Privacy Policy

1. Who We Are

Halo Aware is a parental safety tool that provides insights into a child's use of AI chat platforms. Our service helps parents identify potential risks and safeguard their children online.

2. Who This Policy Applies To

This policy applies to:

• Parents or legal guardians who create a Halo Aware account
• Children whose AI interactions are monitored through a parent-managed account

3. Information We Collect

3.1 Parent Information

We may collect the following information about parents:

• Email address
• Display name
• Profile photo (if signing in via Google)
• Timezone
• Last login timestamp

3.2 Child Profile Information

Parents choose what information to provide. This may include:

• Child display name (real or pseudonym)
• Age range
• Avatar colour (UI preference)

We do not require real names or identifying details for children.

4. AI Message Processing

Halo Aware monitors activity on supported AI chat platforms only.

What happens to messages?

• Messages are processed temporarily in memory only
• Messages are analysed using automated AI classification
• Messages are not stored unless a safety risk is detected

Stored alert data (limited cases only)

If a medium or high risk is identified:

• 2-3 messages surrounding the flagged content may be stored as context
• An AI-generated summary
• Risk level (none / low / medium / high)
• Topic categories
• Platform and timestamps

Raw messages outside these limited alert snippets are discarded.

5. Information We Do NOT Collect

Halo Aware does not collect:

• Full chat logs
• General browsing history
• Keystroke data
• Screenshots
• Child email addresses or passwords
• Login credentials for third-party services
• Messages outside supported AI platforms

6. Why We Process Data (Lawful Basis)

We process personal data because it is:

• Necessary for safeguarding children
• Required to provide safety alerts and insights to parents
• Based on parental consent

Parents provide consent when setting up the account and enabling monitoring features.

7. Consent and Control

• Parents control all monitoring settings
• Consent can be withdrawn at any time by:
  • Disabling monitoring
  • Deleting the account
  • Contacting support

Once consent is withdrawn, data will be deleted in line with our retention policy.

8. Automated Decision-Making

Halo Aware uses automated systems to:

• Classify AI messages
• Identify potential safety risks

No automated decisions significantly affect a child without parental review and control. Any content restrictions are configured by the parent.

9. Data Security

We take appropriate technical and organisational measures to protect data, including:

• Access controls
• Encryption where appropriate
• Monitoring and logging
• Regular security reviews

10. Data Retention

• Alert data is retained only as long as necessary for safeguarding purposes
• Parents may request deletion at any time
• Non-flagged message data is never stored

11. Children's Rights & Safeguards

Halo Aware follows UK GDPR and the Age Appropriate Design Code (Children's Code) principles, including:

• Data minimisation
• Transparency
• Purpose limitation
• Safeguarding-first design

12. International Users

Where applicable, Halo Aware also considers COPPA requirements for US users.

13. Your Rights

Parents have the right to:

• Access their data
• Request correction or deletion
• Withdraw consent
• Raise concerns with the ICO

14. Contact Us

If you have questions or concerns about this policy, please contact:

support@haloaware.com

15. Changes to This Policy

We may update this policy from time to time. Significant changes will be communicated clearly within the app.