Privacy Policy

Effective September 30, 2026. This version replaces the policy dated January 29, 2025.

This Privacy Policy explains how SwiftByte LLC (“SwiftByte,” “we,” “us,” or “our”) handles information in connection with the Halls app for iPhone, iPad, Mac and Android (the “App”) and the website at swiftbyte.app (the “Site”). If you have questions, email support@swiftbyte.app.

1. Information we collect

Collected automatically through Google Analytics for Firebase

The App uses Google Analytics for Firebase, a service provided by Google LLC, to help us understand how the App is used. When you use the App, Firebase automatically collects:

• an app instance identifier that Firebase generates for your installation of the App;
• device and app information, such as device model, operating system version, App version, language and screen resolution;
• approximate location at the country, region or city level, which Google derives from your IP address (the App does not send your precise location to Firebase);
• usage information, such as first open, sessions, engagement time and the screens you view; and
• in-app purchase information, such as the product purchased, its price and currency, and the date of the transaction.

The App does not use Apple’s advertising identifier (IDFA), does not ask for permission to track you, and does not attach your name, email address or any other directly identifying information to analytics data. For details, see Privacy and security in Firebase and How Google uses information from sites or apps that use its services.

Information you choose to send us

If you email us, we receive your email address and whatever you include in your message, and we use it only to respond to you.

Payments

Purchases, including the optional Pro subscription, are processed by Apple or Google. We do not receive your name, payment card or billing details.

The Site

The Site does not use cookies, analytics or advertising scripts. It is hosted on GitHub Pages, and GitHub may log technical information such as IP addresses to operate and secure its service, as described in the GitHub Privacy Statement.

2. Information that stays on your device

The following features work on your device and do not send information to us:

• Meals and settings. Your saved meals, nutrition history, favorites, saved events and preferences are stored on your device and shared only with the Halls widget on that device.
• Apple Health. If you choose to, the App writes the calories, protein, carbohydrates and fat from meals you log to Apple Health. The App does not read Health data. Health data is never sent to us or to any third party, and is never used for advertising or analytics.
• Location. With your permission, and only while you’re using the App, your location shows your position on the CATA bus map and helps find nearby restaurants through Apple Maps. Your location is not sent to us or to Firebase.
• Notifications. Meal reminders are scheduled on your device. We don’t use push notifications.
• BTChat. BTChat sends messages directly between nearby devices over Bluetooth. Messages don’t pass through or get stored on our servers.

To show menus, buses and events, the App downloads public information from services such as university dining services, CATA and TransLoc, Penn State event calendars and Apple Weather. These requests don’t include any identifier for you, but, like any internet request, the service you connect to receives your device’s IP address.

3. How we use information

We use the information described above only to:

• understand which features are used so we can maintain and improve the App;
• measure purchases of the optional Pro subscription;
• detect and fix problems; and
• respond to messages you send us.

Where the EU or UK General Data Protection Regulation applies, we rely on our legitimate interest in operating and improving the App for analytics, and on your request when we respond to your messages.

4. How information is shared

We share information only with Google, which processes analytics data on our behalf as described above. We may also disclose information if required by law, to protect the rights and safety of our users or others, or as part of a merger, acquisition or sale of our business. We do not sell personal information or share it for cross-context behavioral advertising.

5. How long we keep information

Google Analytics keeps event-level data for the retention period set in our Firebase project, which is no longer than 14 months, after which it is deleted. Aggregated reports that can’t identify you may be kept longer. We keep support emails for as long as needed to help you and then delete them.

6. Your choices and rights

You can control location, Apple Health and notification access at any time in your device’s settings. Deleting the App removes the information stored on your device and resets the Firebase app instance identifier.

Depending on where you live, including California, Virginia and other U.S. states, the European Economic Area and the United Kingdom, you may have the right to request access to, correction of or deletion of personal information about you, to object to or restrict certain processing, and not to be discriminated against for exercising these rights. To make a request, email support@swiftbyte.app. Because we don’t have accounts, we may ask for information that helps us locate the relevant data. We will respond within the time required by applicable law. You may also have the right to complain to your local data protection authority.

Some browsers send “Do Not Track” signals. Because we don’t track you across other websites or apps, these signals don’t change how the App or the Site behaves.

7. Children

Halls is intended for college students and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided information to us, contact us and we will delete it.

8. Security and international transfers

We use reasonable measures to protect information, and Google applies its own security measures to analytics data. No method of transmission or storage is completely secure. Analytics data is processed by Google in the United States and other countries where Google operates, under Google’s data protection terms.

9. Changes to this policy

We may update this policy as the App changes. We will post the updated policy on this page and change the effective date above. If a change materially affects how we handle your information, we will give notice in the App or on the Site before it takes effect.

10. Contact us

SwiftByte LLC
support@swiftbyte.app