Privacy Policy

Last updated: April 3, 2026

Version 1.0

Consent: By creating a Halley account, you consent to the collection and processing of your personal data as described in this notice. You may withdraw your consent at any time as described in Section 6.

Halley (“we”, “us”, or “our”) operates the Halley mobile application (the “App”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App, in compliance with the Malaysia Personal Data Protection Act 2010 (PDPA).

1. Information We Collect

We collect the following types of information:

Account Information: Email address, display name, date of birth, gender, and preferences when you create an account.
Profile Information: Photos, bio, interests, city, and other details you choose to provide.
Location Data: With your permission, we collect your approximate location to show you nearby users.
Usage Data: Swipe history, matches, messages, and app interactions.
Device Information: Device type, operating system, and push notification tokens.

2. How We Use Your Information

We use your information to:

Provide and maintain the App
Match you with other users based on your preferences
Send push notifications for matches and messages
Display relevant advertisements (rewarded video ads)
Improve our services and user experience
Ensure safety and prevent fraud or abuse

3. How We Share Your Information

We do not sell your personal information. We may share your information with:

Other Users: Your profile information (name, photos, bio, interests) is visible to other users of the App.
Service Providers: We use third-party services as described in the Data Processors table below.
Legal Requirements: If required by law or to protect our rights.

Data Processors

We engage the following third-party data processors to operate the App:

Processor	Purpose	Data Processed
Supabase	Authentication & database	Account data, profile data, messages, matches
AWS S3 / CloudFront	Media storage & delivery	Profile photos
Firebase (Google)	Push notifications	Device tokens, notification content
Google AdMob	Advertising	Device identifiers, ad interaction data
Sentry	Crash reporting & error tracking	Device info, error logs, app state

4. Advertising

Halley is a free app supported by advertising. We use Google AdMob to serve rewarded video ads. AdMob may collect device identifiers and usage data to serve relevant ads. You can opt out of personalised advertising in your device settings.

5. Data Storage, Security, and Cross-Border Transfers

Your data is stored on secure servers hosted in the Southeast Asia region (Singapore). We use industry-standard encryption (HTTPS/TLS) for data in transit and at rest. Profile photos are stored on AWS S3 and served through CloudFront CDN with signed URLs for access control.

Cross-border transfers: Your personal data may be transferred to and processed in Singapore, where our primary servers are located. Some data processors (Firebase, AdMob, Sentry) may process data in other jurisdictions. We ensure that adequate safeguards are in place, including contractual obligations with our data processors, to protect your personal data in accordance with the PDPA. By using the App, you consent to the transfer of your data to these jurisdictions.

6. Your Rights

Under the Malaysia PDPA and our commitment to transparency, you have the right to:

Access your personal data through your profile settings
Update your information at any time
Delete your account and associated data from the App settings
Opt out of push notifications through your device settings
Withdraw consent for the processing of your personal data at any time by deleting your account or contacting us at privacy@halley.love. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Restrict processing of your personal data in certain circumstances by contacting us. We will inform you before any restriction is lifted.

7. Data Retention

We retain your data as long as your account is active. When you delete your account, we remove your profile and personal data within 30 days. Some data may be retained longer for legal or safety purposes (e.g., reports of abuse).

8. Children's Privacy

Halley is intended for users aged 18 and above. We do not knowingly collect information from anyone under 18. All users must provide their date of birth during registration, and the App verifies that users meet the minimum age requirement. If we become aware that we have collected data from someone under 18, we will delete it immediately.

9. Malaysia Personal Data Protection Act (PDPA)

We comply with the Malaysia Personal Data Protection Act 2010 (PDPA). Your personal data is processed in accordance with the PDPA principles, including the General Principle, Notice and Choice Principle, Disclosure Principle, Security Principle, Retention Principle, Data Integrity Principle, and Access Principle.

If you are unsatisfied with our handling of your personal data, you have the right to lodge a complaint with the Jabatan Perlindungan Data Peribadi (Personal Data Protection Department) under the Ministry of Communications and Digital:

Website: www.pdp.gov.my
Phone: 03-8000 8000
Email: aduan@pdp.gov.my

10. Cookies

Our website and App may use cookies and similar technologies. For full details, please see our Cookie Policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the “Last updated” date.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

Email: privacy@halley.love