Privacy Policy

HALL is operated by Technites, based in Orem, Utah. This policy explains what data we collect, how we use it, and your rights. Contact: support@thegrandhall.xyz

Account data: Email address (from signing in with Apple, Google or Discord, or the one you create an account with), username you choose, profile photo (optional), and bio. If you create an account with an email and password, your password is stored only as a one-way hash by our sign-in provider (Supabase); HALL never sees or stores the password itself.

Name and ZIP code (optional): If you add your real name or ZIP code, you choose who sees each one: only you, your friends, or everyone. People you’ve blocked, or who blocked you, never see them. HALL also uses your ZIP to show what’s near you. You can change or remove either one on your profile at any time, and both are deleted with your account.

Usage data: Debate topics you create, comments you post, votes, ratings you give and receive, queue activity, and call participation records.

Technical data: Browser type, device type, and IP address for security and abuse prevention.

Payment data: If you subscribe to HALL Pass, Stripe processes your payment. We do not store your credit card number. We receive your Stripe customer ID and subscription status.

Call data: Voice and video calls are transmitted peer-to-peer or through Cloudflare's Realtime SFU network. We store call metadata (duration, participants) but do not record calls unless a user uploads a recording.

We use your data to operate the platform and provide features you use, match you with debate opponents, calculate and display reputation scores, process HALL Pass payments, send transactional communications, and improve the platform. We do not sell your data to third parties. Free users may see ads served by Google AdSense. HALL Pass subscribers see no ads.

Public by design: Your username, reputation score, debate history, and comments are visible to other users. This is core to how HALL works.

Service providers: Supabase (database hosting), Stripe (payment processing), Cloudflare (real-time audio/video infrastructure), Vercel (app hosting), Google and Discord (authentication).

Legal requirements: We may disclose data if required by law, subpoena, or court order, or to protect the safety of users.

Direct messages between users are stored in our database. Messages are visible only to the sender and recipient. You can delete your messages at any time.

Photos you send in messages (from your library or taken with HALL’s camera) are shrunk on your device and kept in private storage that only you and the person you sent them to can open, through links that expire after an hour. HALL staff look at a photo only if the person it was sent to reports it. A reported photo is kept while HALL looks into it, and where the law requires (for example, reporting child sexual abuse material to the National Center for Missing & Exploited Children). Photos you sent are deleted when your account is deleted. HALL’s camera works only while it’s open on your screen; nothing is recorded or uploaded until you tap Use and send or post it.

Calls between friends (voice or video) go straight between your two phones through Cloudflare’s real-time relay, the same way party voice does. Voice in HALL worlds works the same way: when you turn your microphone on, people standing near you (and, from the debate stage, everyone in the room) hear you through that relay, and nothing is kept. HALL doesn’t record or store calls. HALL keeps who called whom, when, and how long it lasted, which shows as a line in your conversation (“Call · 4:32”, “Missed call”), and deletes those records with your account.

Posts and offers. What you post in Help, Health, School, Ship, Business, Play, Fitness, Faith, Humanity and Photo is public to HALL users. Offers you make on a post are visible only to you and the post's owner. Your zip code on a post is shown as the general area only if you add it.

date HALL. Your Date profile (photos, headline, age, what you're looking for) is visible only to other adults with an active Date profile. Likes and passes are private; only mutual matches are revealed, to both people. You can pause or delete your Date profile at any time.

faith HALL. Your chosen tradition is stored on your profile so the feed fits you, and notes you write on scripture verses are private to you unless you share them. Friend labels (Bud, Best friend, Business partner, Rival) are shown to the friend you labelled, unless you turn “Friends can see what I labelled them” off in Settings.

Verified. If you choose to get verified, Stripe Identity collects your ID document and selfie under its own privacy policy and tells us whether the check passed. When it passes, HALL reads the date of birth from the check once, only to work out whether you are 18 or older, and stores just that yes/no (it decides who can use random match). HALL never receives or stores the document, your address or the date of birth itself; we store the check’s status, the 18+ flag and a Stripe reference. Only Verified accounts are paid on HALL, so the check is also what lets you receive creator earnings and tips.

Your profile page. Your profile shows your name, username, bio, badges (Verified, HALL creator, your pass), your public stats and, unless you turn “Show my work” off in Settings, the videos, podcasts, writing and photos you have published. If you turn tips on and are a Verified HALL Pass member, a Tip button appears there; a tip records who tipped whom and how much (visible to the two of you and HALL).

Random match. While you wait to be matched (in friend HALL or date HALL), HALL keeps a queue entry (your account, your Verified-only preference, and when you asked); it is deleted when you are matched or leave. In date HALL the sex you give and who you say you are attracted to are stored on your date profile and used only to decide who you can be matched with; they are shown to nobody. HALL keeps a record of who was matched with whom for one day, only so the same two people are not matched twice in a row.

Friends nearby. If you turn on “Let people nearby find me”, other members can see your name, karma and an approximate distance (rounded miles) based on the zip code you entered. Your zip itself is never shown. It is off by default.

Local radio. HALL uses the rough location our hosting provider derives from your connection (country, state, city) to suggest a local radio station and “near you” defaults. It is not stored on our servers and is never tied to your account.

Video and music. Where you left off in a video is saved to your account so it follows you between devices. Creators see totals for their own videos and podcast episodes in creator HALL — views, watch and listen time, and how many signed-in people watched or listened each day — never who. (They do see who tipped, quoted, challenged or followed them, as those are things you do in the open.) Writers in news HALL see how many times each piece was read, never by whom; when you’re signed in, HALL counts how long you spend reading a member’s piece (in 15-second steps, only while the page is open and in use) so the writer can be paid for it. Podcasts linked from another host are read from that show’s public RSS feed, and their audio plays straight from the host, which sees the same request any podcast app makes. Free films, music, scriptures and games are served from HALL or from the Internet Archive; the Archive sees the same request any web visitor makes.

Content scanning (Ad Shield and AI-free). When you upload a video, photo or post, HALL’s own server reads its title, description and caption for sponsorship language, and reads the metadata stored inside the file (such as Content Credentials and the software that made it) to detect AI generation. Every uploaded video is also run through HALL’s ad scanner, on a computer HALL operates: it converts the speech to text, reads the text that appears on screen, and uses an AI model running on that same computer to find ads. The transcript and screen text are deleted when the scan finishes; HALL keeps only the start and end time of each ad it found. Nothing is sent to an outside service. The result is saved as a label on that post. Ad segments you mark in a video and content you flag are stored with your account and visible only to you and HALL moderators; only the combined result (a confirmed ad segment or a label) is shown to others. Your Ad Shield and AI-free switches are saved to your account.

Challenges, challenge votes, cheers, reposts and quotes are public, like posts: anyone can see who challenged, reposted or quoted what, and your profile shows how many challenges you have made, accepted, declined and won. Your individual vote and cheer choices are not shown to other people. To work out creator earnings, HALL records which days you use HALL (one entry per day, kept up to 13 months) and how long you watch, listen to or read creators’ work; creators see only totals, never who. Volunteer drives in help HALL: the organizer sees the names of the people who signed up (and any note they left) so they can check them in; everyone else sees only how many are coming. Hours you give are shown to you, and only as totals to anyone else. If you receive creator payouts, Stripe collects your bank and tax details; HALL stores only your Stripe account ID and payout amounts. Party screen and audio shares are relayed live through Cloudflare and are never recorded or stored by HALL.

HALL is offered in the United States, South Korea and Japan. Your data is stored and processed in the United States by the service providers below, each only for the purpose listed. If you use HALL from South Korea or Japan, you consent to this transfer when you create an account. You can refuse by not creating an account; HALL cannot run without these providers.

• Supabase (USA): account, profile and content database, file storage, sign-in.
• Vercel (USA): website hosting and rough location from your IP address (country and region only, not stored).
• Stripe (USA): payments and the Verified identity check.
• Cloudflare (USA): voice and video call relay.
• Google (USA): ads in the app (AdMob) and on the website (AdSense), and Google sign-in if you choose it.
• Apple and Discord (USA): sign-in, only if you choose them.

Retention follows Section 6: account data is deleted when you delete your account (public posts stay but are no longer linked to you), except payment records that tax law requires us to keep. To use your rights to access, correct, delete or stop processing your data, or to withdraw consent, email support@thegrandhall.xyz; we answer within 10 days. Privacy officer: Cody Offerman, Technites LLC, support@thegrandhall.xyz.

When you edit a post or comment, HALL keeps the earlier version; you and HALL’s administrators can see it. When you disassociate from something you posted, your name is removed from it for everyone, and HALL keeps a private record that you wrote it, visible only to HALL’s administrators and used only to answer legal process, enforce our Terms, or protect people from harm. If you delete your account, your posts and comments stay up without your name, and your videos, podcast shows and articles are taken off HALL. If you ask HALL to take down something you published, HALL keeps the request (your reason, and whether you said you’re under 18) so it can review it; only you and HALL’s administrators can see it. When you fund a HALL goal or a campaign, Stripe processes the payment; HALL stores the amount, what it went to, and any karma it earned, and shows only totals and funder counts publicly. Campaign payments go to the organizer’s Stripe account; HALL does not share your card details with them.

HALL does not ask for your address; the ZIP code you enter to find your officials stays on your device. When you call an official to HALL, HALL records which official, which debate (if any) and how you sent it, linked to your account; only the total number of people is shown publicly. Messages you send go from your own email, phone or social account, not through HALL. Officials’ information comes from public records.

The political questionnaire: your answers (where you stand on each statement and how much it matters to you) are political opinions, which the law treats as sensitive. They stay on your device, and matching with politicians happens on your device too. They are only stored by HALL if you tick the box to save them to your account; then only you can see them, they are never shown to anyone, never sold, and never used for ads, your feed or anything else, and you can delete them at any time from the questionnaire (closing your account deletes them too). Politicians who answer for a page they’ve claimed or a candidacy HALL approved publish their answers on purpose: those are public, with the date and the fact that they came from that politician’s verified HALL account.

To give you a ride, HALL records the pickup and drop-off you enter, the route estimate, the fare and the times of the ride. While a ride is on, the driver’s phone sends its location to HALL every few seconds so the rider can see the car coming; HALL does not track riders’ locations, and drivers’ locations are only collected while they are online. Before a driver accepts, they see only a rough area (about half a mile) and never your name. Addresses you type are looked up with Photon, an OpenStreetMap service, which receives the text you type but not who you are; maps load from OpenFreeMap. Card details go to Stripe, never to HALL.

Drivers’ license, rideshare insurance policy and its end date, registration, FBI Identity History Summary and driving record are stored privately, seen only by HALL staff who approve drivers, never shown to riders and never sold. Utah law requires HALL to keep trip records and driver records for at least five years, so these are not deleted when you close your account.

If you use “Bring your stuff to HALL”, the download you got from another app (Instagram, Facebook, X, Google, Reddit and others) is opened and read in your browser, on your device. The archive file itself is never uploaded to HALL, and HALL never logs in to other apps or collects anything from them. Messages, other people’s comments, contact and friend lists, and photos other people tagged you in are left out.

Only the items you choose are sent to HALL. Photos are resized on your device and become photo HALL posts, public like any other photo post (they are not placed in other people’s feeds) and covered by Section 5d. Text posts you bring over go to a private archive on your profile: only you can see them unless you make an item public, and you can delete any of them at any time. For each item HALL also stores which app it came from, its original date, a link to the original if the download had one, and a code that stops it being brought over twice. Deleting your account deletes your private archive.

Account data is retained until you delete your account. Public posts and comments remain after account deletion but are dissociated from your identity; videos, podcast shows and articles are taken off HALL, and their files move to private storage kept only where the law requires. Messages are deleted when your account is deleted. Call metadata is retained for platform analytics. Payment records are retained as required by law (typically 7 years).

Access: You can view your data through your profile page.

Deletion: You can delete your account at any time from Settings. This removes your profile, photos, private messages, friendships and personal data, closes your sign-in for good, cancels a HALL Pass bought on the web, and asks Stripe to redact your identity check. Before deleting, Settings tells you anything in the way (money held for a job, tickets to an upcoming event) and what deleting means for you. Posts and comments you made stay up with your name taken off, as in Dissociation below; your uploads come off HALL. Records we must keep by law (payments, and driver and trip records) stay under an account id with no name attached. A HALL Pass bought through the App Store or Google Play has to be cancelled there as well.

Dissociation: You can remove your name from topics and comments you created without deleting the content.

Portability: Contact us at support@thegrandhall.xyz to request an export of your data.

California residents have additional rights under CCPA. Contact us to exercise these rights.

HALL is not intended for children under 13. We do not knowingly collect data from children under 13. If we become aware that we have collected data from a child under 13, we will delete it promptly.

We use essential cookies and local storage for authentication and session management. Every visitor, signed in or not, gets one preference cookie, hall_radio_auto, that remembers whether radio HALL should start by itself when HALL opens (closing the player turns it off; the switch at the top of radio HALL turns it back on). It holds only that on/off choice, lasts a year, and is never used to identify or track you. We use Google AdSense on the website and Google AdMob in the HALL app to show advertisements to users without HALL Pass or a HALL Pass Jr month. These may use cookies or your device's advertising identifier to serve ads based on prior activity; in the app on iPhone you are asked first, and you can decline. When you choose to watch an ad toward HALL Pass Jr, Google tells our server your HALL user ID so we can count it. You can opt out of personalized advertising at www.aboutads.info.

We use Supabase's built-in security including row-level security policies, encrypted connections (HTTPS/TLS), and OAuth authentication. While we take reasonable measures to protect your data, no system is 100% secure.

We may update this Privacy Policy from time to time. We will notify users of material changes through the app.

Questions about your privacy? Contact us at support@thegrandhall.xyz

Technites — Orem, UT