Privacy policy
Halo is a memory app: you send it things you want to remember, and it quizzes you on them. What you save is yours, not ours. This policy explains what we collect and why, who helps us process it, and how you can see or delete it. Halo is operated by Matthew Caminiti ("we", "us").
The short version
- We collect only what Halo needs to work: your email, what you capture, and your review history.
- To write your questions, what you capture is sent to an AI model through OpenRouter. We only allow AI providers that don't keep it or train on it.
- No ads, no tracking, no analytics, and we never sell your data.
- You can delete anything you've captured, or your whole account, from inside the app at any time.
What we collect and why
Your account
Your email address, so you can sign in. Halo has no passwords: we email you a six-digit code, which expires after five minutes. For security, each signed-in session records the IP address and device type it was created from, and we keep these while the session is active.
What you capture
The notes, quotes, and photos you save, along with any title or "what do you want to remember?" goal you add, and the questions and key points Halo generates from them. We store these on our servers so you can review them and use Halo on more than one device. We keep them until you delete them or your account.
Your reviews and settings
Each time you review, we record whether you remembered it and when, and use that to schedule the next review. We also store your preferences (reminders, quiet hours, how long to keep things) and your time zone, so reminders arrive at sensible local times. A copy of your upcoming reviews is kept on your device so they work offline, and is removed when you sign out.
Notifications
If you allow notifications, we store your device's push token so we can send at most one reminder a day, and only on days something is due.
Subscriptions
Halo Pro is sold through the App Store. Apple handles payment, so we never see your card or billing details. We receive your subscription status — which plan, and when it renews or ends — and count how many captures you've used each month so we can apply your plan's allowance.
Emails you send us
If you email us for help, we keep the conversation so we can follow up.
What we don't collect
No analytics or advertising SDKs, no advertising identifiers, no location, no contacts. We don't track you across other companies' apps or websites. Halo only sees the photos you choose to capture, never the rest of your photo library.
How AI processing works
When you capture something, its text or photo is sent to an AI model, which picks out what's worth remembering and writes questions about it. Before your first capture, the app asks your permission to do this.
- We send requests through OpenRouter, which routes them to an AI model provider. OpenRouter doesn't store the content of our requests. It keeps only metadata such as the size and duration of each request.
- We require every request to go to a provider with a zero data retention policy, and exclude providers that collect data. That means the AI provider doesn't store what you send once it has answered, and doesn't use it to train models.
- AI-generated questions can be wrong. You can edit your goal and regenerate, or delete anything that isn't useful.
You can withdraw consent at any time: stop capturing, and delete what you've already captured or your whole account.
Who processes your data for us
We share data with the following service providers only so they can run a part of Halo for us. We choose providers whose terms bind them to protect it at least as well as this policy does, and to use it only to provide their service to us.
| Provider | What they do | What they receive |
|---|---|---|
| Fly.io | Hosts our servers, database, and uploaded photos (United States) | Everything described above |
| OpenRouter and the AI provider it routes to | Generates questions; reads photos | The text or photo you capture, and your goal for it |
| Resend | Sends sign-in emails | Your email address and sign-in code |
| Expo, then Apple Push Notification service | Delivers reminders | Your push token and the reminder text |
| RevenueCat | Manages subscriptions | Your Halo account ID (not your email) and your App Store purchase records |
| Apple | Sells subscriptions through the App Store | Governed by Apple's own privacy policy |
When we access or disclose your information
Nobody at Halo reads what you capture, except with your permission (for example, to help with a support request you've sent us) or when an automated process breaks and needs a person to fix it. We'll disclose information if the law requires it, such as a valid subpoena or court order, and we'll tell you first unless we're legally prohibited from doing so. If Halo is ever acquired or merged with another company, we'll notify you before your information becomes subject to a different privacy policy.
Your rights
Wherever you live, you can:
- See and correct your data: everything you've captured is visible and editable in the app.
- Delete it: delete a capture from its screen, or your whole account from Settings.
- Get a copy of your data, or ask what we hold about you, by emailing us.
- Object to or restrict how we process your data, by emailing us.
- Complain to your local data protection authority.
Email support@tech.halo-app.xyz for anything you can't do in the app. We'll reply within 30 days, and may ask you to confirm the request from the email address on your account. We won't treat you any differently for exercising these rights.
Deletion and retention
We keep your data while your account exists. Deleting a capture removes it, its questions, its review history, and its photo right away. Deleting your account (Settings → Delete account) removes your account and everything in it right away. Copies in our database backups are overwritten within 30 days. Our server logs, which can include your account ID and IP address, are kept for no more than 30 days for security and debugging. Deleting your account doesn't cancel an App Store subscription; cancel it in your Apple Account settings.
Security
Everything travels over encrypted connections (TLS), and our server's storage is encrypted at rest. On your phone, your sign-in session is kept in the iOS Keychain.
Children
Halo isn't intended for children under 13, and we don't knowingly collect their data. If you believe a child has given us information, contact us and we'll delete it.
Where your data is processed
Our servers are in the United States. AI providers that process your captures may be located in the United States or other countries. By using Halo, you understand your information will be processed in those places, under the safeguards described above.
Changes and questions
If we change this policy materially, we'll update the date above and let you know in the app. Questions or concerns? Email us at support@tech.halo-app.xyz.