Privacy Policy
Effective date: October 7, 2026
1. Introduction
This Privacy Policy describes how Halo ("Halo," "we," "us," or "our") collects, uses, discloses, and protects information in connection with the Halo mobile application and related services, including the Halo website at halo-inc.org and the account pages at auth.halo-inc.org (together, the "Services"). Halo is operated by an independent developer based in Canada. Contact details are provided in Section 12.
Halo is designed on a zero-knowledge model. The contents of your vault are encrypted on your device before they are transmitted to our servers, and we do not have the technical ability to decrypt them. Your master password is never transmitted to us.
By using the Services, you acknowledge that you have read and understood this Privacy Policy.
2. Information We Cannot Access
The following information is encrypted on your device before it is transmitted to our servers. We store this information in encrypted form only and cannot read it:
- The contents of your vault items, including passwords, notes, payment card numbers, identity details, and all other fields you enter;
- Item titles and item details, vault names and descriptions, and payment card nicknames and card types;
- File attachments, including their file names;
- Your master password, which is processed on your device and never transmitted to us; and
- Your Recovery Key.
Because of this design, we cannot recover your vault on your behalf. If you lose both your master password and your Recovery Key, your vault data cannot be restored.
3. Information We Collect
3.1 Account Information
When you create an account, we collect your email address. If you choose to add them, we also store your profile name and profile photo.
3.2 Unencrypted Metadata
A limited amount of information is stored in unencrypted form because it is required to operate features on our servers:
| Information | Purpose |
|---|---|
| Renewal and expiry dates | Scheduling reminder notifications |
| Billing frequency (for example, monthly or yearly) | Calculating upcoming renewals |
| Payment card expiry date and card colour (never the card number) | Expiry reminders and display |
| Item type (for example, password, card, or identity) | Organizing and displaying items |
| Attachment file type and size | Storage management |
| Subscription status | Providing access to Halo Pro features |
3.3 Reminder Notifications
Reminder notifications are private by default and do not include item names (for example, "Your streaming subscription renews in 3 days"). If you enable "Show item names in reminders" in Settings, we store the names of the relevant items in unencrypted form so they can be included in notifications. These names are deleted when you disable the setting.
3.4 Information Collected Automatically
To secure your account and deliver the Services, we collect:
- Security activity logs. Records of security-related events on your account, such as sign-ins, password changes, two-factor authentication changes, device approvals, and data exports. Each record includes the event type, whether it succeeded, your device model and operating system version, and the time. Security activity logs do not include your IP address.
- Device information. For each device used to sign in, we store a device identifier, the device model and operating system version, and when the device was first and last used. This allows us to recognize trusted devices and request approval for new ones. We do not store device names.
- IP address and sign-in attempt records. To limit repeated sign-in, recovery, and verification attempts, we temporarily record attempt counts linked to your IP address, email address, or account identifier. IP addresses may also appear in the standard server logs of our service providers.
- Push notification token. A token issued by Apple that allows us to deliver reminders to your device.
- App integrity data. We use Apple's App Attest service to verify that requests originate from the genuine Halo application.
- Two-factor authentication data. If you enable two-factor authentication, your authenticator configuration is held by our authentication provider. Backup codes are stored only as one-way hashes.
- Support requests. If you contact support from within the app, your email draft includes your app version, iOS version, and device model to help us resolve your issue. This information is sent only if you choose to send the email.
3.5 Biometric Unlock
If you enable Face ID, biometric authentication is performed entirely by your device's operating system. Halo never receives your biometric data. To support biometric unlock, an encryption key is stored in your device's secure Keychain and never leaves your device.
4. How We Use Information
We use the information described above solely to:
- Store and synchronize your encrypted vault across your devices;
- Authenticate you and protect your account, including through two-factor authentication, new device approval, and security alert emails;
- Deliver the renewal and expiry reminders you configure;
- Process and manage your Halo Pro subscription;
- Respond to your support requests; and
- Comply with our legal obligations.
We do not use your information for advertising or to create profiles about you.
5. Service Providers and Disclosure
We rely on the following third-party service providers to operate the Services. Each receives only the information necessary to perform its function and is governed by its own privacy policy.
| Provider | Function | Information Received |
|---|---|---|
| Supabase | Database, authentication, file storage, and server functions | Encrypted vault data, email address, the unencrypted metadata described in Section 3.2, security activity logs, and sign-in attempt records. Data is hosted in the United States. |
| Apple | App Store purchases, push notifications, and App Attest | Purchase details processed through the App Store, push notification tokens, notification content, and app attestation requests |
| RevenueCat | Subscription management | Your Halo account identifier, purchase and subscription status, and device and App Store information collected by RevenueCat's software |
| Resend | Transactional email delivery | Your email address and email content, such as device approval links and security alerts, which may include your device model and the time of an event |
| Vercel | Hosting of the Halo website at halo-inc.org and the password reset page at auth.halo-inc.org | IP address and standard web request data when you visit these pages |
| Logo.dev | Display of service logos | The website domain of a recognized service (for example, netflix.com) and your IP address when a logo is loaded. Item titles are never sent. |
| Have I Been Pwned | Breach checking for saved passwords | Only the first five characters of a one-way hash of a password, sent directly from your device. The password itself and its full hash are never transmitted. |
We do not sell your personal information. We do not share it with advertisers or data brokers, we do not display advertisements, we do not use advertising, analytics, or crash-reporting tools, and we do not track you across other applications or websites.
We may disclose information where required by law, such as in response to a valid court order, or where necessary to protect the rights, safety, or security of our users or the Services.
6. Data Retention and Deletion
We retain your information for as long as your account remains active, subject to the following:
- Trash. Items you delete are moved to Trash and permanently deleted after 30 days, or immediately when you empty Trash.
- Account deletion. You may delete your account at any time from Settings. Deletion is immediate and permanently removes your account, vault data, attachments, profile, settings, devices, and security activity logs. We send one final email confirming the deletion. Copies in our service provider's backups are overwritten within 7 days.
- Information retained after account deletion. Sign-in attempt records are deleted automatically within 7 days. Records of your subscription transactions are retained by Apple and RevenueCat, and a record of subscription events linked to your former account identifier is retained by us, as needed for accounting, tax, and legal purposes.
- Reset All Data. You may delete all vault contents while retaining your account from Settings.
- Security activity logs are retained while your account is active so you and we can review account security, and are deleted with your account.
- Reminder item names are deleted immediately when you disable "Show item names in reminders."
7. Security
We implement technical and organizational measures designed to protect your information, including:
- Key derivation. Your encryption keys are derived on your device from your master password using Argon2id, a memory-hard algorithm designed to resist brute-force attacks.
- End-to-end encryption. Vault data is encrypted on your device before transmission, and all data is transmitted over encrypted connections.
- Server-enforced two-factor authentication. When enabled, two-factor authentication is enforced by our servers, not only within the app.
- Re-verification for sensitive actions. Actions such as changing your master password or deleting your account require you to verify your identity again.
- Session and alert controls. Changing or resetting your master password signs out your other sessions, and we notify you by email of important security events.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. To report a security vulnerability, please contact support@halo-inc.org.
8. Your Rights and Choices
Subject to applicable law, you have the right to:
- Access and export your information, including through the Export Document feature in Settings;
- Correct your information by editing it within the app;
- Delete your vault data or your account at any time from Settings;
- Manage notifications by enabling or disabling reminders and reminder item names; and
- Request information about the personal information we hold about you by contacting support@halo-inc.org. We will respond within 30 days.
Depending on your location, you may have additional rights under applicable privacy laws, including Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), the EU and UK General Data Protection Regulation, and the California Consumer Privacy Act. Residents of Canada who are not satisfied with our response may contact the Office of the Privacy Commissioner of Canada.
9. Children's Privacy
The Services are not directed to children, and you must be at least 16 years old to use them. We do not knowingly collect personal information from anyone under 16. If you believe someone under 16 has provided us with personal information, please contact us and we will delete it.
10. International Data Transfers
Halo is operated from Canada. Our service providers may store and process information in other countries, including the United States, where data protection laws may differ from those in your jurisdiction. Your vault data remains encrypted wherever it is stored.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you within the app or by email before the changes take effect. The effective date at the top of this policy indicates when it was last revised.
12. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at support@halo-inc.org. Halo is operated by Lucas Niessen, who acts as Halo's Privacy Officer and is responsible for its compliance with this Privacy Policy.
Logos provided by Logo.dev.