PRIVACY POLICY — HALIAGO

Last updated: January 13, 2026

This privacy policy (the "Policy") describes how Haliago collects, uses, and protects the personal data of users of the Haliago mobile application (Android/iOS), associated web interfaces, as well as, where applicable, professionals using Haliago Pro services.

1. Data Controller — Contact

Data Controller: Haliago — Bella Hamza, Sole Proprietor 37D Avenue Louis Bréguet, 78140 Vélizy-Villacoublay, France Email: contact@haliago.com

For any questions regarding data protection, or to exercise your rights (see Article 10), you may write to contact@haliago.com.

2. Personal Data Processed

Depending on your usage, Haliago may process the following categories of data in particular:

2.1 Account and Profile Data

  • Email
  • Pseudonym / Username
  • Phone number
  • Country (optional)
  • City (if provided)
  • Avatar (if added)
  • Account settings and preferences

2.2 Application Usage Data

  • Usage history (screens viewed, actions performed)
  • Favorites, collections (private/public), subscriptions/following
  • Interactions (clicks, searches, filters applied)

2.3 User Generated Content (UGC) and Contributions

  • Reviews (text), ratings
  • Published photos
  • Proposals for adding an establishment
  • Suggestions for modifying listings
  • Reports (reviews, listings, information)

2.4 Location Data

  • Precise location: only if you activate the "on my location" mode and grant permission to the operating system.
  • Manually chosen location: if you decide to position yourself elsewhere to plan a trip (the Platform then relies on the location you have selected).

2.5 Technical and Security Data

  • Connection data and technical logs (IP address, timestamps, technical identifiers, security events)
  • Information relating to the terminal and the application (version, language, technical identifiers)

2.6 Data Specific to Professionals ("Pro" usage)

  • Information and content relating to the management of establishment listings (hours, menus, photos, links, etc.)
  • In the context of promotions, only the pseudonym of users having used a promotion may be visible on the professional side (without directly identifying data).

3. Purposes (Why we process your data)

Haliago processes your data for the following purposes:

  1. Account creation and management (authentication, security, support)
  2. Provision of features (search, filters, display of listings, favorites, collections, tracking)
  3. Community animation (publication of reviews/photos, proposals, reports, moderation)
  4. Allocation and management of HG points (badges, ranks, rankings)
  5. Platform improvement (audience measurement, performance, ergonomics)
  6. Fraud prevention and security (detection of abuse, user protection, integrity of reviews)
  7. User support (processing requests via in-app form and/or email)
  8. Professional features (if applicable: listing administration, promotions, Pro analytics)
  9. Legal obligations (e.g., accounting retention if applicable, dispute management)

4. Legal Bases (On what grounds)

Depending on the case, processing is based on:

  • Performance of a contract (account creation, provision of services, management of features)
  • Legitimate interest (security, fraud prevention, service improvement, audience measurement within certain limits)
  • Your consent (specifically for precise location, certain trackers/cookies, and certain communications where required)
  • Compliance with legal obligations (e.g., retention of accounting records for paid Pro services)

5. Recipients of Data

Data is accessible to:

  • Authorized Haliago teams (support, moderation, security)

  • Our technical service providers acting on our behalf, including:

  • OVH (hosting)

  • Mailjet (emailing)

  • Google Analytics (audience measurement)

  • Stripe (payment, only for Haliago Pro services)

  • Competent authorities, if required by law (requisition, legal obligation)

Principle: Haliago does not sell your personal data.

6. Transfers Outside the European Union

Certain service providers (e.g., Google, Stripe) may process data outside the European Union.

7. Retention Periods

7.1 User Account

Account data is kept for the duration of the account's existence.

7.2 Deletion upon Request

In the event of a request for account deletion, Haliago proceeds with the deletion of data within a maximum period of 30 days, subject to:

  • legal retention obligations (e.g., accounting for paid Pro services),
  • the need to retain certain elements for security, fraud prevention, and dispute management purposes (strictly necessary durations).

7.3 Community Contributions

To preserve the integrity of the Platform, reviews, and ratings, contributions (reviews, ratings, etc.) may be anonymized rather than deleted upon deletion of an account, in accordance with the Terms of Service (ToS).

8. Cookies and Similar Technologies (Website / Audience Measurement)

On web interfaces, Haliago may use cookies/trackers, particularly for:

  • site operation,
  • audience measurement (Google Analytics),
  • security.

When required by regulation, your consent is solicited via a cookie management mechanism. You can also configure your browser to limit or block certain cookies.

On mobile, certain technical identifiers and audience measurement events may be used in accordance with your operating system settings and the permissions you grant.

9. Security

Haliago implements reasonable technical and organizational measures to protect data against loss, unauthorized access, alteration, or disclosure, including:

  • access control,
  • separation of environments,
  • logging and monitoring,
  • flow and system security measures,
  • internal incident management procedures.

10. Your Rights

In accordance with the GDPR and applicable regulations, you have the following rights in particular:

  • Right of access
  • Right to rectification
  • Right to erasure (within the limits provided by law)
  • Right to restriction of processing
  • Right to object (particularly to certain processing based on legitimate interest)
  • Right to data portability (where applicable)
  • Right to withdraw your consent at any time (for processing based on consent)

To exercise your rights: contact@haliago.com. Proof of identity may be requested in case of reasonable doubt regarding the identity of the applicant.

You may also lodge a complaint with the competent supervisory authority, such as the CNIL (France).

11. Communications

Haliago may send you:

  • transactional communications (related to the account, security, service operation),
  • marketing communications (where applicable), with the possibility of unsubscribing via the provided link or available settings.

12. Minor Users

The Platform is not specifically intended for minors. If you are a minor, use of the Platform must be carried out in accordance with applicable laws and, where required, with the authorization of your legal representative.

13. Modification of the Policy

Haliago may update this Policy to reflect legal, technical, or functional changes. In the event of a substantial modification, Haliago may inform you by appropriate means (in-app notification, email, display).

14. Contact

For any questions: contact@haliago.com