Privacy Policy
1. Overview
This Privacy Policy explains how HaloYou ("HaloYou," "we," "us," or "our") collects, uses, stores, shares, and protects personal information when you use our mobile application, websites, products, and related services (collectively, the "Services").
By creating an account, accessing, or using the Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Services.
We may update this Privacy Policy from time to time. When we make material changes, we will notify you through in-app notices, push notifications, email, or other appropriate means. The updated Privacy Policy becomes effective when it is posted, unless otherwise stated.
2. Eligibility and Age Restriction
HaloYou is intended only for users who are 18 years of age or older. We do not knowingly allow persons under 18 to create an account or use the Services. If we learn that a person under 18 has provided personal information to us, we will take reasonable steps to delete such information and restrict the account.
3. Information We Collect
3.1 Information You Provide
- Account information: nickname, profile photo, gender, date of birth or age verification information, region, language, account ID, login credentials, and other profile details you choose to provide.
- Media and content: photos, videos, voice content, profile decorations, moments, room content, comments, messages, and other materials you upload, send, publish, or otherwise make available through the Services.
- Social activity records: live room participation, voice or video interactions, party room activity, follows, likes, comments, reports, blocks, virtual gifts sent or received, and other interaction records.
- Messages and communications: text messages, support requests, feedback, complaint details, and communications with us or with other users.
- Financial and in-app purchase information: purchase records, virtual currency balances, virtual gifts, wallet or inventory records, transaction IDs, receipts, and payment status. Payment card details are generally processed by app store payment providers and are not stored by us in full.
3.2 Information Collected Automatically
- Device and technical data: IP address, device brand, device model, operating system, OS version, app version, device identifiers such as Android ID or advertising identifiers where permitted, language, time zone, CPU information, memory status, battery status, carrier information, and crash or diagnostic data.
- Network data: network type, network access method, Wi-Fi and cellular signal status, local IP address, network latency, packet loss rate, bitrate, and related connection quality information.
- Usage data: pages viewed, features used, browsing records within the Services, click behavior, room entry and exit records, search and recommendation interactions, and other app activity logs.
- Cookies and similar technologies: where applicable, we and our service providers may use cookies, SDKs, pixels, local storage, and similar technologies for login status, analytics, attribution, fraud prevention, and service improvement.
4. How We Use Your Data
We use personal information for the following purposes:
- Service delivery: to create and manage accounts, provide live video chat, voice conversations, live rooms, text messaging, moments, profiles, virtual gifts, and in-app purchase functions.
- Communication and interaction: to enable user-to-user messages, room participation, voice and video transmission, gifting, comments, follows, and other interactive features.
- Security and anti-fraud: to verify accounts, protect login security, detect spam, abuse, fraud, abnormal device behavior, payment risk, policy violations, and harmful activity.
- Customer support: to respond to user inquiries, complaints, refund-related questions, technical issues, reports, and account requests.
- Personalized recommendations: to recommend people, rooms, content, and features based on in-app activity, preferences, language, region, and interaction patterns.
- Analytics and improvement: to understand feature performance, improve user experience, troubleshoot errors, conduct internal analysis, and develop new features.
- Legal compliance: to comply with applicable laws, regulations, legal processes, law enforcement requests, and platform requirements such as Google Play and App Store policies.
5. Legal Bases for Processing
Where laws such as the General Data Protection Regulation ("GDPR") apply, we process personal information based on one or more of the following legal bases:
- Contract: when processing is necessary to provide the Services you request.
- Consent: when you grant permission for optional features, device permissions, marketing, advertising identifiers, or certain personalized services.
- Legitimate interests: when processing is necessary for security, fraud prevention, service improvement, analytics, or protecting our users and business, provided those interests are not overridden by your rights.
- Legal obligation: when processing is necessary to comply with applicable legal or regulatory requirements.
6. Third-Party SDKs and Data Sharing
We use third-party software development kits ("SDKs") and service providers to support core functions such as real-time messaging, audio and video communication, login, analytics, attribution, advertising measurement, payment processing, security, and customer support. These third parties may collect and process certain information according to their own privacy policies and our instructions where applicable.
We require third-party service providers to process data only for disclosed and legitimate purposes. Where feasible, we apply anonymization, de-identification, aggregation, or other privacy-protective measures to reduce identifiability.
| SDK / Service | Provider | Purpose | Information Collected or Processed |
|---|---|---|---|
| RongCloud | RongCloud | Real-time messaging functions and related services | Device brand, device model, Android ID, operating system version, CPU information, memory usage, IP address, network access method and type, user ID under the App Key, app package name, time zone, language, app version, App Key, user token, RongCloud SDK version, mobile network operator code (MNO), API call error codes, and connection failure error codes. |
| Agora | Agora | Voice calls and audio/video communication services | Network type, local IP address, Wi-Fi and cellular signal status, operating system, device model, CPU, memory, device battery level, audio stream data, Bluetooth status, network latency, packet loss rate, bitrate, resolution, audio bitrate, and sample rate. |
| Facebook Events Manager | Meta | Event measurement, advertising attribution, and performance analysis | App activity, event data, device information, identifiers, attribution data, and analytics information, depending on your device settings and applicable law. |
| Google Sign-In | Account login and authentication | OpenID and related authentication information required to complete login. | |
| Adjust | Adjust | Install attribution and app analytics | App activity, device identifiers or other identifiers, attribution events, and analytics information. |
7. Device Permissions
We may request access to certain system permissions on your device to provide specific features. You may choose whether to grant these permissions. If you do not grant a permission, the related feature may not be available, but you may still be able to use other parts of the Services.
7.1 Photos, Media, and Storage
With your permission, we may access photo, media, and storage functions so that you can upload text, images, videos, profile content, or moments, and so that we can cache text, images, videos, and other content generated during your use of HaloYou. We do not automatically read your local photo album. We access selected images or videos only after you grant permission and actively choose the relevant content.
7.2 Microphone
With your permission, we use the microphone to enable voice input, voice chat, live room participation, and audio/video interaction. If you refuse this permission, voice-related features will not be available.
7.3 Camera
With your permission, we use the camera to enable photo capture, video recording, live video chat, and video room participation. If you refuse this permission, camera and video-related features will not be available.
7.4 Push Notifications
With your permission, we may send push notifications about messages, account activity, service updates, safety notices, and other relevant information. If you refuse this permission, you may not receive timely notifications.
7.5 Overlay / Display Over Other Apps
We may request overlay permission to keep voice party room content or floating controls available when you leave a room screen or use other app interfaces. If you refuse this permission, floating room functions may not work.
7.6 Device Information
With your permission where required, we may collect device information such as Android ID, IDFA, device model, operating system, app version, and related identifiers for account security, risk control, fraud prevention, device binding, troubleshooting, and service optimization. On iOS, certain identifiers such as IDFA are subject to Apple permission controls. If you refuse permission, some personalized display, attribution, security, or related functions may be unavailable.
7.7 Network Access and Network Status
Network access is necessary for HaloYou to connect to the internet and provide real-time communication services. We may also monitor network status and network changes for risk control, service availability, call quality, and user prompts about the current network environment. If network access is unavailable, you may not be able to use the Services normally.
8. Data Sharing and Disclosure
We may share personal information in the following circumstances:
- Service providers and SDK partners: with vendors that provide messaging, audio/video communication, hosting, analytics, attribution, login, customer support, payment, fraud prevention, and infrastructure services.
- Other users: when you choose to make information visible through profiles, live rooms, moments, messages, comments, virtual gifts, or other interactive features.
- Business transactions: in connection with a merger, acquisition, financing, restructuring, bankruptcy, sale of assets, or similar transaction, subject to appropriate safeguards.
- Legal and safety purposes: when required by applicable law, court order, subpoena, regulatory request, police investigation, law enforcement request, or when we believe disclosure is necessary to protect rights, safety, security, users, or the public.
- With your consent: when you authorize or direct us to share information with a third party.
We do not sell your personal information without authorization. Where certain advertising, attribution, or analytics activities are considered a "sale" or "sharing" under applicable privacy laws, we will provide required notices and choices.
9. Data Security
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information, including SSL/TLS encryption in transit, access controls, monitoring, account security measures, and internal data protection procedures. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. Data Retention
We retain personal information only for as long as necessary to provide the Services, fulfill the purposes described in this Privacy Policy, resolve disputes, enforce our agreements, prevent fraud or abuse, comply with legal obligations, and meet platform or regulatory requirements.
Some records may be retained for a limited period after account deletion where required for legal compliance, safety, fraud prevention, dispute resolution, accounting, or enforcement purposes. Where possible, retained data will be minimized, restricted, anonymized, or de-identified.
11. International Data Transfers
HaloYou may operate globally, and your information may be processed in countries or regions outside your place of residence. Where required by applicable law, we use appropriate safeguards for international transfers, such as contractual protections, technical measures, and other lawful transfer mechanisms.
12. Your Privacy Rights
Depending on your location, you may have certain rights under applicable privacy laws, including GDPR, CCPA/CPRA, and other data protection laws. These rights may include:
- Right to know or be informed about the personal information we collect, use, disclose, sell, or share.
- Right of access to request a copy of personal information we hold about you.
- Right to correction of inaccurate or incomplete personal information.
- Right to deletion of personal information, subject to legal exceptions.
- Right to portability to receive certain information in a portable format where required by law.
- Right to object or restrict processing in certain circumstances.
- Right to withdraw consent where processing is based on consent.
- Right to opt out of certain sale, sharing, targeted advertising, or marketing activities where applicable.
- Right to non-discrimination for exercising privacy rights.
To exercise your rights, please contact us at [itoolsdevteam@gmail.com]. We may need to verify your identity before responding to your request. We will respond within the period required by applicable law.
13. Account Deletion
You may delete your HaloYou account in the app by following this path:
Me > Settings > Delete Account
Account deletion is permanent and irreversible. After your account is deleted, your chat records, profile information, uploaded content, social activity records, and virtual assets will be cleared and cannot be restored.
This includes, without limitation, coins, diamonds, virtual gifts, backpack items, profile decorations, entrance effects, avatar frames, and any other virtual items associated with your account. These virtual assets cannot be refunded, transferred, recovered, or restored after deletion, except where required by applicable law.
14. Children's Privacy
HaloYou is not directed to children or anyone under 18 years of age. We do not knowingly collect personal information from individuals under 18. Parents or legal guardians who believe that a minor has provided personal information to us should contact us at [itoolsdevteam@gmail.com]. If we verify that such information was collected, we will take reasonable steps to delete it and restrict the related account.
15. California Privacy Notice
If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"), may provide you with additional rights, including the right to know, access, delete, correct, opt out of certain sale or sharing of personal information, limit certain uses of sensitive personal information, and not be discriminated against for exercising your rights.
We collect the categories of personal information described in this Privacy Policy, including identifiers, account information, commercial information, internet or electronic network activity, audio/visual information, device information, geolocation-related network information where applicable, and inferences based on app activity and preferences. We use and disclose these categories for the purposes described above.
16. Contact Us
If you have questions, requests, complaints, or concerns about this Privacy Policy or our privacy practices, please contact us at:
Email: [itoolsdevteam@gmail.com]