Privacy
What happens on your Mac,
stays on your Mac.
Most apps ask you to trust a privacy policy. Halo is built so you don't have to: your screen, your calls, and your memory live on your Mac and stay there. This page walks through exactly how that works, in plain language, including the moments you choose to reach beyond your Mac.
On your Mac
It all happens right here.
Halo watches, listens, and remembers entirely on your machine. Here is what that means, piece by piece.
The brain runs on your chip
Halo's intelligence runs on your Mac's own processor. It reads your screen and listens to your calls to help in the moment, with no server in the loop and nothing sent away to think.
Frames are read once, then gone
Every screen frame Halo captures is used a single time and immediately dropped. The rule is enforced by code whose only job is to delete. Nothing is quietly kept on the side.
Calls become words, not recordings
Your calls are turned into text on your Mac. Ambient audio is dropped the instant it becomes a transcript. Recordings you deliberately start are saved as local files on your Mac, never uploaded.
Your memory stays yours
What Halo remembers lives in a database on your Mac: short, structured notes, never screenshots or images. You choose how long it's kept in Settings, or tell it to forget.
Some things are off-limits.
The moment a field looks sensitive, Halo looks away. It never reads, stores, suggests into, or fills any of these. This isn't a setting you switch on. It's a hard rule in the code, on by default, with no way to turn it off.
- Passwords
- Payment & card details
- Bank & financial logins
- IDs & 2FA codes
Optional cloud
A bigger brain, on your terms.
Halo is complete on your Mac. For the occasional heavy lift you can opt into a cloud model. It's off by default. One switch turns it on, one switch turns it back off, and Halo is fully local again.
All the cloud ever sees
- The words of the request you're making, right then.
- The result of any tool it runs for that request.
What it never receives
- Your memory, your history, your files, or your screen.
- Anything that says who you are. There's no database with your name on it behind the cloud.
Halo Cloud
The simple option. Your request is encrypted on your Mac before it leaves, passed along to do its work, and not stored on our servers. You don't have to manage anything.
Bring your own key
Maximum control. Point Halo at a provider or a server you already trust, from a big-name API to a model running on your own machine. Your request goes straight there, under your account and your rules. Nothing of ours sits in the middle.
The choice is always yours, and it's never made for you.
Your devices
The same promise, everywhere you are.
Halo can reach you on your iPhone, and soon your Apple Watch. The privacy model travels with it.
Your iPhone, through your iCloud
When Halo needs to reach you away from your Mac, it goes through your own iCloud, not our servers. Messages between your Mac and your phone ride your private Apple account, encrypted in transit and at rest. Halo's backend is never in the path.
Your Apple Watch, the same promise
A glanceable Halo for your wrist is on the way. When it lands it follows the same rules: a messenger to the Halo on your Mac, with any health signals summarized into simple notes, never raw data, and always opt-in.
No second brain on your phone
Your phone and watch don't run the AI and don't carry a copy of your memory. They're a window into the Halo on your Mac, not another one. Less of you, kept in fewer places.
One switch, every device
Privacy Pause stops Halo from seeing or hearing anything, on your Mac and your companions at once. When you want a moment to yourself, you get it everywhere.
Your memory stays put
Today your memory lives only on your Mac. If we ever add syncing across your devices, it will be encrypted so that only your devices can read it, never us.
The fine print
The short version.
We hold almost nothing about you: a waitlist or license email, only if you choose to give us one. No tracking, no analytics, nothing sold, ever. If we ever add crash reporting, it will be opt-in and carry no screen contents. You can ask us to delete what little we have at any time, and we answer within 30 days.
Try it. Nothing leaves your Mac.
No account to create. No data to hand over. Just download and go.