Privacy Policy

Last Updated: February 6, 2026

Welcome to Halo ("we," "our," or "us"), operated by SmartAIForge SL. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application (the "App").

            Important: Halo is a safety application that requires access to your location data and motion sensors to function properly. We only collect and use data necessary to provide emergency safety services to you.
        

1. Information We Collect

1.1 Personal Information

When you create an account, we collect:

Email address
Phone number (optional)
Account credentials (encrypted password)

1.2 Emergency Contact Information

You provide information about your emergency contacts, including:

Contact names
Contact email addresses
Priority settings

1.3 Location Data

When you start a route, we collect:

Real-time GPS coordinates (latitude, longitude)
Altitude information
Location accuracy data
Timestamp of location updates

Important: Location data is only collected when you have an active route running. We do not track your location when the app is not in use or when no route is active.

1.4 Motion and Sensor Data

To detect falls and inactivity, we collect:

Accelerometer data (to detect impacts)
Motion patterns (to detect inactivity)

This data is processed locally on your device and is not stored permanently.

1.5 Route and Activity Data

We maintain records of:

Route start and end times
Route duration
Heartbeat signals (location updates every 5 minutes)
Emergency alerts triggered and resolved
Route status (active, completed, emergency, cancelled)

1.6 Device and Usage Information

We may collect:

Device type and model
Operating system version
App version
Unique device identifiers
App usage statistics (for improving performance)

2. How We Use Your Information

We use the collected information for the following purposes:

2.1 Emergency Services

Detecting potential emergencies (falls, inactivity)
Sending emergency alerts to your designated contacts
Providing your real-time location to emergency contacts
Maintaining heartbeat signals during active routes

2.2 Service Provision

Creating and maintaining your account
Authenticating your identity
Managing your emergency contacts
Tracking and displaying your route history
Processing subscription payments (via RevenueCat)

2.3 Communication

Sending emergency notifications via email
Providing customer support
Sending important service updates or security alerts

2.4 Improvement and Analytics

Analyzing app performance and stability
Improving fall detection algorithms
Enhancing user experience
Fixing bugs and technical issues

3. How We Share Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

3.1 With Your Emergency Contacts

When an emergency is detected or manually triggered, we share:

Your name
Your current GPS coordinates
Timestamp of the emergency
Type of emergency (fall, inactivity, manual)

This information is sent via email to your designated emergency contacts only.

3.2 Service Providers

We use trusted third-party service providers:

Supabase: Database, authentication, and backend services
Resend: Email delivery for emergency notifications
RevenueCat: In-app purchase and subscription management

These providers are contractually obligated to protect your data and use it only for providing services to us.

3.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, subpoenas).

3.4 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

4. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

Encryption of data in transit (HTTPS/TLS)
Encryption of data at rest
Secure authentication using industry-standard protocols
Row-level security (RLS) in our database
Regular security audits and updates
Limited access to personal data by employees

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

5. Data Retention

We retain your information for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy:

Account Information: Retained while your account is active
Location Data: Retained for 90 days after route completion (for route history)
Emergency Alerts: Retained indefinitely for safety records and legal purposes
Usage Data: Retained for up to 2 years for analytics

You may request deletion of your data at any time (see Your Rights section below).

6. Your Rights

Depending on your location, you may have the following rights:

6.1 Access and Portability

You have the right to request a copy of the personal information we hold about you.

6.2 Correction

You can update your account information and emergency contacts directly in the app.

6.3 Deletion

You can request deletion of your account and all associated data by contacting us at smartaiforge@gmail.com.

6.4 Withdraw Consent

You can withdraw consent for location tracking by:

Ending your active route in the app
Revoking location permissions in your device settings
Deleting your account

6.5 Object to Processing

You may object to certain data processing activities, though this may limit the functionality of the app.

To exercise any of these rights, please contact us at smartaiforge@gmail.com.

7. Children's Privacy

Halo is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete such information.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from the laws of your country. We ensure that appropriate safeguards are in place to protect your information when it is transferred internationally.

9. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

Right to know what personal information is collected
Right to know if personal information is sold or disclosed
Right to say no to the sale of personal information (we do not sell data)
Right to access your personal information
Right to request deletion of personal information
Right to non-discrimination for exercising your rights

10. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

Right to access your personal data
Right to rectification of inaccurate data
Right to erasure ("right to be forgotten")
Right to restrict processing
Right to data portability
Right to object to processing
Right to withdraw consent
Right to lodge a complaint with a supervisory authority

11. Location Services and Permissions

Why We Need Location Access:

Halo requires "Always Allow" location permission to:

Track your location in real-time during active routes
Detect if you stop moving (inactivity monitoring)
Send your GPS coordinates during emergencies
Provide heartbeat updates every 5 minutes
Continue monitoring even when the app is in the background

Important: You can end an active route at any time to stop location tracking. When no route is active, the app does not access your location.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

Posting the new Privacy Policy in the app
Updating the "Last Updated" date
Sending you an email notification (for significant changes)

Your continued use of the app after any changes constitutes your acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: smartaiforge@gmail.com
Mailing Address:
SmartAIForge SL
Spain

14. Consent

By using Halo, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your information as described herein.