Privacy Policy

Helmo AI ("Helmo", "we", "us") is committed to protecting your personal data. This Privacy Policy explains what data we collect, how we use it, and your rights as a user.

1. Data We Collect

When you create an account or use Helmo, we may collect:

• Account data — your name, email address, and password (stored as a secure hash).
• Financial data — transaction records, budget configurations, savings goals, and spending patterns that you enter or import.
• Usage data — pages visited, features used, and interaction logs to improve the product.
• Device data — browser type, operating system, and IP address for security and analytics.
• Communication preferences — notification settings and Telegram integration details if you choose to connect.

2. How We Use Your Data

We use your data exclusively to:

• Provide and improve the Helmo service, including AI-powered financial insights.
• Send you proactive notifications and alerts you have opted into.
• Ensure the security and integrity of your account.
• Comply with legal obligations.
• Analyse aggregate, anonymised usage patterns to improve the product.

We never sell your personal or financial data to third parties.

3. Data Storage and Security

Your data is stored on secure servers with encryption at rest and in transit (TLS 1.2+). Access to production data is strictly limited to authorised personnel. We apply industry-standard security practices including regular audits and access controls.

4. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law.

5. Third-Party Services

Helmo may use the following third-party services:

• Resend — for transactional email delivery.
• OneSignal — for push notifications (if you opt in).
• Vercel Analytics — for anonymous usage analytics.
• Google Analytics — for aggregate traffic analysis (production only).

Each third-party service operates under its own privacy policy. We do not share personally identifiable financial data with any of these services.

6. Your Rights

Under applicable data protection law (including GDPR where applicable), you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Object to or restrict certain processing activities.
• Data portability — receive your data in a machine-readable format.

To exercise any of these rights, contact us at privacy@helmofinance.com.

7. Cookies

We use essential cookies to keep you logged in and remember your preferences. See our Cookie Policy for full details.

8. Changes to This Policy

We may update this policy as the product evolves. We will notify you of material changes via email or an in-app notice. Continued use of Helmo after changes constitutes acceptance.

9. Contact

For any privacy-related questions, contact us at privacy@helmofinance.com.