Privacy Policy

Last updated: September 20, 2026

How we handle your photos

Photos, videos, locations, album contents, and photo-library identifiers are processed only on your device and are not uploaded to the Halo Memories deletion quota service. The app stores your organization progress, Pending Deletion list, basic photo information, and similar-photo analysis results on your device.

Deletion and recovery

Halo Memories does not delete photos automatically. Items move to Recently Deleted only after you actively confirm and approve the Apple Photos system prompt. You can restore items in Apple Photos while they remain in Recently Deleted. Apple Photos and your settings determine when they are permanently deleted.

Data collected by the free allowance service

To provide the monthly free deletion allowance, prevent duplicate accounting, and recover interrupted operations, the Firebase service processes a hashed anonymous installation credential, random transaction identifiers, a random local identifier for the offline allowance, reserved and used allowances, deletion counts, quota periods, request times, and App Check attestation data. Firebase also processes technical data normally needed for network services, such as IP addresses and user-agent information. This data does not include photos, videos, locations, or photo-library identifiers and is not used for advertising or cross-app tracking.

Offline use

While connected, you can reserve your remaining free allowance for the current month. Offline deletions are recorded on this device, and deletion counts sync when you reconnect. A connection is needed to obtain a valid allowance when your allowance is used up, the month has ended, or you have not obtained an allowance for the first time. The server does not receive the photo identifiers involved in these transactions. Original shared files may contain location and other embedded metadata. Live Photos are currently shared as still images.

Retention and deletion

General app data can be removed by deleting the app. Anonymous credentials, unused offline allowance, and pending transactions are stored in the device Keychain, may remain after reinstallation, and are not transferred through iCloud Keychain. This does not automatically restore or delete items in Apple Photos. Anonymous quota records are retained only as long as needed to enforce allowances, prevent replay, handle refunds, recover operations, and comply with legal obligations. Contact us to ask about or request deletion of quota records associated with your installation. Because the service does not store names or email addresses, we may need technical information that identifies the installation.

Third-party services

Halo Memories uses Google Firebase Functions, Firestore, and App Check for the anonymous quota service. Apple StoreKit handles purchases and subscriptions. Apple PhotoKit provides photo-library access and deletion confirmation. These services process data under their respective privacy policies.

Your choices and contact information

You can change photo-library and notification permissions in iPhone Settings at any time. For privacy questions or deletion requests, email dongdongig0802@gmail.com.