Privacy Policy
Halo is a personal budgeting app. It never connects to your bank, has no servers of its own, and has no ads or analytics. Your financial data isn't sent to the developer.
- No bank connections
- No servers
- No ads
- No analytics
What Halo stores
- What you enter. Accounts, balances, transactions, budgets, savings goals, bills, categories and rules, invoices, and Hour tracker jobs and time entries are saved on your device.
- iCloud sync. When you're signed in to iCloud, your accounts, transactions, budgets, goals, bills, and preferences (like theme, currency, and language) are also kept in your own private iCloud storage so they stay the same across your devices. Apple stores it under your Apple Account; the developer can't see or access it. Invoices and Hour tracker entries stay on the device where you made them.
- Profile. If you choose Sign in with Apple, Halo receives your name and email from Apple (or a private relay address, if you choose to hide it) and keeps them on your device to show in Settings. A profile photo you pick is also kept on your device.
- Advisor conversations. Your chats with Advisor are saved on your device so you can pick them back up.
- Widget and Live Activity data. Your data is kept in a folder shared with Halo's Lock Screen Live Activities, on the same device, so buttons like “Mark paid” work.
None of this is sent to the developer or sold to anyone.
Apple Intelligence
Advisor and receipt reading use Apple's on-device Foundation Models. Your questions, the ledger details Advisor needs to answer them, and the text read from your receipts are processed on your iPhone and aren't sent to the developer.
Receipts
When you scan a receipt, Halo reads the text in the photo on your iPhone. The items, amounts, and totals it finds are saved only if you log or split the receipt.
Exchange rates
To convert amounts into the currency you pick, Halo downloads public exchange rates from open.er-api.com about twice a day. The request only asks for the latest rates. It doesn't include any of your data, but like any web request it reaches that service from your device's IP address.
Permissions
- Camera: used only when you scan a receipt.
- Photos: when you pick a receipt or profile photo, iOS shares only the photo you choose. Halo can't read your photo library.
- Face ID: used only to lock the app if you turn on Face ID lock. Halo never receives your face data; iOS only tells it whether unlocking succeeded.
- Notifications: used only for bill reminders, which are scheduled on your device.
Purchases
Halo Pro is a one-time purchase made through the App Store. Apple handles the payment; the developer never sees your payment details. Halo only checks with the App Store whether your Apple Account has bought Pro.
Sharing and export
When you share an invoice PDF, a split, or a CSV export, the file goes to the app or person you pick. What happens next is covered by that app's privacy policy.
Deleting your data
Settings → Delete all data erases your accounts, transactions, budgets, goals, bills, invoices, tracked hours, custom categories, rules, and Advisor conversations on that device, and removes the synced data from your other devices too. Deleting Halo removes what's on that device. To remove the iCloud copy too, go to Settings → your name → iCloud → Manage Account Storage → Halo. To stop using Sign in with Apple, go to Settings → your name → Sign-In & Security → Sign in with Apple → Halo.
Not financial advice
Advisor's answers are guidance only, not licensed financial advice.
Children
Halo doesn't knowingly collect any personal information from anyone, including children.
Changes
If this policy changes, the new version will be posted on this page with a new date.
Contact
Questions: halomoney@thewatcherlab.com