Helfie Privacy Policy ​

This Privacy Policy describes how Helfie Licensing Pty Ltd (“Helfie,” “we,” “us” or “our”) collects, uses, discloses, and protects personal and health-related information when you download, install, register with, access, or use the Helfie mobile application and related services (collectively, the “App”). By using the App, you agree to the practices described in this Privacy Policy. Please read this document carefully.

1. Scope and Application

This Policy applies to all information collected through the App on iOS and Android devices, as well as through any updates, new features, or new services that are added to the App (unless those features come with separate privacy notices). It does not apply to information collected outside of the App, for example via our website or third-party partners, unless otherwise stated.

2. Information We Collect ​

2.1 Information You Provide Directly

• Account Registration: name, date of birth, gender, phone number. ​
• Health Profile Data: self-reported metrics (e.g., weight, height), medical history, health symptoms, medications, and responses to in-App health questionnaires. ​
• Device Information: device model, operating system version, unique device identifiers (IDFA/IDFV on iOS, Android Advertising ID), push notification tokens. ​
• Usage Data: date/time of App use, features accessed, crash logs, performance metrics. ​
• Communications: any messages, feedback, or support inquiries you submit via the App or email.

2.2 Automatically Collected Information

Our App accesses certain device sensors only when you explicitly choose to use a feature, and always with your knowledge and consent:

Camera

• What: We use your camera to conduct some of the app’s health checks, for example, we take photos of your skin and record videos of your face (for heart-rate and vitals analysis). ​​
• When: The first time you tap the “Check” button on a health check that requires access to your camera, you will be presented with a system prompt explaining why Helfie needs camera access, and you are required to grant permission before the camera activates to complete the check. ​​
• Scope: We do not scan your photo library, record your surroundings outside the frame you choose, or capture video in the background.

Face Data

• We do not collect or store any images or videos of face data. Our application uses a proprietary SDK to convert the image frames to arrays of numerical RGB values which cannot be used to reverse engineer or recreate any images of a face.
• The converted face data image is used as input data to ML model(s) that use remote photoplethysmography (rPPG) to measure blood pressure, heart rate and stress levels.
• Face data is never shared with any third parties.
• We do not store or retain this face data. ​

Microphone

• What: We use your microphone to conduct some of the app’s health checks, for example we record your cough sounds for lung health analysis. ​
• When: The first time you tap “Start Check” on a health check that requires access to your microphone you will be presented with a system prompt explaining why Helfie needs access, and you are reqistered to grant permission before the microphone activates to complete the check.
• Scope: We do not passively listen to or record background conversations—only the audio you choose to capture.

Consent & Indicators

• No audio or video is recorded without your permission. You control every capture by tapping a clearly labeled button. ​
• The App never passively listens to your microphone nor records video in the background. Standard platform indicators will always show when the camera or mic is active.

Permission Management

• You can revoke camera or microphone permission at any time via your device’s Settings. ​
• Impact: Disabling camera permission will prevent scans that rely on your camera from operating, but you can still use text-based health checks.
• Disabling microphone permission will prevent voice-chat or cough analysis, while other App features remain available.

No Third-Party Camera/Mic APIs

• Helfie uses only the device’s native camera and audio frameworks. We do not integrate any additional SDKs that access face or voice data beyond what you explicitly capture.

Analytics

• We collect anonymized usage analytics via third-party providers to improve performance and understand feature adoption—but never record raw audio or video for analytics purposes.

2.3 Health and Sensitive Data

Under applicable law (including HIPAA in the U.S., the Australian Privacy Act, and GDPR in the EU), “sensitive data” includes health-related information. We treat all health inputs (e.g., symptom entries, biometric readings, journal entries) as sensitive and apply heightened protections.

3. How We Use Your Information

1. Provide and Improve the App

• To enable core App functionality (e.g., generate personalised health insights, deliver real-time feedback).
• To develop and refine features, perform bug fixes, and optimise performance. ​

2. Health Insights & Recommendations

• Limited Use (Guidance Only): We use your health and biometric data solely to provide you with informational guidance and personalized insights within the App. The App does not diagnose medical conditions or make medical decisions on your behalf. ​
• No Unwarranted Sharing: These data are visible only to you and, when necessary, to our secure processing services. We do not share your health or biometric data with health insurers, employers, or any third parties without your explicit consent.
• Medical Advice Disclaimer: The App’s insights are for educational purposes and are not a substitute for professional medical advice, diagnosis, or treatment. Always seek the advice of a qualified healthcare provider with any questions you may have regarding a medical condition.

3. Communication & Support

• Transactional Messages & Notifications: We use your email address and/or phone number to send you essential transactional messages—such as password resets, appointment confirmations, and critical security alerts. ​
• User Support & App-Related Announcements: With your consent, we may send push notifications, SMS messages, or in-App messages to inform you about new features, scheduled maintenance, or other App-related announcements. We also use your contact information to respond to support inquiries you submit. ​
• Results Delivery: If you opt to receive your health check results via SMS or push notification, we will use the phone number or device token you provided to deliver those results promptly. ​
• Opt-In/Out: You can manage your notification preferences or unsubscribe from non-critical messages at any time via the App’s settings or your device’s notification controls. ​

4. Security & Compliance

• To detect and prevent fraud, unauthorised access, and other malicious activities. ​
• To comply with legal obligations and industry standards (e.g., medical device regulations). ​

5. Analytics & Research

• To conduct aggregated, de-identified research analyses and product usage studies.
• We only publish research findings in aggregate form without personal identifiers.

4. Information Sharing & Disclosure

4.1 Third-Party Service Providers

Certain services such as cloud infrastructure, identity management, or AI model processing may involve overseas providers.

All third parties are required to comply with strict contractual, security, and privacy obligations. We assess provider compliance as part of our supplier review and onboarding process.

All third-party agreements, including privacy and security commitments, are documented in our compliance records and supplier register.

4.2 Healthcare Providers & Insurers

With your explicit consent, we may share selected health reports or summaries with healthcare professionals, clinics, or insurers to support your care or reimbursement processes.

4.3 Legal Requirements & Protection of Rights

We may disclose information if required by law (e.g., court order, subpoena), to protect the rights, property, or safety of Helfie, our users, or others. ​

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, user data may be transferred as part of the transaction. We will notify you before your data is transferred.

Same-Level Protection: Any recipient of your data—whether a parent company, affiliate, subsidiary, or service provider—must honor the same privacy commitments described in this Policy. Even if data is accessed or processed by an affiliate or subsidiary assisting with development or operations, it will receive no less protection than under this Policy.

4.5 Withdrawal of Consent

You have the right to withdraw any consent you’ve given for data processing at any time:

• Device Permissions: You can revoke camera or microphone access by disabling those permissions in your device’s Settings. Simply not using those features also prevents any new captures.
• Feature Impact: If you withdraw camera permission, any checks that rely on these features will no longer function; Fir example: if you withdraw microphone permission, voice-chat and cough analysis will be disabled. Other features (e.g., text-based health checks) will continue to work.
• Data Deletion: You may request that we delete any personal or health data you’ve provided. We will honor deletion requests within 30 days, except where retention is required by law.

5. Data Security

• We maintain administrative, technical, and physical safeguards designed to protect sensitive health data and personal information against unauthorised access, disclosure, alteration, or destruction.
• All data in transit is encrypted using TLS; sensitive data at rest is encrypted using AES-256.
• Access to production systems is restricted to authorised personnel under strict confidentiality obligations.

6. User Controls & Rights ​

6.1 Account Management ​

You have the right to amend or withdraw any consent you’ve given for data processing at any time:

• Device Permissions: You may access, correct, or delete most of your account and health data at any time via the App’s settings. You can revoke camera or microphone access by disabling those permissions in your device’s Settings. Simply not using those features also prevents any new captures. ​
• Feature Impact: If you withdraw camera permission, any checks that rely on these features will no longer function; Fir example: if you withdraw microphone permission, voice-chat and cough analysis will be disabled. Other features (e.g., text-based health checks) will continue to work. ​
• Data Deletion: You may request that we delete any personal or health data you’ve provided. We will honor deletion requests within 30 days, except where retention is required by law.

6.2 Data Portability & Deletion

• Upon request, we will provide you with a machine-readable export of your personal and health data.
• You may request deletion of your account and associated data; we will fulfill such requests within 30 days, except where retention is required by law.

6.3 Do Not Track

Our App does not respond to “Do Not Track” signals at this time.

7. Data Retention

We retain personal data only as long as necessary to fulfill the purposes outlined in this Policy, to provide the App, to comply with our legal obligations, to resolve disputes, and to enforce our agreements. Once the data is no longer needed, we securely delete or anonymize it.

8. Children’s Privacy

The App is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we learn that we have inadvertently collected such data, we will promptly delete it.

9. International Transfers

Your data may be stored and processed in Australia, the United States, the European Union, or other jurisdictions in which our service providers operate. Where required, we implement appropriate safeguards (e.g., EU Standard Contractual Clauses) to ensure adequate protection of your data.

10. Compliance with Apple App Store Guidelines

• Data Minimisation: We request only the data necessary to deliver the App’s functionalities and user benefits.
• Purpose Limitation: Each permission requested from you (e.g., health sensor access, push notifications) is clearly explained in context before granting.
• User Consent & Transparency: We provide in-App disclosures for all data collection and share opt-in/opt-out mechanisms.
• Privacy Policy Link: We prominently link to this Privacy Policy from the App’s login and settings screens, as required by Apple’s App Store Review Guidelines (Section 5.1.1).

11. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in our data practices or legal obligations. If we make material changes, we will notify you via the App or by email before they take effect, and update the “Last updated” date at the top. Your continued use of the App after such changes constitutes acceptance of the updated Policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

• Email: [email protected]
• Address: Helfie Licensing Pty Ltd, Level 5, 171 La Tribe Street, Melbourne VIC 3000, Australia