Privacy policy

BALFOUR TOWN HALL SOCIETY INCORPORATED is responsible for Balfour Hallbook on Android. This policy applies only to version 1.0.0 of the app and describes its offline operation. It does not govern another organization's website, a hall booking process, an event organizer's separate records or services reached outside the app. This policy is effective from 10 August 2026.

Balfour Hallbook is designed for adults preparing or supporting a community-hall gathering, including authorized coordinators, hosts, caretakers, volunteers and parents or guardians acting in an adult role. It is not designed for unsupervised children. When young people attend a gathering, the responsible organization and authorized adults remain responsible for consent, supervision, safeguarding and the suitability of every activity.

The app provides general, offline preparation prompts for arrival, room arrangement, welcome, access, hospitality, weather adjustments, handoff and close-down. Its floor plans and gathering scenes are illustrative rather than records of the actual hall. The app is not a booking, payment, availability, capacity, compliance, certification, emergency-response or building-management service. Current venue instructions always take priority.

Version 1.0.0 does not collect or transmit personal data or device data. It has no Internet permission, server connection or remote database. It does not collect names, contact details, identifiers, precise or approximate location, photos, audio, messages, attendance, bookings, payment information, health information, accessibility profiles, food allergies, incident details or advertising identifiers.

The app may store a small set of interface preferences on the device: whether the welcome explanation has been completed, the last opened chapter, the selected reading size and the reduce-motion setting. These preferences are not sent off the device and are not used to identify a person, measure participation or build a profile.

Checklist marks, room-setting choices, weather selections, access ideas, handoff tiles and close-down segments are intended to remain only in memory during the current app session. The app provides no free-text field and is not designed to store participant names, youth records, disability details, medical information, allergies, safeguarding concerns, maintenance reports, incidents or emergency notes. Do not use screenshots of the app to create sensitive records.

The app requests no Internet, location, camera, microphone, contacts, calendar, notification, storage, Bluetooth, phone, SMS, activity-recognition or other dangerous Android permission. The final permission list must be rechecked if a later version adds functionality.

Balfour Hallbook has no account, login, membership profile, cloud identity or password. Account deletion is therefore not applicable. Clearing local preferences, clearing Android app storage or uninstalling the app removes the state controlled by this version.

Version 1.0.0 contains no advertising, targeted advertising, analytics, attribution, tracking, telemetry, crash-reporting service, remote configuration, social SDK, payment SDK or third-party data-collection SDK. It does not create an advertising profile or measure engagement for marketing.

Because the app does not collect or transmit personal data, it does not share, disclose, rent or sell personal data to the publisher, advertisers, data brokers or other organizations. A separate event organizer may handle information outside this app under its own responsibilities and notices.

The Android app works without a network connection and contains no WebView. Version 1.0.0 does not open a browser, initiate an email or phone call, upload a report, export a file, share content or connect to a booking service. Source names and addresses are displayed only as reference text. Any action taken outside the app is controlled by the user and the external service involved.

Session selections are not designed for durable retention and normally disappear when the app process ends or its session is reset. The small interface preferences described in section 5 remain until the user resets them, clears app storage or uninstalls the app. There is no server-side retention because no information is transmitted to a server.

Users can erase local preferences with the confirmed reset control in About and Controls, through Android's clear-storage control or by uninstalling the app. Android cloud backup and device-to-device transfer are disabled for this release, so the app is not designed to copy its preferences to another device. The app cannot delete records maintained independently by a venue, organizer or other service.

The app reduces privacy risk by avoiding network access, accounts, free text, sensitive records, third-party SDKs and unnecessary permissions. Local preference storage remains subject to the security of the Android device and operating system. No software can guarantee absolute security, and the app should not be used as a secure repository for confidential, incident, health or participant information.

The interface addresses adults and does not knowingly collect data from children. It offers no child account, public profile, chat, direct messaging, social feed, follower system, location sharing or behavioral reward loop. Images involving young people are illustrative community-gathering context. Adults must follow current safeguarding requirements and approved reporting pathways outside the app; the app cannot receive or respond to a concern.

Opening, room, food, access, weather and close-down prompts are general education only. They are not the hall's actual floor plan, evacuation procedure, capacity, accessibility inventory or food-safety plan and do not establish legal compliance. Follow posted instructions and authorized venue directions, keep actual escape routes clear and use local emergency services for immediate danger. Confirm food obligations with New Zealand Food Safety and the relevant council, and seek qualified building, fire, access, health or legal advice when required.

If app behavior changes, the policy, public support pages, store listing and Google Play declarations should be updated together before the changed version is released. The effective date and version identify the applicable notice. Users may choose not to mark any session prompt, may reset local preferences at any time and may stop using or uninstall the app.

Privacy questions about Balfour Hallbook may be sent by post to: BALFOUR TOWN HALL SOCIETY INCORPORATED, 1332 Lumsden Riversdale Highway, RD 1, Balfour 9779, New Zealand. Do not send urgent safety reports, participant records, health details or safeguarding concerns to the app. Use the appropriate current external channel instead.