Privacy Policy

What we collect

When you create an account, we collect your email address and a hashed version of your password (we never store it in plain text). If you sign in with Google, we receive your email address and public profile name from Google.

When you save things to Halo, we store the content you share: screenshots, photos, voice notes, links, forwarded messages, and PDFs. We also store metadata about each save, things like when it was added and what format it is.

We collect basic usage information: which features you use, how often you save things, and whether the product is working correctly. We collect this to keep the service running well, not to build a profile of you. We do not use third-party analytics trackers that follow you across other sites.

If you contact us by email, we keep that email so we can respond and, if useful, refer to it later if the issue comes up again.

How we use it

We use your account information (email, name) to let you sign in, to send you emails you have asked for (like a password reset), and to contact you about important changes to the service.

We use your saved content exclusively to provide recall for you. Halo reads your saves, extracts text and metadata, builds connections between them, and makes all of it searchable and retrievable. That processing happens on our infrastructure, and the output is stored in your account, accessible only to you.

We use aggregate, anonymous usage patterns, things like which features are used the most, to decide what to build next. This is stripped of any connection to individual accounts.

What we never do

We do not sell your personal information or your saved content to anyone, ever.

We do not use your saves to build an advertising profile or show you targeted ads. Halo has no ad business. The only way we make money is through your subscription.

We do not train machine learning models on your saves without your explicit opt-in consent. Your pile is your pile.

We do not share your saves or your account data with third parties except in the narrow circumstances listed in the "Sharing" section below.

Your saved content and recall

Everything you save to Halo is private to your account by default. Nothing is visible to other users. Nothing is publicly indexed. When you ask Halo a question, only your own saves are searched.

To power recall, your saves are processed by our pipeline: OCR on images, transcription for voice, content extraction for links. This processing happens in infrastructure we control. We use third-party AI APIs to perform some of this work (for example, transcription and recall inference). Those providers process data on our behalf under data processing agreements that prohibit them from using your content for their own purposes.

Sharing

We share your information only in these situations:

• Service providers: Companies that help us run the service, such as cloud infrastructure providers, transactional email delivery, and AI processing APIs. They act on our instructions and are not permitted to use your data for their own purposes.
• Legal requirements: If we receive a valid court order, subpoena, or other legal process requiring disclosure, we will comply and, where permitted, notify you before doing so.
• Business transfer: If Halo Inc. is acquired or merges with another company, your information may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.
• Your consent: In any other case, only with your explicit permission.

Data retention

We keep your account and saves for as long as you use Halo. When you delete something, it is removed promptly from production systems. Backups may retain deleted data for up to 30 days before they are cycled out.

When you delete your account, we delete your saves and account data within 30 days. Some anonymized aggregate statistics (not tied to your account or email) may be retained for longer.

Your rights and controls

You can export everything you have saved at any time from your data page. The export is a complete JSON file of your account and all your saves.

You can delete individual saves from within the app. You can delete your entire pile, or close your account entirely, from your data page.

Depending on where you live, you may have additional rights under local law, such as the right to access, correct, or restrict processing of your personal information. To exercise any of these rights, email us at hello@gethalo.tech and we will respond within 30 days.

Security

Passwords are hashed with bcrypt before storage. Data in transit is encrypted with TLS. Data at rest is encrypted at the storage layer. We keep the number of people with access to production data small, and access is logged.

No system is perfect. If you discover a security issue, please report it to support@gethalo.tech and we will investigate promptly.

Children

Halo is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If we learn we have done so, we will delete the account and its data immediately. If you believe a child under 13 has created an account, please contact us at hello@gethalo.tech.

International users

Halo Inc. is based in San Francisco, CA, and your information is processed in the United States. If you are outside the US, by using Halo you consent to your information being transferred to and processed in the US, which may have different data protection laws than your country.

If you are in the European Economic Area, the United Kingdom, or Switzerland, our legal basis for processing your personal data is: (a) performance of the contract between you and us (for account data and saves needed to run the service), (b) legitimate interests (for usage statistics and security monitoring), and (c) your consent where required. You may withdraw consent or object to processing based on legitimate interests at any time by contacting us.

Changes to this policy

When we make significant changes to this policy, we will post the updated version here and, if the changes materially affect how we use your data, email you to let you know. The date at the top of this page shows when it was last updated.

Contact

Questions about privacy? Email us at hello@gethalo.tech. By post: 45 Fremont Street, Suite 2100, San Francisco, CA 94105, United States.