App Privacy Policy
Last updated 4 October 2026 · version 2026-10-04
This covers the Halmoni app. The website has its own, shorter policy at halmoni.app/privacy. If you are the person being cared for and someone has entered your information here, the section for the person being cared for is written for you.
The short version
- Halmoni holds what your family types in: medications, doses, appointments, symptoms, notes, and details about the person you look after.
- Only the family members invited into your care circle can see it. They can all see everything in it.
- We do not sell it, do not advertise against it, and there are no analytics or tracking tools in the app.
- Before anyone’s health information can be entered, the person entering it has to record why they are allowed to — and the person it is about gets a printable notice.
- You can delete any of it, or all of it, from inside the app.
1. Who we are
Halmoni is run by Hana Choi. For anything about privacy, email privacy@halmoni.app.
Halmoni is not a doctor’s office, hospital, insurer or pharmacy, and we are not acting on behalf of one. That means HIPAA does not apply to us. Other laws do, and the rest of this page describes what we actually do rather than what we are permitted to do.
2. What the app holds
About you, the person using it
- Your email address, which is how you sign in.
- Your name, if you enter one, and which care circle you belong to.
- Which version of our Terms you agreed to, and when.
About the person you care for
Whatever your family enters, which may include:
- Name, nickname, date of birth, blood type.
- Medications, doses and whether each was given, skipped or missed.
- Conditions, allergies, symptoms.
- Appointments and notes from them.
- Pharmacy, doctor, insurance details, emergency contacts.
- Resuscitation preference and healthcare proxy, if recorded.
- Notes and messages your family writes to each other about their care.
3. Why we can hold someone else’s health information
The person being cared for usually never installs the app. Before their first record can be created, the family member setting it up must record which of these is true, and we store that answer with the date and who gave it:
- They told them about Halmoni and they agreed.
- They are the person’s health care agent, and it is in effect.
- They hold a power of attorney covering health care or health information.
- They are the court-appointed guardian of the person.
- The person can no longer decide, nobody holds any of the above, and they are the family member managing their care in that person’s best interest.
They answer a second, separate question: whether the person also knows that everyone invited into the care circle can see it.
The app produces a one-page notice, in large type, for the person being cared for — what is held, who can see it, and how to have it removed. It can be reprinted at any time from the Profile tab.
4. Who else touches it
We use other companies to run the app. They may only use the information to provide their service to us.
| Company | What it does | Where |
|---|---|---|
| Supabase | The database, file storage and sign-in codes | United States (us-east-1) |
| Sentry | Crash reports when the app breaks | United States |
| Expo | Builds and delivers app updates | United States |
| Apple | Distributes the app | United States |
| Vercel | Hosts this website | United States |
| Zoho | Our email, including privacy@halmoni.app | United States |
Crash reports are stripped before they are sent: names, medications, notes, email addresses and message contents are removed, and an automated check runs on every code change to confirm it. What is left is the technical detail of what broke.
5. What we do not do
- We do not sell your information, and we never have.
- We do not advertise, and we do not share anything for advertising.
- There are no analytics or tracking tools in the app. Not one.
- We do not use what you enter to train AI models.
- We do not send push notifications yet. If that changes, this page changes first.
6. On your phone
The app keeps its own copy on your device so it works without a signal. That copy is protected by your device’s passcode, and the app can be locked behind Face ID or a passcode in Settings. Be aware that the copy on the device is included in your phone’s ordinary backups.
The Care Kit PDF is made on your phone and handed to your phone’s share sheet. Wherever you send it is up to you; it does not pass through us.
7. Keeping it and deleting it
- Information stays until someone deletes it.
- Removing the person you care for deletes their record and everything attached to it — medications, doses, appointments, notes. It is erased from our database straight away, and from each phone in the care circle as soon as that phone next connects.
- Because the app works offline, each phone holds its own copy of the record. Deleting erases that copy rather than only hiding it. The one limit we cannot remove: a phone that is never opened again keeps whatever it already had until it connects.
- Signing out also erases this phone’s copy. So does deleting the app, or deleting your account.
- Deleting your account removes your account and your membership. Account ’› Delete account, inside the app.
- Deleted information is erased from the app and from our database straight away, and from our backup copies within 30 days, usually sooner.
8. For the person being cared for
If your family has entered your information here, it is still yours. You do not need an account, and you do not have to go through your family.
- Ask us what is held about you.
- Ask us to delete it. You do not have to give a reason.
- Withdraw your agreement at any time. Deleting the record is what that means in practice.
Email privacy@halmoni.app and we will answer within 45 days. We may need to confirm who you are before we act, and we may need to check with the family member who set it up — we will tell you if we do.
Washington, Nevada and Connecticut give people specific rights over health information like this, and California gives people rights over medical information held by services like ours. We apply the list above to everyone, wherever they live, rather than asking which state you are in.
9. Children
Halmoni is for adults. You must be 18 or older to have an account, and the app is not designed for recording a child’s care.
10. Security
Everything travels encrypted. Each family’s records are fenced off inside the database so one family cannot read another’s, and that fence is checked automatically rather than assumed. No system is perfect; if something goes wrong that affects your information, we will tell you.
11. Changes
The version and date are at the top of this page. If we change something that matters, the app will ask you to read it again rather than changing quietly.