Last updated 5 October 2026 · Version 2.0
Halotech exists to help keep you safe, and that starts with how we treat your information. This policy explains what we collect, why, who sees it, and what you can do about it.
This policy covers the Halotech app and alert service, our website at halotechjewellery.com, our waitlist and marketing, and our online shop. It is provided by Halotech Jewellery Pty Ltd (ABN 72 692 999 385, ACN 692 999 385), Suite 2, 74 Park Avenue, Kotara NSW 2289, Australia ("Halotech", "we", "us" and "our").
It is written to meet the Australian Privacy Act 1988 and the Australian Privacy Principles, the UK General Data Protection Regulation and Data Protection Act 2018, and the New Zealand Privacy Act 2020.
If someone has added you as their emergency contact, the part written for you is section 3.
When you set up the app, we ask for:
You need to give us all of these to create an account. Without them, the app cannot work.
If you choose to open the app with Face ID or your fingerprint, that is handled entirely by your phone. We never receive your face or fingerprint data.
For each person you add, we hold their first and last name, their mobile number, and a record of your confirmation that they have agreed to receive alerts from us. That record includes the exact wording you saw, the date and time, your account, the app version and your country. It is never changed after it is made.
If you let the app see the contacts on your phone, that is only so you can pick someone quickly. We only receive the people you choose to add, never your whole address book.
The app reads your phone's location when you trigger an alert, and at no other time. It sends that position to your emergency contacts as a map link, with the time it was taken, and keeps it as part of the record of that alert.
The app asks for permission to use your location "always" or "all the time". That is because an alert can be triggered from your bangle while your phone is locked or the app is closed, and without that permission the app could not find you at the moment you need it. It does not mean the app is following you. We do not track your location between alerts, we do not build a history of where you go, and we do not use your location for anything other than the alert you sent.
If you turn location off, an alert can still be sent, but it will not tell anyone where you are. Your location comes from your phone. The bangle has no GPS and does not know where you are.
When you trigger an alert, we keep a record of it: when it started and ended, the location that was sent, which of your contacts it went to, and whether the mobile network reported each message as delivered. We keep this record for seven years, for the reasons given in section 8.
On an iPhone, the alert text is sent by us. On an Android phone, it is sent from your own phone using your own SIM, so the message itself goes through your mobile network rather than through us, and it appears in your own sent messages. Either way, the app records the alert with us.
Removing an alert from the history in your app hides it from you, but does not delete our record of it.
Fake Call plays a simulated incoming call on your phone. No call is made and nothing is sent to anyone. We store the name you choose for the caller.
So that Fake Call behaves like a real incoming call, your phone may ask you to allow the app to use your microphone. We never receive or store any audio.
We record which bangle is paired to your account, its battery level, and whether it is connected. We keep a log of connections for 30 days so we can diagnose faults. We also hold basic information about your phone, such as its type, operating system and app version, and a notification token so we can send you the notifications you have switched on, such as the low battery warning. Notifications are off until you turn them on.
If you contact us for help, we keep what you tell us and our replies.
This section is for you if you received a text message, from Halotech or from someone's own phone, saying they had added you as an emergency contact.
Someone who knows you added your name and mobile number to their Halotech app, and confirmed to us that you had agreed to receive emergency alerts from them. We did not get your details from anywhere else.
Your name and mobile number as they entered them, the date they added you, the message we sent telling you about it, and any alerts that were sent to you. We hold nothing else about you.
We send you one message when you are added, telling you who added you and how to opt out. After that, we only message you if they trigger an alert. We never send you marketing, and we never give your number to anyone else.
Text STOP to the number shown in any message from us, and we will never message that number again, for anyone. You do not need their permission and you do not need to tell them. You can also email support@halotechjewellery.com with the number you want removed.
When you opt out, we keep your mobile number on a do-not-message list permanently, with nothing else attached to it. That is the only way we can be sure a future message never reaches you, even if someone else adds you later.
If the message came from someone's own mobile number rather than from Halotech, they are using an Android phone and sent it themselves. Replying to them is quickest, but you can also write to us and we will remove your details from our records.
You have the same rights over your information as the people who use Halotech. They are set out in section 12.
If you join our waitlist, we collect your email address and, if you choose, your mobile number, along with a record of what you agreed to receive and when.
If you tick the SMS box, you agree to receive recurring automated marketing text messages from Halotech Jewellery at that number. Consent is not a condition of any purchase. Message frequency varies. Message and data rates may apply. Reply STOP to opt out, or HELP for help.
Our marketing is for adults. We do not knowingly send marketing to anyone under 18.
Our website asks before it sets any analytics or advertising cookies, and sets none unless you
accept. If you accept, we use Google Analytics (the _ga and _ga_3QDP5G8LCF
cookies, kept for up to two years) to understand how the site is used, and the Meta Pixel (the
_fbp cookie, kept for up to three months) to measure our advertising on Facebook and
Instagram. You can change your choice at any time using Cookie settings at the foot of our website.
When you buy a bangle, we collect your name, delivery address, email address, phone number and order details, so we can take payment, deliver your order, and handle returns and warranty claims. Our shop runs on Shopify. Payments are handled by our payment providers, and we never see or store your full card details. We give your delivery details to our couriers, such as Australia Post.
We use your information to provide Halotech and to run our business. We do not sell it, and we do not use information from the app to market to you. If you want to hear from us about new products, that is a separate choice you make on our website.
If you are in the UK, the law requires us to tell you the legal basis for each thing we do:
| What we do | Legal basis |
|---|---|
| Run your account, the app, Fake Call and alerts, and check it is really you | To provide the service you asked for (contract) |
| Send invitations and alerts to your emergency contacts | For you, contract. For your contacts, our legitimate interest in helping you get help from people who have agreed to give it |
| Keep records of alerts for seven years | Legitimate interests: preserving evidence that may be needed to protect you or establish what happened |
| Keep the list of numbers that replied STOP | Legal obligation |
| Help you when you contact us, fix faults, and keep Halotech secure | Legitimate interests |
| Send marketing, and use analytics and advertising cookies on our website | Consent, which you can withdraw at any time |
| Take orders, and keep tax and accounting records | Contract, and legal obligation |
Where we rely on legitimate interests, we have weighed them against your rights and freedoms, and you can object, as explained in section 12.
We never sell your information. We share it only in the ways below.
When you trigger an alert, your contacts receive your name, the fact that you need help, a map link to where your phone was, and the time. That is the whole purpose of Halotech.
The map link is a Google Maps link, so when a contact opens it, Google receives the location in the link under its own privacy terms. Once a message has been delivered it sits on your contacts' phones, and we cannot recall or delete it.
These companies act on our instructions, under contracts that require them to protect your information and use it only to provide their service to us.
| Who | What they do for us | Where |
|---|---|---|
| Amazon Web Services | Hosts our servers and database, where your account, emergency contacts and alert records are kept | United Kingdom (London) |
| Google (Firebase) | Sends and checks the sign-in code to your mobile, and delivers app notifications | United States and other countries |
| Google (Maps) | Maps in the app, and the map link in alert messages | United States and other countries |
| BulkSMS | Sends our text messages: invitations to emergency contacts, and alerts from iPhones | Australia |
| Brevo | Sends our emails, such as sign-in codes and account messages | France |
| Techugo | Builds and supports our app, and has access to our systems to do so | India |
| Klaviyo | Our waitlist, and marketing by email and text | United States |
| Netlify | Hosts our website | United States |
| Google Analytics and Meta | Website analytics and advertising measurement, only if you accept cookies | United States |
| Shopify and our payment providers | Our online shop, and taking payment | Canada, and other countries |
Apple and Google also deliver notifications to iPhones and Android phones, as part of how those phones work. Every text message passes through mobile networks on its way, including your own network when an alert is sent from an Android phone.
Only where the law requires or allows it. See section 13.
If Halotech is sold or merged with another business, your information may pass to the new owner, who must continue to protect it in line with this policy.
The information the app holds about you, your emergency contacts and your alerts is stored on Amazon Web Services' servers in London, in the United Kingdom.
Some of it is also handled in other countries by the companies listed in section 6: Australia, India, the United States, France and Canada. Techugo, in India, can access our systems remotely to build and support the app.
If you are in Australia, we take reasonable steps, including through our contracts, to make sure these companies handle your information consistently with the Australian Privacy Principles. We remain accountable for how they handle it.
If you are in the United Kingdom, information sent to France and the rest of the European Union, or to Canada, needs no extra protection, because UK law recognises those places as adequate. For the United States, we rely on the UK Extension to the EU-US Data Privacy Framework, or on standard contractual clauses with the UK Addendum. For Australia and India, which UK law does not recognise as adequate, we use the UK International Data Transfer Agreement. You can ask us for a copy of the safeguards that apply to your information.
If you are in New Zealand, we only send your information overseas where the recipient is bound by privacy laws comparable to New Zealand's, or has agreed in its contract with us to protect it to that standard.
Every period below is applied automatically. When it ends, the information is deleted, not just hidden.
| Information | How long | Why |
|---|---|---|
| Your account: name, email, mobile, age band and PIN | While your account is open, then erased within 30 days of deleting it | To run the service |
| Records of alerts, including the location sent | 7 years | If something happened to you, they may be the only evidence of where you were and when. Police, a court or your family may need them |
| The log of alert messages and whether they arrived | 7 years | Proof that an alert was sent, to whom, and whether it was delivered |
| Emergency contacts | While they are on your list, then 24 months. If they were sent an alert, they are kept with the record of that alert | To answer a question or complaint from that person |
| Your confirmation that a contact agreed | 24 months after the contact is removed | Our evidence that we were entitled to message them |
| Invitation messages | 24 months | The same evidence as above |
| Bangle connection logs | 30 days | To diagnose faults, and to show whether the bangle was working at the time of an alert |
| Support messages | 24 months | To handle warranty claims and complaints |
| Backups | Overwritten within 30 days | So that when something is deleted, it is deleted everywhere |
| Numbers that replied STOP | Permanently, as the bare number only | So we never message that number again, for anyone |
| Waitlist and marketing | Until you unsubscribe, after which we keep only enough to stop messaging you | So an unsubscribe stays an unsubscribe |
| Orders, tax and accounting records | As long as the law requires, generally five years in Australia | We are required to keep them |
If you want your alert records deleted sooner than seven years, tell us and we will consider it. The period exists to protect you and your family, not us, and there are situations where you may not want it.
No system is perfectly secure. If a breach affects your information, we will tell you, and the relevant regulator, where the law requires us to.
The Halotech app is for people aged 13 and over. You cannot create an account if you are under 13.
We ask which age band you are in when you set up the app, but we give everyone the same protections whatever their age. Your location is only used when you trigger an alert, there are no ads, we do not sell your information, and we do not market to you through the app.
Our website marketing is for adults, and we do not knowingly send marketing to anyone under 18.
If you are under 18, we encourage you to talk to a parent, carer or another adult you trust before you set up Halotech. If you are a parent or carer with a question about a young person's account, contact us. We will help where we can, bearing in mind that young people have privacy rights of their own.
Halotech is designed to be discreet, but some things can be seen by anyone with access to your phone or your accounts:
If you share a phone, an email account or a cloud backup with someone you would not want to know that you use Halotech, please keep this in mind.
Wherever you live, you can ask us to:
You can download a copy of your app data, and delete your account, yourself, from Settings then Your data in the app. Our Delete your account page explains exactly what is removed and what is kept.
If you are in the UK, you also have the right to restrict how we use your information, to object to us using it on the basis of our legitimate interests, to receive it in a portable format, and to withdraw your consent at any time.
To make a request, email support@halotechjewellery.com from the email address on your account. We may need to confirm it is really you before we act, because handing someone's information to the wrong person is exactly the kind of harm Halotech exists to prevent. We do not charge, and we will respond within 20 working days.
We only give information to the police, courts or other authorities where the law requires or allows us to, for example under a warrant or court order, or where we believe it is necessary to prevent a serious threat to someone's life, health or safety. Where the law allows, we will tell you that a request was made.
Your alert records may be important evidence if something happens to you. If you, your family or your legal representative need them, contact us.
If you are unhappy with how we have handled your information, please tell us first at support@halotechjewellery.com and we will try to put it right. We will respond within 20 working days. If you are not satisfied with our response, you can complain to the regulator where you live:
We will update this policy when the way we handle information changes, and change the date at the top. If a change affects you significantly, we will tell you in the app or by email before it takes effect.
Halotech Jewellery Pty Ltd
ABN 72 692 999 385 · ACN 692 999 385
Suite 2, 74 Park Avenue, Kotara NSW 2289, Australia
Email: support@halotechjewellery.com
New Zealand freephone: 0800 422 165
Related: Terms of Use · Support · Delete your account