Last updated: August 2026
Hauly is an organising app, not a shopping or advertising platform. We collect only what is needed to save your collection and let you connect with friends. We do not sell your data, show you ads, or share your information with third parties for marketing.
Hauly is a mobile app for organising your personal beauty collection. This policy describes how we handle your information when you use the app.
If you have questions, email us at haulyapp@outlook.com.
Account information
Your collection
Social features (Circle)
What we do not collect
🚫 Your real name
🚫 Your location or GPS data
🚫 Payment information (the app is free; there are no purchases)
🚫 Your phone number
🚫 Any data for advertising or profiling purposes
We do not use your data to train machine-learning models, build advertising profiles, or sell insights to third parties.
We use the following infrastructure providers to operate the app:
Supabase — provides our database, authentication, and file storage. Your collection data and photos are stored on Supabase servers. Supabase is compliant with GDPR and stores data in the EU and US regions. See Supabase's privacy policy.
Open Beauty Facts — an open, community-maintained product database used for barcode lookups. When you scan a barcode, the barcode number is sent to Open Beauty Facts to retrieve product information. No personal information is sent. See Open Beauty Facts' privacy policy.
No other third-party analytics, advertising SDKs, or tracking libraries are included in the app.
When you add a photo to a product, it is stored on your device. If you use iCloud, it syncs to your other devices through your own iCloud account using Apple's CloudKit. We cannot see those photos and they are never uploaded to our servers.
Sharing is the one exception. If you choose to attach a product to a Circle post, a small compressed copy of that product's photo is uploaded with the post so the friends you shared it with can see it. Your original photo stays on your device and in your iCloud. Deleting the post deletes the shared copy with it.
Hauly can send you reminders about expiring products and items that are almost finished. These notifications are scheduled entirely on your device using iOS's local notification system. No data is sent to our servers to deliver them. You can turn them off at any time in the app's Profile tab or in iOS Settings.
Your data is kept for as long as you have an account. If you delete a product, it is removed from our database. If you delete your account, all associated data — including your collection, photos, posts, and friend connections — is permanently deleted within 30 days.
You can delete your account at any time from inside the app: open the Haul tab, tap the profile avatar in the top-left, then scroll to the bottom and tap Delete Account. This removes your account and its server-side data straight away — no email or support request is needed. If you would rather we did it for you, or you can no longer sign in, email haulyapp@outlook.com and we will delete the account and confirm by email.
Depending on where you live, you may have the right to:
To exercise any of these rights, email haulyapp@outlook.com. We will respond within 30 days.
Australian users: if you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
UK / EU users: you may also lodge a complaint with your local data protection authority (ICO in the UK; your national DPA in the EU).
When you use the barcode scanner, the barcode number is sent to Open Beauty Facts to retrieve product information automatically. No personal information is transmitted. No decisions that affect your rights or access to the app are made automatically — all results are presented for you to review and confirm before anything is saved.
Hauly is not directed at children under 15. Under the Australian Privacy Act 1988 (as amended by the Privacy and Other Legislation Amendment Act 2024), we treat users under 15 as children and do not knowingly collect their personal information without verified parental consent. If you believe a child under 15 has created an account, please contact us at haulyapp@outlook.com and we will delete the account and all associated data promptly.
All data is transmitted over encrypted HTTPS connections. Passwords are never stored — authentication uses a secure one-time PIN sent to your email. Photos and collection data are stored in access-controlled storage. While no system is perfectly secure, we take reasonable technical measures to protect your information.
If we make material changes to this policy, we will update the "Last updated" date at the top of this page. Continued use of the app after changes are posted constitutes acceptance of the updated policy. For significant changes, we will notify you via the app or email.