Privacy Policy

Last updated: July 31, 2026

This Privacy Policy explains how Haloway (“we”, “us”) collects, uses, and protects your information when you use our editorial writing studio (the “Service”). We aim to collect only what we need to run the Service well.

1. Information we collect

  • Account information — your name, email address, and authentication credentials when you register.
  • Profile information — optional details you provide, such as graduation year, dream school, and background information used to personalize writing assistance.
  • Your content — the essays, drafts, versions, and activities you create in the Service.
  • Admissions outcomes— information about your admissions results and any supporting documentation you provide, which you agree to share with us as a condition of using the Service (see our Terms & Conditions).
  • Billing information — handled by our payment processor; we store a customer reference and subscription status, not your full card details.
  • Usage and device data — basic analytics such as pages visited and feature usage, and technical data like browser type, used to keep the Service reliable and improve it.

2. How we use your information

  • to provide, maintain, and improve the Service;
  • to save and sync your work, and to generate the writing feedback you request;
  • to develop, test, evaluate, and improve our features, including building and training Haloway’s own models, classifiers, and quality benchmarks;
  • to process payments and manage subscriptions;
  • to communicate with you about your account, security, and product updates (you can opt out of non-essential email);
  • to detect, investigate, prevent, and address fraud, abuse, plagiarism, academic-integrity violations, and security incidents; and
  • to comply with legal obligations.

Anonymized and aggregated data. We may anonymize, de-identify, or aggregate any information collected through the Service — including usage data, content-derived insights, and admissions outcomes — so that it no longer identifies you. We refer to this as Derived Data, and as described in Section 3 of our Terms & Conditions, Haloway owns it. Because Derived Data is no longer personal information, we may use, retain, publish, disclose, and license it for any lawful purpose, without restriction — including, for example, marketing and promotional materials, abuse prevention and platform operations, research, usage and admissions trends, benchmarks and statistics, product development, and making it available to third parties for training, fine-tuning, and evaluating artificial-intelligence models. We will not attempt to re-identify Derived Data.

3. AI processing

When you request AI-assisted feedback, the relevant portion of your content is sent to third-party AI providersand processed on their systems to generate a response. Those providers handle your inputs and outputs under their own terms and privacy practices, which we do not control. Haloway does not sell your content, and we instruct our providers not to use it for their own model training where that option is available to us. Statements in this policy and in our marketing about not selling or sharing your data describe Haloway’s own conduct, not that of the third-party providers who process data to deliver the Service, and carry the meaning given in Section 3 of our Terms & Conditions.

Separately, Haloway may use your content to develop and improve our ownfeatures, models, and quality benchmarks, and may create and use Derived Data as described in Section 2 above and in our Terms & Conditions.

4. How we share information

We do not sell your personal information — meaning we do not disclose information that identifies you to third parties in exchange for money. We share it with service providers who process data on our behalf — such as hosting, authentication, payment processing, email delivery, and AI processing — under agreements that require them to protect it. We may also disclose information if required by law, to protect the rights, safety, and security of our users and the Service, or in connection with a merger, acquisition, financing, or sale of assets. This commitment does not restrict our use or disclosure of Derived Data, which does not identify you.

Administrative access. Authorized Haloway personnel and administrators, and automated systems acting on our behalf, may access, review, and analyze your account information and content where needed to operate and improve the Service, provide support you request, evaluate quality, detect and investigate abuse, enforce our Terms, or protect the Service and its users. They will not sell your data.

5. Data retention

We keep your information for as long as your account is active or as needed to provide the Service. When you delete your account, we delete or anonymize your personal information within a reasonable period, except where we must retain it to comply with legal obligations or resolve disputes. Deletion does not require us to delete or unwind Derived Data already created, models or systems already trained or improved, results already published, or routine backups and logs, as described in Section 3 of our Terms & Conditions.

6. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can update much of your information directly in your settings, or contact us to exercise these rights.

7. Security

We use technical and organizational measures designed to protect your information, including encryption in transit and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. Children’s privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, please contact us so we can remove it.

9. Cookies and analytics

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the Service is used. We may use privacy-conscious analytics providers (such as Google Analytics) to collect aggregated usage data. You can control cookies through your browser settings; disabling some cookies may affect how the Service works. We do not use your content for advertising, and we do not run third-party ad networks on the Service.

10. International data transfers

We and our service providers may store and process your information in the United States and other countries where those providers operate. These countries may have data-protection laws different from those in your location. Where required, we rely on appropriate safeguards for such transfers.

11. Changes to this policy

We may revise, update, or replace this Privacy Policy at our sole discretion, at any time, and without prior notice. Changes are effective upon posting, with the “Last updated” date revised accordingly. We may, but are not obligated to, provide additional notice of material changes. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

12. Contact

Questions about your privacy? Reach us through our contact page.