HaloMax Privacy Policy

Last updated: April 10, 2026

HaloMax ("we", "our", "us") operates the HaloMax mobile application. This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our app.

Information We Collect

When you use HaloMax, we may collect:

• Account information (email address) through Apple Sign-In or Google Sign-In
• Photos you take for facial analysis
• Gender and age range (provided during onboarding)
• App usage data (scan history, progress tracking)

Face Data Collection and Use

HaloMax collects facial photos (front-facing and side profile) that you voluntarily submit for analysis. Here is how we handle your face data:

• What we collect: Front and side profile photos of your face, taken through the app's camera.
• How we use it: Your photos are sent to OpenAI's API (GPT-4o vision model) for AI-powered facial analysis. The analysis returns numerical scores and metrics for facial features such as symmetry, skin quality, and bone structure. Your photos are also stored in your account so you can view past scan results.
• Third-party processing: Your photos are transmitted to OpenAI for analysis. OpenAI processes the images in real-time to generate your results. OpenAI's data usage policies apply to this processing — you can review them at https://openai.com/policies/api-data-usage-policies.
• Storage: Your photos and analysis results are stored securely in your HaloMax account via Supabase. Photos are retained as long as your account exists so you can track your progress over time.
• Sharing: We do not sell or share your face data with anyone other than OpenAI for the purpose of analysis. No other third party receives your photos.
• Deletion: You can delete your account and all associated data, including all photos and scan results, at any time from the Profile page in the app.
• Consent: Before your first scan, the app asks for your explicit consent to send your photos to OpenAI for analysis.

How We Use Your Information

We use the collected information to:

• Provide AI-powered facial analysis
• Track your progress over time
• Generate personalized improvement plans
• Manage your account and subscription

Third-Party Services

We use the following third-party services:

• Supabase — authentication and data storage (stores your account info, photos, and scan results)
• OpenAI — facial analysis AI processing (receives your photos for analysis via their API)
• RevenueCat — subscription management (processes subscription status, no access to your photos)
• Apple Sign-In and Google Sign-In — authentication

Data Security

We value your trust and strive to protect your personal information. All data is transmitted using encrypted connections (HTTPS/TLS). Your data is stored securely via Supabase's infrastructure.

Your Rights

You may delete your account and all associated data (including photos, scan results, and profile information) at any time from the Profile page within the app. You can also contact us at HaloMax.App@Gmail.com for any data-related requests.

Contact Us

If you have questions about this privacy policy, contact us at HaloMax.App@Gmail.com.