Website access requests and contact messages
An access request stores your email, optional name and selected use case, submission time and the time and version of your consent to contact about beta access. A contact request stores your email, optional name, selected topic, message and submission time. These requests are recorded for review by the Halli team, not an advertising email subscription.
Form records do not store your IP address, advertising attribution or conversation content. Website form requests currently remain in the review queue until handled manually; there is no automatic expiry or self-service form deletion. Use the contact form for a privacy or deletion request.
These requests are separate from a beta account. Deleting an app account does not automatically delete a website form request; use the contact form to ask about access to or deletion of that request. Do not put sensitive information in a form.
Live audio, camera and messages
Halli processes messages, images, microphone audio and camera frames that you choose to share so it can respond. The microphone starts when you start a call and permit access. Camera sharing requires a separate user action and permission. End releases microphone and camera capture.
Halli does not store raw microphone audio or live camera frames. Live content is still sent to service providers for processing. A private session is not a promise that no third party processes content, that no operational records exist or that communications are end-to-end encrypted.
Optional history and approved memory
You choose whether Halli saves conversation text, sources, takeaways and next steps so you can return later. Turn history off or start a private session to stop saving new conversation content. Turning history off does not remove older saved conversations.
Memories require your approval or manual entry. You can review, edit or forget them. Forgetting a memory removes it from future memory context but does not remove the source conversation text. Conversation and memory deletion are separate controls.
Account, access and operational records
Halli stores a beta display name, invitation and account status, hashed access credentials, session timing, connection status and usage needed to operate and protect the beta. Usage records help enforce allowance and capacity; they are not a current charge to you.
If you create email/password sign-in, Halli stores your email as an unverified sign-in identifier and a salted password hash, not your plaintext password. Invitations, session credentials and recovery codes are stored as one-way hashes. One-use recovery codes expire after one hour and come from your inviter; Halli does not send password-reset emails.
Device-local settings keep your voice and appearance choices. Operational analytics exclude raw audio, camera frames, conversation text, credentials and secret tokens. Network and hosting services also process request information needed to deliver and protect the service.
Apps you choose to connect
Connections are optional and no app tools are enabled by default. You choose the account and individual read tools Halli may use, then save those permissions. Halli reads for your current request using enabled tools, not background monitoring. Current tools cannot send messages or change connected-app data.
Authentication and app requests are processed by the connection service and app provider under their own policies, including in a private conversation. Halli stores connection identifiers, permission choices and limited tool-call status, not app access tokens or raw tool results. Answers based on app data follow your history choice.
Turning tools off or disconnecting stops future access. It does not erase answers already saved in your conversations; delete those separately. You can also manage app authorizations with the app provider.
Feedback and service providers
In-app feedback stores the category and text you submit, the date and your account identity for review. No conversation, audio or camera recording is automatically attached. Deleting your beta account also deletes its in-app feedback.
Service providers process content and request information as needed for hosting, live responses, generated answers, retrieval and optional app connections. Their processing and retention are governed by applicable service arrangements and their policies; Halli does not promise that every provider stores nothing or processes data only in your country.
Cookies and optional measurement
Essential storage supports website choices and beta access. Optional website analytics and advertising measurement are off until you choose them in cookie preferences. No optional analytics or advertising tags are active on this website at present.
Optional measurement is not used on private app pages, legal pages or support forms. Halli does not send conversations, audio, images, camera frames, form messages, email addresses or account credentials to advertising networks. Read the cookies notice and reopen cookie preferences to change or withdraw your optional choices.
Access, export and deletion
Settings lets members export saved conversations, memories and next steps, clear history or memories and permanently delete their account. Clearing one type of data does not necessarily clear another; review the control before using it. Disconnecting an app and deleting a saved answer are also separate actions.
Use the contact form for questions about this notice or requests concerning your personal information. We may ask for appropriate verification before providing account data or acting on an account request. Do not send your password or recovery code.
Changes and important limits
The beta and this notice may change. The date at the top identifies this version. Check the notice when deciding what to share or enable.
Halli is not an emergency, medical, legal, financial or mental-health service. Avoid sharing highly sensitive information and verify important answers independently.