1. Who we are
HaloHuman, Inc. ("HaloHuman," "we," "us," or "our") builds personal AI agents that run privately on your iPhone and evolve into your Digital Twin. This Privacy Policy applies to our website at halohuman.com (the "Site") and to the HaloHuman iOS application (the "App," together with the Site, the "Services").
2. Our core privacy principle
HaloHuman is designed so that your personal life data stays on your device. The agents that analyze your health, fitness, finance, social, and security signals run on-device. Raw personal data is encrypted using Apple's Secure Enclave and Keychain and is not transmitted to our servers. When you choose to share data with family members, it travels through Apple's end-to-end encrypted CloudKit, which we cannot read.
In short: for the core agent experience, there is nothing on our servers to leak. The sections below describe the limited data we do handle — mainly around the website and account-level operations.
3. Information we collect
a) Information you give us
- Waitlist sign-up. When you join the waitlist, we collect your email address. We also record the page you came from (referrer) so we understand which channels work.
- Contact. If you email us, we receive your email address and whatever you choose to include in your message.
b) Information collected automatically
- IP address. When you submit the waitlist form, we temporarily process your IP address for spam prevention and rate limiting.
- Analytics & cookies. With your consent, we use Google Analytics to understand aggregate, non-identifying usage of the Site. See our Cookie Policy for the full list and how to opt out.
- Bot protection. We use Cloudflare Turnstile to tell humans from bots on our forms. This may process device and network signals as described by Cloudflare.
c) Information processed on your device (App)
Health, fitness, financial, social, and security data used by your agents is processed locally on your iPhone and encrypted on-device. We do not receive or store this data.
4. How we use information
- To operate the waitlist and notify you when HaloHuman is available.
- To protect the Services against spam, abuse, and fraud.
- To understand and improve how the Site is used (only with your analytics consent).
- To respond to your questions and provide support.
- To comply with legal obligations and enforce our terms.
5. Legal bases (EEA/UK users)
Where the GDPR applies, we rely on: consent (analytics cookies, marketing emails); legitimate interests (security, spam prevention, and improving our Services); and legal obligation where required. You may withdraw consent at any time.
6. How we share information
We do not sell your personal information. We share limited data only with service providers who help us run the Services:
- Vercel — website hosting and delivery.
- Supabase — secure storage for waitlist sign-ups.
- Cloudflare — bot protection (Turnstile).
- Google Analytics — aggregate website analytics (only with consent).
- Apple — App Store distribution and CloudKit for optional end-to-end encrypted family sharing.
We may also disclose information if required by law, or to protect the rights, safety, and security of HaloHuman and our users.
7. Data retention
We keep waitlist sign-ups until the waitlist is no longer needed or you ask us to delete your record. IP addresses captured for rate limiting are retained only as long as needed for that purpose. On-device data lives on your device and is removed when you delete the App or reset an agent.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to withdraw consent. California residents have additional rights under the CCPA/CPRA, including the right not to be discriminated against for exercising them. To exercise any of these rights, email us at privacy@halohuman.com.
9. International transfers
We are based in the United States and our providers may process data in the U.S. and other countries. Where required, we rely on appropriate safeguards (such as the EU Standard Contractual Clauses) for international transfers.
10. Security
We use industry-standard measures to protect the limited data we handle, including encryption in transit and at rest. The App relies on Apple's Secure Enclave and Keychain for on-device data. No method of transmission or storage is 100% secure, but our architecture is built to minimize what could ever be exposed.
11. Children's privacy
The Services are not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect their personal information. If you believe a child has provided us data, contact us and we will delete it.
12. Changes to this policy
We may update this Privacy Policy from time to time. We will revise the "Last updated" date above and, for material changes, provide additional notice where appropriate.
13. Contact us
Questions about this policy or your data? Email privacy@halohuman.com.