Halo Ritual ("we", "us", "our") is an iOS application that helps you track your skincare routine and analyse your skin over time. This policy explains what data we collect, why we collect it, how we use it, and what rights you have.
We have written this in plain language. If anything is unclear, contact us at the address at the bottom of this page.
Your skin photos are never stored. They are sent for analysis, processed, and immediately discarded. We keep only the resulting numeric scores and text observations.
We do not sell your data. Not to advertisers, not to brands, not to anyone.
You can delete everything at any time from within the app, and it is permanently removed from our servers.
Halo Ritual is operated by Miquel Gomila, an individual developer based in Spain. For the purposes of the EU General Data Protection Regulation (GDPR), we are the data controller for the personal data described in this policy.
Contact: privacy@haloritual.app
When you create an account using Sign in with Apple, we receive:
We do not receive or store your Apple password.
If you choose to log it: sleep hours, water intake, and self-reported stress level. This is entirely optional and you can use the app without providing it.
When you take a skin scan, the photograph is transmitted to our analysis service. We store only:
When you photograph a product label or ingredients panel, the image is processed to extract text. The extracted product name, brand, and ingredient list are stored. The photograph itself is not.
We use PostHog (hosted in the European Union) to understand how the app is used in aggregate. This includes events such as completing onboarding, finishing a routine, or viewing the subscription screen. Analytics data is associated with a pseudonymous identifier, not your name or email.
Subscription status is managed by RevenueCat and Apple. We receive your subscription state (free, trial, or active) and renewal dates. We never receive or store your payment card details — all payment processing is handled entirely by Apple.
Under GDPR, we rely on the following legal bases:
To provide the service you signed up for: storing your routine, running skin analyses, calculating your streak, and managing your subscription.
To understand aggregate usage patterns so we can improve the app, and to detect and prevent abuse. You can object to this processing at any time by contacting us.
For optional data you choose to provide, such as lifestyle logging and demographic information. You can withdraw consent by deleting that data in the app.
We share data only with the service providers necessary to operate the app:
We do not sell your personal data. We do not share it with advertisers, data brokers, cosmetics brands, or any third party for marketing purposes.
If you are in the European Economic Area or the United Kingdom, you have the right to:
To exercise any of these rights, use the in-app controls or email privacy@haloritual.app. We will respond within 30 days.
All data is transmitted over encrypted connections (TLS). Session tokens are stored in the iOS Keychain. Access to our production database is restricted and authenticated.
No system is perfectly secure. If we become aware of a breach affecting your personal data, we will notify you and the relevant supervisory authority as required by law.
Halo Ritual is not intended for children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, contact us and we will delete it.
Some of our service providers process data outside the European Economic Area, principally in the United States. Where this occurs, transfers are governed by Standard Contractual Clauses approved by the European Commission, or an equivalent safeguard.
If we make material changes to this policy, we will notify you in the app before the changes take effect. The "last updated" date at the top of this page always reflects the current version.
Questions about this policy or your data: