Hallow: Prayer & Meditation

"Advertising Data: Collected and disclosed to our Service Providers, Analytics Partners, and Advertising Partners to help us market our services... Whether the user began using the App (i.e., if the App was installed, an account created, first session started, or first trial or payment started) – Hashed email address and name – Device operating system – Device ID if granted by user (opt-in for iOS, opt-out for Android) – Service Providers – Analytics Partners – Advertising Partners."

Hallow shares advertising data including hashed email, name, device OS, and device ID with advertising partners and analytics partners. On Android, device ID sharing is opt-out rather than opt-in, meaning it's collected by default.

"We do not collect precise geolocation information. We may use your IP address to infer your imprecise location in order to provide you with location-based notifications (e.g., event or content near you) or to improve our Services (e.g., analytics providers, customer support tools). – IP-address-based location information – Service Providers – Analytics Partners."

Hallow uses IP-based geolocation to deliver location-based notifications and shares this data with service providers and analytics partners, though they do not collect precise GPS location.

"When you voluntarily provide us access to the contacts in your mobile device address book to help find people you know. When you do so, Hallow will have access to the information you have saved regarding your contacts, including their email address and phone number... Specifically, we'll create a cryptographic hash value from your contacts' email addresses and phone number. Each cryptographic hash value is stored on our servers and is linked to your account."

Hallow accesses and stores hashed versions of users' entire address book (email addresses and phone numbers of all contacts) on their servers, linked to the user's account, which goes beyond the core prayer app functionality.

"These Cookies allow those third parties to receive information about your activity on our Services that is associated with your browser or device. Those third parties may use that data to serve you relevant ads on other websites you visit... We receive information about you from some of our vendors who assist us with marketing or promotional services related to how you interact with our websites, applications, products, Services, advertisements, or communications."

Third-party advertising cookies track user activity on Hallow's services and use that data to serve targeted ads on other websites, enabling cross-site tracking. Hallow also receives data from marketing vendors about user interactions across their properties.

"We may need to change this Privacy Policy from time to time, but we will alert you to any material changes by placing a notice on the Hallow website, by sending you an email and/or by some other means. Please note that if you've opted not to receive legal notice emails from us (or you haven't provided us with your email address), those legal notices will still govern your use of the Services, and you are still responsible for reading and understanding them. If you use the Services after any changes to the Privacy Policy have been posted, that means you agree to all of the changes."

Hallow can change the privacy policy at any time and treats continued use as acceptance. Users who opted out of emails or didn't provide one are still bound by changes they may never see.

"We retain Personal Data about you for as long as you have an open account with us or as otherwise necessary to provide you with our Services. In some cases we retain Personal Data for longer, if doing so is necessary to comply with our legal or business obligations, resolve disputes or collect fees owed, or is otherwise required by applicable law, rule or regulation. We may also retain information in an anonymous, de-identified, aggregated form such that information would not identify you personally."

Hallow's retention policy is open-ended — data is kept for the life of the account plus an undefined period afterward for broad reasons like 'business obligations' or 'resolving disputes,' with no specific deletion timeline.