Helmy — Privacy Policy

Last updated: September 29, 2026

1. Information We Collect

Account information: when you sign in with Google, we receive your name, email address, and profile picture. Vessel & handover data: information you enter about your vessels, handover checklists, notes, and captain assignments. Photos: images you upload during a handover checklist. Usage data: basic technical information such as browser type, needed to operate and troubleshoot the service.

2. How We Use Information

We use your information to: operate your account and vessel records; let vessel owners invite and manage team access; generate handover PDF reports; process subscription billing via Stripe; send transactional emails (such as invitations) via Resend; and back up your files to your own Google Drive if you enable that feature. We do not sell your personal information.

3. Third-Party Services We Use

Helmy relies on the following processors to operate: Supabase (database, authentication, and file storage), Google (sign-in and optional Drive backup), Stripe (subscription billing — Helmy does not store your card details directly), Resend (transactional email delivery), and Vercel (application hosting). Each provider processes data only as needed to provide their part of the service.

4. Google API Services User Data Policy

Helmy's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google Drive access is used solely to create vessel folders and store your own handover files in your own Drive — this data is not accessed, read, or used by Helmy for any other purpose, and is not shared with third parties.

5. Data Retention

We retain your account and vessel data for as long as your account is active. If you delete a vessel, its associated handover records and photos are permanently deleted. If you close your account, we will delete your personal data within a reasonable period, except where retention is required for legal, billing, or dispute-resolution purposes.

6. Data Security

We use industry-standard measures to protect your data, including encrypted connections (HTTPS) and access controls (row-level security) that restrict vessel data to authorized users only. No system is completely secure, and we cannot guarantee absolute security of information transmitted to Helmy.

7. Your Rights

Depending on your location, you may have the right to access, correct, export, or delete your personal data. You can request any of these by contacting support@helmyapp.com. Vessel owners can remove a team member's access to a vessel at any time from within the app.

8. Cookies & Local Storage

Helmy uses browser local storage (not third-party tracking cookies) to remember your session and last-viewed vessel, for convenience. We do not use advertising cookies or sell data to advertisers.

9. Children's Privacy

Helmy is not directed at children under 16, and we do not knowingly collect information from them.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "last updated" date below.

11. Contact

Questions about this Privacy Policy or your data can be sent to support@helmyapp.com.

Terms of Service  ·  Helmy  ·  Questions: support@helmyapp.com