Privacy Policy

Last updated: November 15, 2026

This Privacy Policy explains how HaloNexus ("we", "us") collects, uses and protects information when you use the HaloNexus mobile app, HaloNexus digital photo frames and this website (together, the "Service").

1. Information we collect

• Account information: your email address, password (stored only as a hash), username, profile picture and language preference. If you sign in with Google or Facebook, we receive your email address and basic profile from that provider.
• Frames and members: which frames are linked to your account and which family members you have invited.
• Photos, videos and greetings you send: the files themselves, plus metadata such as caption, sender, target frame and a file checksum.
• Device information: frame firmware version, storage status and last-online time.
• Push notification tokens for the mobile app.
• Feedback you send us from the app, including any screenshots you attach.
• Technical logs: service access logs, including IP addresses, used for security and troubleshooting.
• Weather location: city level only. We do not collect your precise location.

2. How we use information

We use information only to provide and operate the Service: to create and secure your account, link frames, deliver your photos, videos and greetings to the frames you choose, send service emails (such as verification codes), keep the Service secure, and respond to your requests.

We do not analyze the content of your photos or videos, we do not use face recognition, and we do not sell your personal information.

3. How long we keep it

• Photo and video files are deleted from our cloud storage 7 days after upload. Once delivered, they are kept on the frame you sent them to.
• Photo and video metadata is kept until you withdraw the item or delete your account.
• Account information is kept while your account is active. When you delete your account, it is closed immediately and the remaining account data is purged within 30 days. See how to delete your account.
• Records of your consent to our terms and policies are kept for 5 years after the consent relationship ends (for example, after the frame is factory reset), so that we can demonstrate compliance.
• Technical logs are kept for a limited period for security and troubleshooting.

4. Where data is stored and who processes it

Our cloud service runs on Amazon Web Services in the United States (us-east-1). We use service providers only to run the Service: Amazon Web Services (hosting, storage and email delivery), Google Firebase Cloud Messaging and Apple Push Notification service (app notifications), and Google and Facebook (only if you choose to sign in with them). If you use the Service from outside the United States, your information is transferred to and processed in the United States.

5. Your rights

You can access, correct or delete your information in the app or by emailing us. To delete your account, follow the steps on our account deletion page. Depending on where you live (for example under the GDPR in the European Union, or US state privacy laws such as the CCPA), you may have additional rights, including data portability and the right to object. We respond to requests within one month.

6. Security

Data is encrypted in transit, and access to our systems is restricted to authorized personnel. No method of transmission or storage is completely secure, but we work to protect your information.

7. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will delete it.

8. Changes

We may update this policy. We will post the new version on this page and update the date above; for significant changes we will also notify you in the app or by email.

9. Contact

Questions or requests: info@caryinnovation.com.