Privacy Policy for Halo Money

Effective Date: October 29, 2026 · Last Updated: October 29, 2026

At Halo Money ("we," "our," or "us"), we prioritize your privacy above all else. Halo Money is designed as a local-first application: your financial records remain on your device, we do not sell your personal data, we do not build tracking profiles, and we do not serve advertisements.

This Privacy Policy governs Halo Money across both Android (Google Play Store) and iOS (Apple App Store) platforms.

1. Data Controller & Contact Information

Halo Money is operated by SkyHub Solutions & Consulting ("Data Controller"). If you have any questions, wish to exercise your data privacy rights, or have questions about how your data is handled, please reach out to us at:

Data Controller / Entity: Công ty TNHH MTV SkyHub Solutions & Consulting
Contact Email: support@halomoney.me
Geographic Location: Ho Chi Minh City, Vietnam

For users residing in the European Economic Area (EEA) or United Kingdom (UK), processing of limited authentication data is based on legal grounds of Contractual Necessity (providing optional cloud backups) and Legitimate Interest (ensuring service security and managing API operation limits).

2. On-Device Local Storage

By default, all primary financial data you input into Halo Money—including transaction entries, accounts, budgets, goals, app settings, profile details, and receipt photos—is stored strictly on your device's internal storage. We do not host, inspect, or have access to any of your locally saved financial records.

3. Optional Artificial Intelligence (AI) Features

Halo Money offers opt-in AI-powered assistance (such as natural language financial queries, voice-assisted entries, and automated receipt scanning). These features operate strictly upon your explicit consent:

Data Transmitted: When you issue an AI request, submit a receipt scan, or log an entry via voice, the necessary payload (your text/voice input, receipt image, and a contextual financial summary) is sent to our server. No personal identity markers (such as your name, email, or persistent device identifiers) are included in this payload.
Third-Party AI Processor: Our backend securely routes your request payload to Anthropic, PBC (Claude AI) for processing, governed under Anthropic's Commercial Terms. Anthropic does not use commercial API inputs to train its model parameters. Anthropic may retain API logs transiently (up to 30 days) strictly for trust, safety, and abuse monitoring before deletion.
Our Server Retention: Our servers process your request in-memory (ephemerally) to communicate with the AI provider. Halo Money servers do not store your text prompts, AI answers, receipt photos, or financial summaries. Our backend retains only non-identifying operational metrics (such as daily API request totals).
User Control: You can stop AI processing at any time by selecting Stop AI requests in the app Settings.

4. Voice Processing & Speech Recognition

Voice entry utilizes your operating system’s built-in speech-to-text engine (such as Google Speech Services on Android or Apple Speech Recognition on iOS). Audio processing occurs either locally on your device or via your operating system provider’s secure cloud speech services under their respective privacy policies. Only the resulting converted text snippet is sent to our server as an AI request payload. Halo Money never records, collects, or retains raw audio recordings.

5. Cloud Backup & Authentication (Optional)

If you explicitly choose to enable Cloud Backup via Google Sign-In (or Sign in with Apple on supported platforms), the following protocols apply:

Authentication Data: We store your email address and unique account ID provided by Google or Apple solely to associate your identity with your backup snapshots.
End-to-End Encryption: Your backup database files and attached receipt photos are encrypted on your local device prior to transmission using an encryption key held exclusively by your device.
Cloud Infrastructure & International Transfer: Encrypted backups are hosted securely on Cloudflare infrastructure (which may involve processing/storage in servers located in the United States or globally). Neither Halo Money staff nor third parties have the cryptographic key required to decrypt or read your backup files.
Retention & Deletion: We maintain up to five (5) of your most recent backup snapshots. Selecting Delete cloud backup in Settings permanently purges your account credentials and all stored backup files from Cloudflare infrastructure.

6. Subscriptions, Purchases & Analytics

In-app purchases and subscriptions are processed through official app store billing platforms (Google Play Billing / Apple App Store In-App Purchase) and managed via RevenueCat, Inc.

Data Shared: RevenueCat receives an anonymous, app-specific User ID, active subscription entitlements, and transaction purchase history to manage your subscription state across devices.
Payment Credentials: Halo Money and RevenueCat never receive, process, or store your credit card details or bank credentials. All financial transactions are handled directly by Google or Apple.

7. Multi-Platform Data Safety Declarations

To assist users and satisfy transparency requirements across Apple's App Privacy Labels and Google Play's Data Safety form:

Data Category	Data Type	Stored on Server?	Processed Ephemerally?	Linked to Identity?	Purpose
Financial Info	Transactions, Budgets	No (Local only)	Yes (Context summary sent with AI prompt)	No	Core functionality & AI assistance.
Photos / Files	Receipt Photos	No (Local & Encrypted Backup)	Yes (Sent during receipt scan)	No	Local record-keeping & AI scanning.
Identifiers	Email & User ID	Yes (Cloudflare & RevenueCat)	No	Yes (When backup/subscription active)	Authentication & Subscription management.
Purchase History	In-app Subscriptions	Yes (RevenueCat)	No	Yes (Linked to App User ID)	Entitlement tracking & receipt validation.
User Content	Voice / Text Prompts	No	Yes (Sent to Anthropic API)	No	Instant AI query responses.

Note on Google Play Data Safety Definitions: Data processed transiently in-memory for AI queries or receipt parsing is classified as "Collected and Ephemerally Processed." It is not retained past the immediate API transaction.

8. User Control & Data Rights

You maintain full authority over your data directly through the application interface:

Stop AI Processing: Select Stop AI requests in Settings to disable all server-bound AI and receipt parsing features.
Delete Remote Data: Select Delete cloud backup in Settings to permanently purge your account record and all 5 cloud backup snapshots from server infrastructure.
Delete Local Data: Select Delete everything on this phone in Settings (or uninstall the app) to permanently erase local databases, photos, and settings.
Data Export: Export a full backup file or CSV spreadsheet of your transactions at any time via Settings.
Regulatory Complaint Rights (EEA/UK): If you reside in the EEA or UK, you have the right to lodge a complaint with your local Data Protection Authority (DPA) if you believe your personal data has been handled in violation of applicable laws.

9. Age Restrictions

Halo Money is not directed to or intended for use by individuals under 16 years of age. We do not knowingly collect personal data from children.

10. Updates to This Policy

We may update this Privacy Policy from time to time to reflect functional updates, third-party provider modifications, or regulatory changes. Any updates will be notified to you directly within the application or posted via our app store store listings.