Helmy — Privacy Policy

Last updated: August 6, 2026

Helmy ("we", "us") provides vessel handover, documentation, and management software for captains, owners, managers and crew. This policy explains what information we collect, how we use it, and the choices you have.

1. Information We Collect

When you sign in with Google, we receive your name, email address, and profile picture from your Google account. If you grant Google Drive access, Helmy creates and manages vessel-specific folders in your Drive to store photos, documents and handover reports — we only access files Helmy itself creates or that you explicitly upload through the app.

We also collect vessel information you enter directly (vessel name, registration details, checklist data, notes, photos), and billing information processed securely through Stripe (we do not store your card details).

2. How We Use Your Information

3. Data Sharing

We do not sell your personal data. Information is shared only with the service providers necessary to run Helmy: Google (authentication and Drive storage), Supabase (database and infrastructure), Stripe (payment processing), and Resend (email delivery). Vessel data may be visible to other users you explicitly invite to a handover (owner, manager, captain, crew) at your direction.

4. Google API Services User Data Policy

Helmy's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Helmy requests only the drive.file scope, which grants access to files Helmy itself creates or that you explicitly open with it — never to the rest of your Drive. That access is used solely to create your vessel's folders and to store the documents, photos and reports you generate in the app. This data is not read or used for any other purpose, is not transferred to third parties except as needed to provide the service at your direction, is not used for advertising, and is not used to train generalised artificial-intelligence models. No human reads it except where you ask us to for support, or where the law requires it.

5. Data Storage and Security

Your data is stored on Supabase infrastructure with industry-standard encryption in transit and at rest. Photos and documents you upload to Google Drive remain under your own Google account's ownership and security settings.

6. Your Rights

You may access, correct, or delete your vessel and account data at any time within the app, or by contacting us. You may disconnect Google Drive access at any time through your Google Account permissions. You may delete your account and associated data by contacting us at the email below.

7. Data Retention

We retain your account and vessel data for as long as your account is active. If you delete a vessel or your account, associated records are removed from our systems within a reasonable period, except where retention is required for legal or billing purposes.

8. Children's Privacy

Helmy is intended for professional maritime use and is not directed at children. We do not knowingly collect data from individuals under 16.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

10. Contact

Questions about this policy or your data can be directed to support@helmyapp.com.