Your private life stays on your iPhone.

• Your journal, sobriety date and history, birth details, Your Days photos, goals and milestones stay on your iPhone. Halo’s servers never receive them, except a Circle level you choose to show.
• You can use Halo without an account. If you choose Sign in with Apple to join Together, Circle and Discover, we keep only what the community needs to work.
• Discover is off until you turn it on. A voice introduction is stored only if you choose to record and share one.
• Live audio rooms are audio only. Your microphone is off when you join and turns on only when you choose to speak. Halo doesn’t record live rooms, but other people in a room could record what they hear.
• There are no ads, no tracking and no analytics SDKs. Halo’s guidance is not generated by AI, and we never sell your information.
• You can delete your account in the app at any time: You › your Halo account › Delete account.
• Halo is for adults 18 and over.

Halo is provided by Vipp LLC (“Halo”, “we”, “us”). Vipp LLC is responsible for the personal information described in this policy.

This policy covers the Halo iPhone app and the community services it connects to. The Halo website, its waitlist and reservations are described separately on the website privacy page and in the reservation terms.

These are stored only on your device. They are never sent to Halo, and we cannot see them:

• your journal;
• your sobriety start date and history, including your day count and stones;
• your birthday, birth time and the other details used for your guidance;
• your Your Days photos;
• the goals you choose;
• your milestones and the ones you claim. Milestone notifications are off unless you turn them on, and are scheduled on your iPhone.

A milestone keepsake image shows the milestone, its stone and Halo’s mark. It never includes your name, and it includes your start date only if you add it. It leaves Halo only if you share or save it.

Your daily guidance, including its astrology, is worked out on your iPhone from the current sky, the goals you choose and, only if you add it, your birthday. It is symbolic and interpretive. It never predicts your health or your recovery, and it is not generated by AI.

Like other app data, this information may be included in your iPhone or iCloud backups according to your Apple settings. Deleting the Halo app removes it from your iPhone, and Halo has no copy to restore.

Together, Circle and Discover need an account. Signing in is optional and uses Sign in with Apple, so Halo never has a password for you, and Halo doesn’t ask Apple for your name or email address. When you sign in and use the community, we store:

Account

An identifier from Sign in with Apple that links you to your Halo account; an encrypted Apple sign-in token, which Halo uses about once a day to check with Apple that your sign-in is still valid, and to end Halo’s access when you delete your account; and your sign-in sessions.

Profile

The first name or nickname from your Halo profile, which the app sends when you sign in and no other member sees, and the @handle you choose.

Circle membership

Which Circle you belong to, your admission to it, when you joined, and whether you appear there by your @handle or anonymously. If you choose to show your level beside your name in a Circle, we store that month number for that Circle until you stop showing it or leave.

Discover

Whether you’ve turned Discover on, the colours and style you choose, the names and artwork Halo makes for you for each person you meet, your voice introduction if you share one, and your requests and conversations with people you meet there.

What you share

Your posts and replies in Together and Circle, your reactions, photos you share to a Circle (including Daily photos) with any words you add, and private messages you exchange with members of your Circle and people you meet in Discover.

Safety records

Reports you make or that are made about you, people you block, and moderation actions such as removals and suspensions.

Connection data

When the app contacts Halo’s servers, our hosting provider receives ordinary technical information, such as your IP address, needed to deliver and secure the service. Halo’s service uses a one-way coded form of your IP address, kept briefly, to limit abuse. We don’t use it to track you.

Photos you share to a Circle

Before you share a photo to your Circle, including a Daily photo, your iPhone checks whether it shows a face. If it finds a face, the photo isn’t shared. The check can miss faces, so please share only photos you’re comfortable with. It runs on your iPhone, looks only for the presence of a face, recognises no one, and sends nothing about it to Halo.

Before a Circle photo is stored, Halo re-encodes it, removes its metadata, including EXIF data and GPS location, and resizes it to no more than 2,048 pixels. Only that re-encoded copy is kept, in private object storage rather than at a public address. It is visible only to that Circle’s admitted members and Halo’s moderators. If a photo is reported, other members can’t see it until a moderator has reviewed it.

When you delete your post, a moderator removes it, or you delete your account, the photo stops being viewable immediately and its file is erased by a daily maintenance job. Photos you upload but don’t post are erased by the same job.

Voice introductions in Discover

If you choose to record one, Halo keeps a short voice introduction (3 to 90 seconds) so people in Discover can hear it. It stays on your iPhone until you share it, and any voice veil you pick is applied on your iPhone first. Halo 1.1.0 doesn’t transcribe introductions. The recording is kept in private object storage and is played only through Halo, never from a public address.

If an introduction is reported, nobody else can hear it until a moderator has reviewed it, and Halo’s moderators can listen to it while the report is open. We keep a shared introduction until you replace or remove it, a moderator removes it, or you delete your account; its file is then erased by a maintenance job. Recordings that are never finished are erased.

Live audio rooms

Members can create rooms and talk in them live, with audio only: no camera, no video. You join as a listener with your microphone off. It turns on only when you tap Speak (or Unmute, if you’re the host); nobody can turn it on for you. iOS asks for your permission before Halo first uses the microphone. In a room you appear as a pattern made for that room, never your name, handle or account.

Live audio travels between the people in the room through LiveKit, a real-time audio service (see Service providers). Halo does not record, transcribe or store live room audio, and if LiveKit reports that a room is being recorded, Halo closes it. Halo can’t stop someone in the room from recording what they hear with another device, so speak with that in mind.

To run rooms, Halo stores each room’s name, description and whether it is public or private, its members and invitations (an invitation expires after 72 hours), text messages posted in the room, reports and moderation actions, and session records: when a session was scheduled, started and ended, who held the floor and for how long. Short-lived connection records are kept for at least 24 hours after they expire and are then erased by a maintenance job. Audio levels used to show who is speaking are computed on each iPhone and aren’t stored.

Who sees what you share

Together posts and replies are visible to signed-in Halo members. They appear as “Anonymous member” with a colour that stays the same on all your Together posts, so members can tell when posts come from the same person, but not who you are. In a Circle, other members see your @handle or, if you chose to be anonymous there, “Anonymous member” with a colour. Circle posts, replies and photos are visible only to that Circle’s admitted members and Halo’s moderators. Nothing you share in the community is published outside Halo.

Community posts are not end-to-end encrypted: Halo and its moderators can read them, and Halo can link an anonymous post or membership to your account to keep the community safe.

In Discover, people who meet you see a name and artwork Halo made for them alone, so different people see you differently. Nobody can search for you. Requests, messages, blocks and reports work as they do in Circle, and reports reach Halo’s moderators. Halo can link a Discover name to your account to keep the community safe.

A public room appears in Halo’s room directory for signed-in members; a private room is visible only to its members and people holding an invitation. People in a live session hear you only while you have the floor, and see your room pattern, never your name. Room text messages are visible to the room’s members and Halo’s moderators. Hosts can move a speaker back to listening, remove someone from a room, and anyone can report or block another member.

Private messages are visible to you and the person you’re messaging. They are not end-to-end encrypted: Halo stores them on its server, and a message you report is shared with Halo’s moderators. Blocking someone ends your conversation with them. When you delete your account, the text of your messages is erased.

You can delete your own posts and replies in Together and Circle, including Daily photos. Otherwise Circle posts and photos stay in the Circle, even after you leave it, until a moderator removes them or you delete your account.

A block applies across Halo: you and the person you block stop seeing each other’s posts and replies in both Together and Circle. Blocks aren’t announced, but the person you block may notice that your posts no longer appear, and if you share a Circle with someone you block in Together, they will no longer appear in your Circle either.

Because Halo is a sobriety community, being a member and what you write may reveal something about your health, such as your relationship with alcohol. You decide what to share. Please don’t post anything you wouldn’t want the people in that space to see.

• To create your account, sign you in and keep your sessions secure.
• To show your posts, replies, reactions and photos to the people they are meant for, and to run Circles, including admission.
• To keep the community safe: human moderation, reports, blocks, removals and suspensions, and automated filtering of slurs, threats, sexual solicitation, drug sourcing, links and contact details.
• To enforce our Terms of Use and protect Halo’s members.
• To answer you when you contact us.
• To meet legal obligations.

We do not use your information for advertising. We do not track you across other companies’ apps or websites, we do not build marketing profiles, and we do not sell or share your personal information for those purposes.

Where laws such as the GDPR or UK GDPR apply, we rely on:

• Contract: to provide the account and community you sign up for.
• Legitimate interests: to keep members safe, moderate content, prevent abuse and secure the service.
• Consent: where the law requires explicit consent, for health-related information you choose to share. You can withdraw consent by deleting your account.
• Legal obligation: where the law requires us to keep or disclose information.

We use a small number of providers to run Halo. They process information on our behalf and only to provide their service to us:

Vercel

Hosts Halo’s API.

Neon

Hosts Halo’s Postgres database and the private object storage for Circle photos and Discover voice introductions, in the United States.

Apple

Provides Sign in with Apple, under Apple’s own privacy policy.

LiveKit

Relays live room audio between participants in real time. Halo gives LiveKit a short-lived, room-specific identity for each participant, never your name or account. Halo closes any room LiveKit reports as being recorded.

We do not use advertising networks, data brokers or analytics SDKs. We may disclose information if the law requires it or if it is necessary to protect someone from serious harm.

Halo’s community data is stored in the United States. Live room audio is relayed by LiveKit’s cloud servers, which may be outside your country, and is not stored. If you use Halo from another country, the community information described above is transferred to and processed in the United States, where privacy laws may differ from those where you live. Where the law requires a safeguard for these transfers, we rely on an appropriate mechanism, such as the European Commission’s Standard Contractual Clauses.

We keep your community information while your account exists. When you delete your account:

• your profile is deleted, your Circle memberships end, your sign-in sessions are revoked, and your blocks are removed;
• your posts and replies are replaced by anonymous placeholders, so conversations still make sense without your words or identity;
• your Circle photos stop being viewable immediately, and their files are erased by a daily maintenance job;
• your Discover profile, the names Halo made for you and your voice introduction are erased, and your Discover conversations end;
• rooms you created are archived and their names and descriptions erased, your room memberships end, the text of your room messages is erased, and any live participation is ended;
• copies of your words held in reports are cleared.

Records that a report, moderation action or account deletion happened, and the link between anonymous posts and the account that wrote them, are kept as safety records, to protect members and prevent abuse. They have no set end date. The copy of reported words that a report holds is cleared when a moderator closes the report, and in any case after 30 days. Expired sign-in sessions are deleted 30 days after they expire.

After you delete your account, we keep a closed account record and a one-way coded form of your Apple ID, so the deleted account can never be restored. If you later sign in again with the same Apple ID, you start a fresh, empty account: nothing from the deleted account comes back, and the coded Apple ID moves to the new account.

Our database provider keeps six hours of change history for recovery, and we take a backup before major changes to the service. Deleted information can remain in these copies until they expire or we delete them.

Information stored only on your iPhone stays there until you delete it or the Halo app.

In the app, open You › your Halo account › Delete account: in You, tap your Halo account (it shows your @handle once you have one), choose Delete account, then type DELETE MY ACCOUNT to confirm. Deletion takes effect as described above.

Deleting the Halo app from your iPhone doesn’t delete your account, so delete your account first. You can also stop using Sign in with Apple with Halo in your Apple Account settings; that signs you out of Halo but doesn’t delete your Halo account. If you delete your Apple Account itself, Apple tells Halo and your Halo account is deleted.

If you can’t open the app, email clee@anchorpillar.com. Halo doesn’t know your name, email address or Apple ID, so we can’t find your account from an email alone. The surest way is to install Halo again, sign in with the same Apple ID and delete your account in the app.

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict how we use it, and to withdraw consent. You also have the right not to be discriminated against for using these rights.

You can delete your account in the app at any time, as described above.

To make any other request, email clee@anchorpillar.com. Because Halo doesn’t know your name, email address or Apple ID, we may need to work with you to confirm that an account is yours before we act on a request.

You can also complain to your local data protection authority. You can always use Halo without an account.

Halo’s service reaches its database through a restricted role that has no direct access to community tables and works only through Halo’s own database functions, Circle photos are kept in private storage rather than at public addresses, and only the people who run and moderate Halo can see community information. No service can promise perfect security, so please protect your iPhone and Apple Account.

Halo is for adults 18 and over. It is not directed to anyone under 18, and we do not knowingly collect information from them. If you believe someone under 18 has a Halo account, report them in the app and we will suspend them from Together and Circle.

When our practices change, we will update this page and its effective date. If a change is significant, we will give notice before it takes effect.

Operator

Vipp LLC

Privacy and support

clee@anchorpillar.com

More help

Halo app support