Privacy Policy

• Account. Your email address, used for passwordless sign-in.
• Profile. Details you add for the people you track — such as date of birth, sex, height, and weight — used to interpret results.
• Health data you provide. Lab reports and documents you upload (PDFs, CSVs, images), the biomarkers extracted from them, what you ask Helse to focus on (goals and health concerns) and their timelines (including fertility and IVF records), structured records you create, clinic screenshots you import, and supplement inputs such as prescriptions.
• Wearable data (optional). If you connect a wearable such as WHOOP, we access the data you authorize — for example recovery, heart-rate variability, resting heart rate, sleep, and strain — to show it alongside your other health data.
• Technical data. Basic information needed to operate the service securely, such as session cookies for authentication.

We use your information to:

• Provide the service and show your data back to you;
• Read and structure documents you upload (extracting biomarkers, splitting reports into readings and timeline events);
• Generate goal-based interpretations, trend summaries, and personalized supplement protocols;
• Secure your account and prevent abuse.

We do not sell your personal information, and we do not use it for advertising.

To read your documents and generate interpretations, summaries, and protocols, we send the relevant content — including text and images from files you upload — to our AI provider, Anthropic (the Claude API), which processes it on our behalf to return a result. Under Anthropic’s commercial API terms, this content is not used to train their models. We share only what is needed to produce the feature you asked for.

Connecting a wearable is optional and requires your explicit authorization through that provider’s secure sign-in (OAuth). We request read-only access to the specific data types needed to show your recovery, sleep, and related trends, and we use that data only to display and analyze it for you. We do not share it with third parties for their own purposes. You can disconnect a wearable at any time, and you can also revoke access from within your WHOOP (or other provider) account.

We share information only as described here:

• Service providers. We use Vercel to host the app (your requests, including the files you upload, pass through its servers); Supabase for database, authentication, and encrypted file storage; Anthropic for AI processing (above); Resend to deliver email (sign-in codes and sharing invitations — an invitation carries the recipient’s address, the inviter’s name, and the name of the profile being shared, but never health data); and, if you connect it, WHOOP as the source of your wearable data. These providers process data on our behalf under their own terms.
• People you choose. The app supports household sharing — you may grant others access to a person’s data as an owner, editor, or viewer. Sharing is under your control, and you can change or remove access.
• Legal. We may disclose information if required by law or to protect rights and safety.

Your data is stored with Supabase in cloud infrastructure (the app itself runs on Vercel), with uploaded files kept in a private storage bucket and access controls enforced in our application. We take reasonable measures to protect your information, but no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

• Access and review the data in your account at any time;
• Correct or delete records, entries, and uploaded documents;
• Disconnect wearables and delete their imported data;
• Request deletion of your account and associated data by contacting us.

Depending on where you live (for example, under GDPR or U.S. state privacy laws), you may have additional rights over your personal information. Contact us to exercise them.

We keep your information for as long as your account is active or as needed to provide the service. When you delete data or your account, we delete the associated records, subject to any retention required by law.

Helse is not intended for children, and we do not knowingly collect information from anyone under 18. Data about a minor may be entered only by a responsible adult managing that person’s care.

We may update this policy from time to time. We will revise the effective date above and, for material changes, provide a more prominent notice.

Questions or requests? Contact us at hello@gethelse.com. This service is governed by the laws of the State of California, USA.