Privacy Policy

Helixa AI Ltd ("Helixa", "we", "us") is a health technology company registered in England and Wales. We build AI-powered tools to help people understand and manage their health. Our registered address is London, United Kingdom. You can reach us at contact@helixa.ai.

We collect only what is necessary to provide our service: • Contact information (name, email address) when you reach out to us or sign up for updates. • Health-related information you voluntarily share when using our tools. • Usage data (pages visited, time on site) collected via privacy-respecting analytics. • Technical data (browser type, device type, IP address) for security and performance. We do not collect sensitive health data without your explicit consent, and we never sell your data to third parties.

We use your information to: • Provide and improve our health support tools. • Respond to your enquiries and support requests. • Send occasional updates you have opted into (you can unsubscribe at any time). • Comply with legal obligations. • Detect and prevent fraud or misuse. We do not use your data for automated decision-making that produces legal or similarly significant effects without human oversight.

Under UK GDPR, we process your data on the following bases: • Consent , for marketing communications and optional health data sharing. • Legitimate interests , for analytics, security, and service improvement. • Contract , to fulfil our obligations when you use our services. • Legal obligation , where required by law.

We share your data only with: • Trusted service providers (hosting, analytics, email) under strict data processing agreements. • Regulatory or law enforcement bodies when legally required. We do not sell, rent, or trade your personal information. Any third-party processors are bound by GDPR-compliant contracts.

We retain your data only as long as necessary: • Contact enquiries , 2 years from last contact. • Newsletter subscriptions , until you unsubscribe. • Usage analytics , 13 months (aggregated, anonymised). You can request deletion of your data at any time by emailing contact@helixa.ai.

Under UK GDPR you have the right to: • Access the personal data we hold about you. • Correct inaccurate or incomplete data. • Request erasure ("right to be forgotten"). • Restrict or object to processing. • Data portability , receive your data in a machine-readable format. • Withdraw consent at any time without affecting prior processing. To exercise any of these rights, email contact@helixa.ai. We will respond within 30 days.

We use minimal, privacy-respecting cookies: • Essential cookies , required for the site to function. • Analytics cookies , anonymised usage data to improve the service (you can opt out). We do not use advertising or tracking cookies. You can manage cookie preferences in your browser settings.

We take security seriously. Your data is encrypted in transit (TLS) and at rest. We apply access controls, regular security reviews, and follow industry best practices. In the event of a data breach that affects your rights, we will notify you and the ICO within 72 hours as required by law.

Our services are not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us immediately and we will delete it.

We may update this policy from time to time. We will notify you of significant changes by email or a prominent notice on our website. The date at the top of this page shows when it was last updated.

For any privacy questions, contact our Data Protection lead at contact@helixa.ai. If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.