you save. Saved restaurants, the collections you organise them into, any note you attach, and any share link you create. A share link is public by design, so anyone holding the URL can open it. A collection is private until you change it.
What you choose to publish. Claiming a username publishes your username, your display name and your bio at a public web address that anyone can open without signing in. If you never set a display name it defaults to the part of your email address before the @ sign, so change it before you claim a handle if that matters to you. Collections you mark public appear there too. Everything else stays private.
Your profile picture. In the iPhone app, each account gets a costume for the Halulu character. Halulu stores the costume with your account. You can also add a photo from your photo library. Halulu stores that photo in a private folder. Only you can see your photo. Halulu shows it to no other person. Halulu keeps it until you remove it or delete your account.
What you send us. A message through the contact form is emailed to Halulu and is not stored in the database. A feature request is stored with your account and emailed to Halulu as well.
Payments. Halulu never sees or stores your card. Payment runs through Lemon Squeezy, which is the merchant of record. Halulu stores the subscription record it sends back, which contains your email address and the state of your plan. In the iPhone app, Apple sells Super Yumi through the App Store. Halulu receives the purchase record that Apple signs: the plan, its dates and an identifier. It does not receive your card or your Apple ID.
Product analytics. On the website, Halulu measures how the product is used, through the hosting provider’s analytics. This is more than page views. The events carry the first 50 characters of your craving, the name of a restaurant you opened, saved or shared, the rank that restaurant held in the results, which plan you are on, and how you signed in. The iPhone app sends no product events. It does link each restaurant you save and each visit you log to the search that showed it, so Halulu can measure the rank of the restaurants that people choose.
Error reports. When the site throws an error, an error-tracking service receives the error together with your account identifier, the search you were running and the filters you had set. The iPhone app sends crash and performance reports to the same service, without your name or your email address.
Other people’s reviews. To rank restaurants, Halulu caches Google Maps review text and the author name, profile link and photo that Google publishes with it. The iPhone app shows that author credit next to each quote. This is other people’s data, cached for at most 28 days at a time, which is inside the limit Google’s terms allow.
AI processing and your consent. A search sends your craving to Anthropic, and your search words and search area to Google. The iPhone app asks for your permission before your first search. You can withdraw this permission at any time in the app: tap your picture at the top of the map to open Settings, then turn off AI search. Without it, search in the app stays off, and the rest of the app keeps working. This permission and its switch belong to the iPhone app only. A search on the website sends the same data with no separate permission step.
When you log a visit, Halulu keeps the restaurant, the photo you take with the camera, your answer on whether you will return, and your opinion if you write one. Halulu also keeps the location of your phone at that moment with the visit, to check that you are at the restaurant.
Only you can see your photos and your opinions. Halulu keeps your visits, your photos and your Yumi history for as long as your account exists, and deletes them when you delete your account.
When a friend joins with your invite code, Halulu keeps that link between the two accounts, and gives you one Yumi after the friend logs a first visit. Your friend does not see your visits, and you do not see the visits of your friend.
These providers process data on Halulu’s behalf. Each of these providers gives your data the same or equal protection as this policy. Halulu does not sell your data to anyone, and nobody can pay to influence a ranking.
Your account, your searches, your saved restaurants and your collections are kept for as long as your account exists. Google content stays at most 28 days: cached reviews expire, Halulu deletes the results it keeps for share links, and a weekly job refreshes the name, address and location of saved places and share links from Google and removes their Google rating and review quotes. A password-reset link expires after one hour, and an email-confirmation link after 24 hours.
Halulu keeps your sign-in session, your language, your last known location, and your search preferences in your browser’s local storage. Halulu sets no analytics cookie and no advertising cookie, and runs no advertising network. Clearing site data in your browser removes everything Halulu stored locally, and signs you out.
This section applies to you if you are in the European Union. It adds to the rest of this page. It follows the General Data Protection Regulation (GDPR), which is the data law of the EU.
Who is responsible. Osama Khalil operates Halulu as one person, not as a company. He is the controller of your data, which means that he decides how Halulu uses it. Write to eat@halulu.app.
Why Halulu is allowed to use your data. The GDPR asks for a legal reason for each use. Halulu has four.
Where your data goes. Halulu keeps its database and runs its code in Singapore. Most of the providers named above are in the United States. The European Commission has not decided that Singapore gives the same level of protection as the EU. For the United States, it has decided so only for companies in the EU-US Data Privacy Framework. For every other transfer, Halulu relies on the standard contractual clauses of the European Commission, which are part of the terms of the providers. Write to the address above for a copy.
Your rights. You can ask Halulu to do each of these things, at no cost.
Write to eat@halulu.app from the address on your account. Halulu answers within one month.
Complaints. You can also complain to the data protection authority of the EU country where you live or work. The European Data Protection Board keeps the list of the national authorities.
Automated ranking. Software, with the help of AI, ranks the restaurants for each search. This ranking decides only the order of a list. Halulu makes no automated decision that has a legal effect on you, or a similar serious effect.
Data you must give. A search needs your craving and a location or a place you type. An account needs an email address. Without them, that part of Halulu cannot work. Everything else is optional.
Your age. In the EU, the age at which you can give permission for your data yourself is between 13 and 16, and each country sets its own. Halulu does not ask for your age. If you are below the age of your country, ask a parent to agree before you use Halulu.
Halulu is not built for children and does not knowingly collect data from anyone under 13. If you believe a child has an account, write to the address above and it will be removed.
When this page changes materially, the date below changes with it. Last updated 12 November 2026. Questions, corrections and deletion requests go to eat@halulu.app.