Privacy Policy

What stays on your device

Halumo opens, previews, edits, saves, and exports your photographs on the device you are using. Your originals, previews, recipes, edit history, presets, sidecars, and exports are not uploaded to Halumo, and Halumo is not a cloud photo library. The single exception is Visual AI, described below: it is off unless you turn it on, and when it is on a downscaled copy of the photo as you have graded it accompanies your request.

Account information

If you sign in, Halumo receives the basic account information provided by your chosen sign-in provider, such as your name, email address, provider identity, and authentication tokens. Authentication is handled through the provider and Halumo's Supabase account service. Tokens are held in the protected credential store your operating system provides — the Keychain on macOS and iPhone, an Android Keystore-encrypted store on Android, and Windows Credential Manager on Windows — so the app can keep you signed in.

AI editing

Halumo's AI has two modes, and the app states which one a request will use before you send it.

Recipe AI is the default. It sends your written instruction, the editable settings needed to interpret that instruction, and measurements your device computes from the photograph — how bright the frame is, how much of it is clipped, and the same for any selection you have made — to Halumo's AI proxy, which forwards the request to its configured AI provider, currently Groq. Those measurements are numbers, and they describe no location within the frame. No part of the photograph itself is included.

Visual AI, shown as the Photo control in the app, is opt-in. It is off at every launch, it asks for your agreement once before its first send, and it can be turned off again at any time. When it is on, a request additionally carries a small, downscaled copy of the photo as you have graded it — the pixels those measurements describe — to the same service under the same allowance. Your original file and any RAW never leave your device, and location and capture information are never included.

AI usage of either kind is associated with your Halumo account to enforce the displayed allowance.

Service data and retention

Halumo's account service stores account records and the service data needed for authentication and AI allowance accounting. Service logs and AI-provider processing are handled according to the applicable service providers' retention and privacy terms.

Deletion and sign-out

You can sign out from Settings → Account. You can permanently delete your Halumo account from the same screen. Account deletion removes the Halumo account and associated server-side account and AI-usage records. Files stored on your own device, including photos and local edits, are not deleted by account deletion. If you no longer have Halumo installed, you can request deletion at halumo.pages.dev/delete-account.

Changes and contact

We may update this policy when Halumo's data practices change. The version and date shown here identify the current published copy. For privacy questions or deletion problems, contact Halumo support at halumo.pages.dev/support.