Privacy Policy

Last updated: August 21, 2026

Haullo ("Haullo," "we," "us," or "our") is operated by Hauler LLC. This Privacy Policy explains what information we collect through the Haullo mobile app and website (the "Service"), how we use it, and the choices you have. Haullo is a Halloween game designed to be safe for children and families.

1. Information we collect

We collect only what we need to run the game.

Account information

• Username and password. Children create an account with a username and password (no email address required). For sign-in, an internal account identifier is generated automatically.
• Sign-in with Apple / Google (adults). Adults may sign in with Apple or Google, which provides us a basic account identifier and, depending on your settings, an email address.
• Parent email (for younger users). When a user indicates they are under 13, we collect a parent or guardian's email address to obtain verifiable parental consent (see Section 4).
• Profile details. Display name, chosen costume avatar, school and grade (optional), and date of birth, which we use to determine whether an account belongs to a child, a teen, or an adult.

Gameplay content

• Photos and videos you take or upload (for example, photos of your candy haul).
• Candy haul counts and scores derived from your photos.
• Badges, points, leaderboard standing, and group/friend connections.
• Map notes, house tags, comments, and reactions you post.

Purchase information

• If you buy coins — the app's single in-game currency, used to unlock optional extras — your payment is processed by the Apple App Store or Google Play. We receive a record that a purchase occurred — such as a transaction identifier, the item purchased, and purchase date — so we can deliver what you bought and handle refunds. We do not receive or store your full payment card number.

Location information

• Approximate or precise location, only as described in Section 5 and only when permitted by your device settings and in-app toggles.

Device & usage information

• Basic device and app information — such as app version, device brand and model, and operating system version — used to operate the Service and, where you have opted in to improving candy recognition, to understand which devices and lighting conditions produce recognition errors. The app contains no crash-reporting, analytics, or advertising SDK of any kind.
• Website analytics. On our website only — never in the app — we use a privacy-focused analytics tool that counts page views without cookies. It does not identify you and does not track you across other sites.

2. How we use information

• To create and manage your account and profile.
• To run core gameplay: scoring candy hauls, awarding badges and points, and building leaderboards.
• To power social features you choose to use, like friends, groups, the neighborhood map, and reactions.
• To process purchases and handle refunds (see Section 7 and our Terms of Service).
• To screen content for safety and enforce our rules (see Section 6).
• To obtain and manage verifiable parental consent for children under 13.
• To respond to support requests and keep the Service secure and working.

We do not sell personal information, and we do not use children's personal information for behavioral advertising.

3. How we share information

We share information only in limited ways:

• With other users according to your privacy settings (Anonymous, Friends-Only, or Visible). What you post to the map, feed, or leaderboard may be visible to others in your age group as your settings allow.
• With service providers who help us run the Service — for example, our backend/hosting provider, our parental-consent verification provider, our AI content-moderation and candy-scoring providers, and the app-store payment processors (Apple, Google) that handle purchases. They process data on our behalf under contract.
• With a linked parent or guardian who is connected to a child's account.
• For legal reasons, if required by law or to protect the safety of users.
• In a business transfer, if Hauler LLC is involved in a merger, acquisition, or sale of assets (subject to this policy).

4. Children's privacy

Haullo is intended to be used by children with appropriate protections. We comply with the U.S. Children's Online Privacy Protection Act (COPPA) and design the app to minimize data collection from children.

Verifiable parental consent

When a user indicates they are under 13, the account remains inactive until a verified parent or guardian provides consent through our consent provider. If consent is not completed, the child cannot use the Service. We collect the parent's email solely to facilitate this consent and related communications.

Data minimization for children

• Children sign up with a username and password — no email address is required from the child.
• For children under 13, we collect no location data from the child's device at all — not in the foreground, and not in the background.
• Sensitive settings are protected behind a parent-set PIN.
• Children's accounts default to the most private settings.

Optional: improving candy recognition

Using a child's candy-haul photos to train and improve our candy-recognition technology is optional, off by default, and occurs only if the child's verified parent or guardian opts in (see Section 6). The parent can decline, and can withdraw at any time; declining or withdrawing does not affect the child's ability to play. Photos kept under this option are deleted no later than 24 months after the photo is taken, and sooner once that training is complete (see Section 8).

No cross-app tracking or targeted ads for children

We do not use persistent identifiers to track children across other apps or websites, and we do not use children's personal information to serve them targeted or behavioral advertising.

Parent & guardian rights

If you are a parent or guardian, you may at any time:

• Review the personal information we have collected from your child;
• Request that we delete your child's personal information;
• Refuse to allow further collection or use of your child's information;
• Manage or disable in-app purchases for the child's account; and
• Unlink or close the child's account.

To exercise these rights, use the in-app controls or contact us at privacy@haullo.app. We may need to verify that you are the child's parent or guardian before acting.

5. Location data

We minimize location data and tier it by age:

• Children under 13: we collect no location from the child's device at all — not in the foreground, not in the background, and not during the Halloween event window. A child's house count is derived from the location trail of their linked parent or guardian instead.
• Teens and adults (13+): with your permission, we collect precise location. During the Halloween event window, this includes periodic background location points (recorded roughly every couple of minutes even while the app is closed) so we can count the houses you visit for fair scoring and to help detect and prevent score fraud. We record this only during the event window and only while location permission is granted.
• We never show your location to other users. Haullo does not display users to one another on a map, and we do not share your location with other users — not with friends, not with anyone. The neighborhood map shows places: houses that users have tagged, and the notes and photos left for them. Earlier versions of the app offered an opt-in friend map; it has been removed, and any location previously shared through it has been deleted.
• Location is used on your own device and for your own account only: to center the neighborhood map on where you are, to tell you whether a Gauntlet is running nearby, to count the houses you visit, and to verify a candy haul — and only as your device permissions and in-app toggles allow.

You can turn location permissions off at any time in your device settings.

6. Content & AI processing

• Candy scoring. Photos of your candy haul are processed by an AI vision service to count candy and score your run.
• Safety moderation. Photos and videos are automatically screened by AI before they appear, to detect inappropriate content. Users can also report or block content and other users; content with multiple reports may be hidden automatically.
• Improving candy recognition (optional). With your explicit opt-in — and, for a child under 13, the verified consent of their parent or guardian — we retain photos of candy hauls and the counts you confirm, and use them solely to train and improve our candy-recognition technology. This is entirely optional: you may decline, and you may withdraw at any time in Settings. Declining or withdrawing does not affect gameplay. Photos retained for this purpose are used only to improve recognition, are not shown publicly, and are not sold. We keep them for no longer than 24 months from the day the photo was taken, and we delete them sooner once that training is complete (see Section 8). If you withdraw or delete your account, your photos are removed from this use.

We use these providers to process content on our behalf for these specific purposes.

7. Your choices & rights

Privacy settings. Choose Anonymous, Friends-Only, or Visible, and control search visibility in the app.

Access & deletion. You can delete your account and associated data in the app (see Delete Your Data) or by contacting us.

U.S. state privacy rights. Depending on the U.S. state you live in — including California and a growing number of other states — you may have the right to:

• Know and access the personal information we have collected about you;
• Correct inaccurate personal information;
• Delete your personal information;
• Receive a portable copy of your personal information; and
• Direct that we not sell or "share" your personal information.

We do not sell personal information, and we do not "share" it for cross-context behavioral advertising. We especially do not sell or share the personal information of any user under 16. You will not be discriminated against for exercising any of these rights. To make a request, contact privacy@haullo.app; we may need to verify your identity, or a parent/guardian's authority, before we act.

EU/UK rights. If you are in the EU or UK, you may have additional rights to access, correct, delete, or port your data, and to object to or restrict certain processing. Contact us to exercise these rights.

8. Data retention & deletion

We keep personal information only as long as we need it for the purpose we collected it for. We do not keep it indefinitely. This is our retention schedule:

• Candy-haul photos — not opted in to improving recognition. We keep them to verify and score your run, to settle scoring disputes, and to detect cheating. They are deleted no later than 90 days after the photo is taken.
• Candy-haul photos — opted in to improving recognition (Section 6). We keep them to train and improve our candy-recognition technology. They are deleted no later than 24 months after the photo is taken, and sooner once that training is complete.
• The candy labels you confirm (for example, confirming that a piece is a particular candy) are kept without the photo after the photo is deleted, so that we can keep improving recognition without keeping your pictures.
• Account, profile, and gameplay information (username, avatar, counts, scores, badges, friends, posts) is kept while your account exists, so the game can show you your own history.
• Consent records — including verifiable parental consent and your choices under Section 6 — are kept for as long as we need them to show that we obtained consent, as the law requires.

When you delete your account, we remove your associated personal data from our systems, including any candy-haul photos still being kept under the schedule above. Note that deleted usernames are retired and cannot be reused. See Delete Your Data for how to start a deletion.

9. Security

We use reasonable technical and organizational measures to protect personal information, including secured backend storage and access controls. No system is perfectly secure, but we work to protect your data and respond promptly to issues.

10. Changes & contact

We may update this policy from time to time. If we make material changes, we will update the "Last updated" date and, where appropriate, provide additional notice. For privacy questions or to exercise your rights, contact:

Hauler LLC
Privacy: privacy@haullo.app
Support: support@haullo.app