Data deletion

App: Tayyib (com.halal.tayyib). Tayyib is built around data minimisation and has no user account.

What data is there?

The school of law (madhhab) you choose and your scan history are stored solely on your device and are never transmitted to us. You can remove that data yourself at any time, by clearing the app's data in the Android settings or by uninstalling the app.

Only the following is transmitted to our server (Cloudflare, EU): (a) reports, feedback and product contributions you send yourself, including any photos you attach to a contribution and your optional contact details; and (b) usage data, unless you have switched it off.

Usage data is switched on by default. You can switch it off at any time in the app under "Settings", in the "Usage data" section, with the switch "Send anonymous usage data". From then on nothing more is sent, and events not yet sent are discarded.

While it is on, the app sends individual events, each with the exact time it happened and a random session identifier that changes after 30 minutes without use. The events are: the app being opened and closed; finishing the intro; which screens you open; every product check you start, and how it was started (barcode, from your history, manual entry or photo text recognition); every check that finishes, with its result ("Halal", "Haram", "Doubtful" or "No data"), where the answer came from (our catalogue, Open Food Facts or photo text recognition), whether it was answered offline and how long it took; the fact that you sent a contribution, a report or feedback (never the content); failed or low-confidence text recognition; a denied camera permission; failed server requests and a missing connection (the fixed endpoint address and the status code only); and crash signatures (the type of error and one line of the call stack).

One event carries a barcode: if neither Open Food Facts nor we know a product you check, its barcode is sent so that we can see which products are missing. No other event contains a barcode or a product name, and your scan history stays on your device.

Each batch of events also carries a random identifier that the app creates and stores on your device (not a device or advertising identifier), the platform, the app version and whether a membership is active (yes or no only). The country (e.g. "DE") is derived from the connection; your IP address is not stored. For each identifier, our server keeps a record of when it was first and last seen, with the platform, app version, membership status and country. This data is pseudonymous, not anonymous: the identifier does not tell us who you are, but it links all the events from your installation together.

Requesting deletion

Usage and local data, in the app: open "Settings", tap "Delete my data" in the "Usage data" section and confirm. The app waits for any current event upload, then asks our server to erase the usage events and record under your identifier. It clears unsent events, local scan history and photos, and saved contribution drafts with their photos. The old identifier is forgotten; a new one is created only if usage data remains enabled and a later event needs to be sent. This also works when usage data has been switched off. If server deletion fails, the app reports failure so you can retry; local data has still been cleared. Turning usage data off stops future collection but does not erase events already sent. Daily totals contain numbers without an identifier and are unaffected. Only your device knows its identifier, so please use the in-app button to erase usage events. For reports and contributions already sent, use the email request below.

Reports, feedback and contributions, by email: to have reports, feedback or product contributions you sent deleted, together with the photos attached to a contribution and the contact details you entered, send an email to [email protected] with the subject "Data deletion". To help us find them, tell us roughly when you sent them and, if you can, the product or barcode concerned or the contact email you entered. We delete the data concerned within one month and confirm the deletion to you.

Automatic deletion

Even without a request, reports, feedback and product contributions are deleted automatically after 12 months at the latest. The one exception is a contribution we accept: it becomes part of our product catalogue and is kept for as long as the product is listed there, but your contact details are removed from it when we accept it. Photos attached to a contribution are deleted after 180 days at the latest unless we accept the contribution; the photos of an accepted contribution are kept with it. Individual usage events are deleted after 90 days. The daily totals formed from them hold only numbers and no identifier, and are kept. The record for an identifier is deleted after 24 months without use. Reports and contributions we delete in the dashboard are removed permanently after 30 days, photos included.