Privacy Policy

Last updated: August 31, 2026

Privacy approach

Halo is designed as a local-first app. Financial information such as accounts, transactions, settings and profile data is primarily stored on the device. Halo is not designed to maintain a centralized copy of your financial data on an H.T.Z Studios server.

Account and sign-in

When account services are active, basic authentication information required for account creation and sign-in, such as an email address and identity-provider identifiers, may be processed by our authentication infrastructure provider, Supabase. Google or Apple sign-in is also subject to the privacy policy of the provider you choose.

Sensitive information

Sensitive keys and secrets stored by the app on the device are kept in the operating system secure store, such as Android Keystore or iOS Keychain, rather than as plain text.

Third-party services

Connecting a third-party service is your choice. When you connect Open Finance, an AI provider or an identity provider, the information required for that action is sent to that provider and its terms and privacy policy apply to that part of the service.

Deletion

When account services are active, account deletion can be requested from within the app. Data stored only on the device can be removed by clearing app data or uninstalling the app. See Account deletion.