Last updated: November 2025
This Privacy Policy explains how Halo Button ("we", "us") collects, uses, and protects information when you use the Halo Button mobile app and related services (the "Service"). Halo Button is a B2B platform: subscriptions are sold to businesses (hotels, restaurants, cafés), and the app is used by their staff and operators.
Halo Button is the data controller for personal data processed through the Service. The contracting business (your employer) is the controller for guest data they upload or generate inside the Service; Halo Button is the processor for that data.
For any privacy-related question, contact privacy@halobutton.com.
| Category | Examples | Why we collect it |
|---|---|---|
| Account data | Email address, name, role, business association, password hash | To authenticate you and connect you to your business |
| Device data | Push notification token, device model, OS version, app version, language, timezone | To deliver notifications and to diagnose issues |
| Usage data | Screens visited, features used, error and crash reports | To operate and improve the Service |
| Optional location | Approximate or precise location, only when you tap "use current location" inside the access codes screen | To pre-fill a geofence center for QR access codes. Not tracked in the background. |
| Audio | Voice recordings while you actively use the Voice Call feature | To clarify a guest request in real time. Audio is streamed and not retained beyond the active call unless you save a transcript. |
| Content you create | Menu items, knowledge base entries, request notes, photos you upload | To operate the Service for your business |
We do not collect data for advertising. We do not use the Apple App Tracking Transparency framework because we do not track you across other companies' apps or websites.
Halo Button subscriptions are billed through our web portal, not the mobile app. Card details, billing address, and tax IDs are entered directly into our payment processor's (Stripe's) hosted forms. Halo Button does not see or store full card numbers.
We do not sell personal data. We do not share it with third parties for advertising.
We use the following processors. They are bound by data protection agreements and may only process data on our instructions.
Personal data may be processed in the European Union, the United Kingdom, the United States, and Turkey, depending on the service provider. When data is transferred outside your country, we rely on Standard Contractual Clauses or an equivalent mechanism.
Depending on where you live (EEA, UK, Turkey, California, etc.), you may have the right to:
To exercise these rights, email privacy@halobutton.com from the address on your account. We respond within 30 days.
You can delete your account in two ways:
Deletion disables sign-in immediately and queues a 30-day purge of personal data. Records required for legal retention are anonymized rather than deleted.
Halo Button is intended for adult staff and operators of hospitality businesses. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided data, contact us and we will remove it.
We use industry-standard safeguards: TLS in transit, encryption at rest for sensitive fields, scoped access controls, audit logging, and routine security review. No system is perfectly secure; please use a strong, unique password and enable biometric sign-in in the app.
We may update this policy. Material changes will be announced inside the app and by email at least 14 days before they take effect.
Privacy questions: privacy@halobutton.com
General support: support@halobutton.com