Last updated: April 2025 · Version 1.0
🔒 We take children's privacy seriouslyHailo App ("Hailo", "we", "us", "our") operates the Hailo mobile application, an educational companion app for autistic children. References to "you" or "your" mean the parent or legal guardian who created an account. References to "your child" mean the child whose profile you manage within the App.
Data Controller: Hailo App
Contact: privacy@gethailoapp.com
Website: gethailoapp.com
| Data | Purpose | Legal Basis |
|---|---|---|
| Email address | Account creation, login, communications | Contract performance |
| Password (hashed) | Account security | Contract performance |
| Account creation date | Service management | Legitimate interest |
| Data | Purpose | Storage |
|---|---|---|
| Child's first name | Personalisation | Firebase / Local |
| Age range (e.g., "3–5 years") | Content difficulty calibration | Firebase / Local |
| Diagnosis status (optional) | Feature recommendations | Firebase / Local |
| Support level (optional) | Content adaptation | Firebase / Local |
| Communication level | AAC board configuration | Firebase / Local |
| Learning challenges (optional) | Feature configuration | Firebase / Local |
| Favourite themes | Personalisation | Firebase / Local |
| Learning goals (optional) | Progress tracking | Firebase / Local |
| Sensory preferences | Accessibility configuration | Local device only |
| Data | Purpose | Storage |
|---|---|---|
| Session logs (feature used, duration) | Progress tracking, Parent Hub | Firebase / Local |
| Learning milestones | Progress reports, PDF export | Firebase / Local |
| AAC symbol usage patterns (aggregated) | Adaptive content delivery | Local device only |
| Activity completion records | Progress tracking | Firebase / Local |
| Data | Purpose |
|---|---|
| Device type and OS version | App compatibility and bug fixing |
| App version | Feature management |
| Crash reports | App stability |
| Feature usage events (anonymised) | App improvement |
| Session duration | Performance monitoring |
Firebase Analytics data is anonymised and aggregated. We have disabled advertising-related analytics features.
We use the data we collect to:
We do not use your data or your child's data for advertising, profiling for commercial purposes, or to sell to third parties.
We do not sell, rent, or trade your personal information. We share data only as follows:
We use Firebase services (Firestore database, Authentication, Analytics) operated by Google LLC. Data may be stored on Google's servers globally. Google processes this data as our data processor under a Data Processing Agreement. See Firebase Terms and Google Privacy Policy.
We have configured Firebase to: (a) disable advertising identifiers; (b) anonymise analytics where possible; (c) not enable cross-app tracking.
The App queries the ARASAAC API (operated by the Government of Aragón, Spain) to retrieve pictogram images. Only the search keyword (a plain word, e.g. "happy") is sent. No personal data is transmitted. See ARASAAC Terms.
We may disclose your information if required by law, court order, or government authority, or to protect the rights, property, or safety of Hailo, our users, or the public.
In the event of a merger, acquisition, or sale of assets, user data may be transferred. We will notify affected users and provide options in accordance with applicable law.
| Data Type | Retention Period |
|---|---|
| Account and profile data | Until account deletion, then 30 days |
| Session logs and milestones | 2 years from creation, or until deletion |
| Analytics data (Firebase) | 14 months (Firebase default, configurable) |
| Locally cached data (Hive) | Until app uninstall or manual data clear |
| Deleted account data | Fully purged within 30 days of deletion request |
We implement appropriate technical and organisational measures to protect your data, including:
No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
Depending on your jurisdiction, you may have the following rights:
Request a copy of data we hold about you and your child.
Correct inaccurate or incomplete data through the app or by contacting us.
Request deletion of your account and all associated data.
Restrict processing of your data in certain circumstances.
Request your data in a machine-readable format (GDPR).
Object to processing based on legitimate interests.
Withdraw optional consent at any time without affecting prior processing.
Review, correct, or delete your child's data at any time.
To exercise any of these rights, contact us at privacy@gethailoapp.com. We will respond within 30 days (or as required by applicable law). We may need to verify your identity before processing your request.
You have the rights listed in Section 9. You also have the right to lodge a complaint with your national data protection authority. Our primary supervisory authority will be determined based on our establishment. For a list of EEA authorities, visit edpb.europa.eu.
California residents have additional rights under the California Consumer Privacy Act:
We obtain meaningful consent before collecting personal information. You may withdraw consent at any time. You have rights to access, correct, and have your data deleted. Contact our privacy officer at privacy@gethailoapp.com.
We comply with the Australian Privacy Principles. You have rights to access and correct personal information we hold. You may also complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
Brazilian users have rights under the Lei Geral de Proteção de Dados, including access, correction, portability, deletion, and objection rights. Contact our Data Protection Officer at privacy@gethailoapp.com.
Users in other countries are protected by locally applicable data protection laws. We comply with applicable requirements and will respond to all legitimate privacy requests regardless of jurisdiction.
Your data may be transferred to and processed in countries other than your country of residence, including the United States (where Google/Firebase infrastructure operates). These transfers are made:
The Hailo mobile App does not use browser cookies. We use Firebase Analytics, which collects anonymised usage data as described in Section 2d. You can opt out of analytics collection by contacting us or adjusting Firebase-related settings on your device.
The App may contain links to third-party websites or resources. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies.
We may update this Privacy Policy from time to time. We will notify you of material changes via the App or by email at least 14 days before they take effect. If you disagree with the changes, you may delete your account before they take effect.
The current version is always available at gethailoapp.com/privacy and within the App.
For any privacy questions, data requests, or concerns, please contact:
We are committed to resolving privacy concerns promptly and will respond to all requests within 30 days.