Back to Halo Safety

Privacy policy

v1.0 · Effective 12 August 2026
Short version: the app itself sends no data anywhere. Your calculations and records stay on your device or in your own iCloud. We only see personal data when you email us support, sign up for the waitlist, or generate an expense receipt (which stays on your device). Full details below.

01Introduction

This policy explains what personal data Halo HSE (the "App") and the Halo Safety website process, why, and how you can exercise your rights under the EU General Data Protection Regulation (GDPR).

Publisher: MB The Special Something, Perkūnkiemio g. 13-91, LT-12114 Vilnius, Lithuania. Company registration: 304485059. VAT: LT100012830516.

02Data controller

MB The Special Something is the data controller for any personal data processed in connection with the App and this website. For data-protection matters, contact hello@halosafety.io.

03What data we collect

  • Data collected by the App: none. The App contains no third-party analytics SDKs, no advertising SDKs, and no tracking technologies. It does not send usage data to us.
  • Data collected by Apple: Apple's App Store may collect installation and usage data as described in Apple's Privacy Policy. From our perspective this is aggregated and anonymous — we receive only summary statistics (downloads, crash rates, sandbox purchases) through App Store Connect.
  • iCloud sync: if you enable iCloud sync in the App, your calculation data (calculators, records, saved surveys, expense-receipt buyer profile) is stored in your private iCloud container. MB The Special Something has no access to your iCloud data. iCloud is operated by Apple under their own terms.
  • Personal data on expense receipts: if you generate an expense receipt inside the App, you may enter your name, email, employer name, employer address, VAT number, and purchase order reference. This data is stored locally on your device and in your private iCloud only. It is not transmitted to us.
  • Support email: if you contact hello@halosafety.io, we process your email address and the content of your message so we can respond and improve the App. Retained for up to 24 months, then deleted.
  • Waitlist signup (website): the waitlist is an email address, not a form that stores anything. If you email hello@halosafety.io to join, your address sits in our own mailbox and is used only to tell you when a new Halo product lands. No email service provider is involved and your address is not uploaded to one. Ask us to remove you and we will, by reply.

04Legal basis for processing (GDPR Article 6)

  • Support communications: legitimate interest (Article 6(1)(f)) — responding to a user inquiry you initiated.
  • Waitlist emails: consent (Article 6(1)(a)) — you submit your email voluntarily. Consent can be withdrawn at any time: reply and ask us to remove your address.
  • Contract performance: Article 6(1)(b) — where applicable to fulfilling the license agreement covered by our Terms of Use.

05Data sharing

We do not sell user data. We do not share user data with third parties for marketing purposes.

We share personal data only with:

  • Apple, as the platform for App Store distribution and iCloud storage (governed by Apple's own privacy terms);
  • Legal authorities where required by law (for example, in response to a valid court order).

No email service provider is involved in the waitlist, and no address has been uploaded to one. If that ever changes, the provider will be named here first.

06Data retention

  • Support emails: up to 24 months, then deleted.
  • Waitlist emails: until you ask us to remove your address.
  • Data stored on your device or in your iCloud: controlled entirely by you. Delete the App or clear your iCloud data to remove it.

07Your rights under GDPR

Under GDPR you have the right to:

  • Access your data (Article 15)
  • Rectify inaccurate data (Article 16)
  • Erase your data (Article 17, "right to be forgotten")
  • Restrict processing (Article 18)
  • Data portability (Article 20)
  • Object to processing (Article 21)
  • Withdraw consent (Article 7(3))
  • Lodge a complaint with a supervisory authority

For Lithuania, the supervisory authority is the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija — VDAI), L. Sapiegos g. 17, 10312 Vilnius, ada@ada.lt, vdai.lrv.lt.

To exercise any of these rights, email hello@halosafety.io. We respond within 30 days.

08International data transfers

We do not transfer personal data outside the European Economic Area (EEA), with one exception:

  • Apple's App Store services may involve processing in the United States. Apple provides its own GDPR compliance mechanisms (Standard Contractual Clauses).

If an email service provider is ever introduced for the waitlist, that provider and its transfer mechanism (Standard Contractual Clauses or an adequacy decision) will be listed here before any address reaches it.

09Cookies and browser storage (halosafety.io)

The Halo Safety website sets no cookies at all — not advertising, not analytics, not third-party, and not strictly necessary ones either.

Counting visits. Every page carries a small script that tells a counter on our own server that the page was opened. It sends four things: the hour, the page address, the host of the site you arrived from if there was one, and whether you clicked through to the App Store. It sets no cookie, records no IP address and assigns no identifier, and it reaches no third party. Because there is nothing that could join two visits together, it counts visits rather than people — we cannot tell whether two page views came from the same person, and it is built that way deliberately. If your browser sends Do Not Track or Global Privacy Control, the script does nothing at all. Separately from the counter, the web server keeps the access log that every web server keeps. It holds IP addresses, it sits with our hosting provider, and we do not use it for analytics — but it is the reason we will not claim that no IP address ever touches this site.

The site also uses your browser's local storage for two things. Local storage is not a cookie: what it holds stays on your device and is never transmitted to us or to anyone else.

  • Your light or dark theme choice, so the site does not appear in the wrong theme when you return.
  • Results you explicitly save. If you press “Save this result” in the Calculators, it stores that result — the exposure level, the standard you selected, how many periods you entered, and the time you saved it — in this browser. Nothing is written unless you press Save.

Saved results never leave your device, are never shared between your devices, and are never used to identify or track you. You can delete them at any time with “Clear all” on the calculator, or by clearing your browsing data. They also disappear on their own in private browsing.

Apart from what you explicitly save, the values you type into a calculator are processed entirely inside your browser and are discarded when you close the tab.

Because no non-essential cookies are set, and the local storage described above exists solely to provide features you explicitly asked for, a cookie-consent banner is not required under the ePrivacy Directive as transposed into Lithuanian law.

10Children

Halo HSE is intended for professional use by adults. We do not knowingly collect data from children under 16. Apple's parental controls apply to App Store downloads. If you believe a child has provided us with data, contact hello@halosafety.io and we will delete it.

11Changes to this policy

We may update this policy. The effective date at the top will reflect the most recent version. Material changes will be notified via the App or via email if you have provided one.

12Contact

Data-protection questions and requests: hello@halosafety.io.

MB The Special Something
Perkūnkiemio g. 13-91
LT-12114 Vilnius, Lithuania
Company reg: 304485059 · VAT: LT100012830516