Privacy Notice

1. Personal data we collect

Helia may collect and store the following data:

• Phone number (validated via SMS)
• Name (free-form, not validated)
• Alias
• Location (current or approximate)
• Plant photographs uploaded by the user
• Conversations and messages generated within the app
• Activity within the app (tasks, reminders, feature usage)
• Technical and usage data (device, operating system, usage metrics)

Photographs may incidentally contain images of people, home spaces, or personal objects. Helia does not intentionally seek or analyze such elements.

2. Data we do NOT collect

Helia does not collect:

• Financial data
• Health data
• Phone contacts
• Biometric data (biometric authentication is managed solely by the device's operating system)

3. Purposes of data processing

Personal data is used to:

• Create and manage the user's account
• Validate identity and access
• Enable the use of app features (plant scanning, conversations, reminders)
• Generate automated content through artificial intelligence
• Improve the product's experience and performance
• Send notifications, reminders, and informative or promotional communications
• Analyze internal metrics and product performance

4. Use of artificial intelligence

Helia uses artificial intelligence systems to generate responses and content. Such content:

• Is generated automatically
• May be inaccurate or incomplete
• Does not replace professional advice
• Is based on information provided by the user

The user is responsible for how they use such recommendations.

5. Communications

Helia may send:

• Push notifications (tasks, reminders, messages)
• Informational messages
• Promotional messages via push or SMS

The user can manage their notification preferences from the app.

6. Data retention and deletion

When a user deletes their account from the app:

• All identifiable personal data (phone, alias, username) is permanently deleted
• Plants, conversations, analyses, tasks and associated photographs are entirely deleted from databases and file storage
• Records of Terms and Privacy Notice acceptance are anonymized (without personal identifiers) and kept as a legal-compliance audit log
• Encrypted backups may contain your data for up to 30 days after deletion, per the natural backup rotation cycle. After that period, data is gone from backups as well.
• Anonymized data created before May 4, 2026 (when Helia operated under a previous retention policy for model training) is preserved in its anonymized form for operational reasons. If you wish to have it removed, please contact us by email.

Helia no longer retains user photos or content for model training: account deletion is executed in full (Right-to-Erasure under GDPR Art. 17 and ARCO right of Cancellation under LFPDPPP).

7. Data transfers

Data may be transferred and stored outside Mexico, only with providers necessary to operate Helia, under reasonable security measures.

Providers used:

• Infrastructure: DigitalOcean
• Artificial intelligence: OpenAI (or other providers in the future)
• Analytics: PostHog, Google Analytics
• Notifications: Firebase Cloud Messaging, Apple Push Notification Service
• SMS: Twilio
• Error tracking: Sentry
• Encrypted backups: Cloudflare R2

8. ARCO rights and account deletion

The user may access, rectify, cancel, or oppose the processing of their data, as well as delete their account:

• From the app
• From Delete Account
• By writing to: carlavivani@gmail.com

9. Changes to this notice

Helia may update this Privacy Notice. Changes will be notified within the app or on the website.