Last updated: April 2026
This page describes the privacy practices specific to bitHuman Halo, the free macOS desktop app. For our general privacy policy covering all bitHuman products, see /legal/privacy.
What we collect
Halo sends lightweight telemetry events so we can understand how the app is used and improve it. The event types are:
- install — first-ever launch on a device
- session_start — app opened
- heartbeat — periodic ping while the app is running
- session_end — app closed or backgrounded
- persona_changed — you picked a different persona
- identity_swapped — you swapped avatar identity
- barge_in — you interrupted the persona mid-speech
- sign_in — you signed in (anonymized user id only)
- sign_out — you signed out
- link_clicked — you clicked an in-app link (link id only)
Each event carries a small set of metadata: app version, macOS version, Mac model identifier, and coarse country (geolocated from IP — not precise location). Every device gets a random install_id UUID that is not tied to your Apple ID or hardware identifiers.
What we don't collect
- Voice audio or microphone streams
- Portrait images or camera frames
- Custom prompts or persona instructions you write
- LLM transcripts or any conversation content
- Keystrokes, screen recordings, or clipboard contents
Audio, video, and conversation data from your Halo sessions stay on your device or in the real-time media pipeline — they never reach our telemetry store.
Retention
Raw telemetry events are kept for 13 months and then automatically deleted. Aggregate metrics (daily totals, country counts, version adoption curves) that do not identify any individual device are kept indefinitely.
Opt-out
Halo has a single toggle in Settings → Privacy → Share usage data. When switched off, Halo sends zero network calls to our telemetry endpoint — no pings, no heartbeats, nothing. The toggle state is checked before every event is queued, so you can turn it off mid-session and traffic stops immediately.
Delete my data
Halo has a one-click Settings → Privacy → Delete my telemetry button. Pressing it sends your install_id to our deletion endpoint, which removes every event matching that id from our telemetry store. You will receive an in-app confirmation once the delete is complete (typically within a few seconds).
Contact
Privacy questions, deletion requests, or feedback: privacy@bithuman.ai