Privacy Policy
Who we are
Helica ("we") operates the Helica and Helica Coach iOS applications and the helica.lt website. Helica connects rehabilitation and posture coaches with their clients: coaches build exercise programs, and clients follow them. Questions about this policy: helica.app@gmail.com.
Data we collect
- Account data. When you sign in with Apple or Google we receive your name (when the provider shares it) and email address. We use no passwords of our own.
- Client records. Coaches keep a record for each client: display name, email address, and invitation status.
- Program and activity data. Exercise programs, homework and workout assignments with notes, and the completion history of exercises and workouts.
- Posture scan results. A scan stores numeric measurements (for example shoulder or pelvis tilt in degrees) and the resulting finding labels. When a coach saves a scan to a client's record, the three annotated scan photos are stored with it in private storage in the European Union — visible only to the coaching practice, served through short-lived links, and deleted whenever the practice deletes the scan or removes the client. A scan done without choosing a client stores nothing at all, and photos are saved to your device's photo library only when you explicitly choose to save them.
- Email delivery log. When a coach emails a program PDF, we record to whom and when it was sent.
- On your device only. App preferences, reminder settings, and onboarding drafts stay in local storage on your phone and are not transmitted to us.
What we do not collect
The apps contain no analytics, advertising, or tracking SDKs, and do not track you across other companies' apps or websites. We do not collect your location. We do not process payments and hold no payment details.
How we use your data
Solely to provide the service: operating coach–client program delivery, showing activity history, producing posture scan results, sending the emails described above, and keeping the service secure. Where the GDPR applies, our legal bases are performance of the service relationship, our legitimate interest in securing it, and your consent where we ask for it (for example notification, camera, and photo-library permissions). We do not sell or share personal data for advertising, and health-related measurements are never used for marketing.
Where data is stored and how it is secured
Backend data is hosted with a cloud provider in the European Union, and all traffic between the apps and the backend is encrypted. Access rules are enforced on the server: coaches can only reach their own practice's clients, and clients only their own records. Invitation codes and confirmation links are stored in unreadable form, never as plain text.
Third parties that receive data
- Our hosting provider — stores the backend data and handles sign-in sessions in the EU, processing all stored data above on our behalf.
- Apple / Google — provide sign-in; they process your authentication under their own policies.
- Our email delivery provider — sends our service emails (invitations, confirmation links, program PDFs) and receives the recipient address and email content for that purpose.
- YouTube — exercise videos are embedded in privacy-enhanced mode (youtube-nocookie.com) and load only when you open a video; YouTube's own terms and privacy policy apply when you play one.
These providers may only use the data to provide their service to us and are required to protect it to at least the standard described in this policy. Where any of them process data outside the European Economic Area, they do so under recognized safeguards such as EU standard contractual clauses.
Health-related data
Posture measurements and coach-assigned exercise programs are wellness information handled with care: they are visible only to you and your coaching practice, are never used for advertising, and are never sold. They are posture insights, not medical records, medical advice, or a diagnosis.
Your rights and controls
- Delete your account — available in the Profile screen of both apps; it removes your sign-in account and the data linked to it. Records your coach keeps about you as their client (your program and history) can be removed too — ask your coach, or email us and we will handle it.
- Sign out at any time.
- Permissions — camera, photo-library ("add only") and notification access are optional, asked through the standard iOS prompts, and you can revoke any of them at any time in iOS Settings.
- Where the GDPR applies, you also have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with a supervisory authority (in Lithuania, the State Data Protection Inspectorate). Contact helica.app@gmail.com to exercise them.
Data retention
We keep data for as long as your account or the coaching relationship is active. Deleting your account removes the data linked to it immediately; client records removed by a coach are deleted with their program and history.
Children
The service is not directed at children. Coach accounts are for professionals; client records are created by a coach within a coaching relationship.
Changes to this policy
We will update this page when our practices change and revise the date above. Material changes will be highlighted in the apps or by email.