Consumer Health Data Privacy Notice

Version: 1.1
Effective Date: September 18, 2026
Last Updated: October 14, 2026

This notice is for residents of Washington State (My Health My Data Act), Nevada (SB 370) and Connecticut. It is a separate document from our Privacy Policy because those laws require consumer health data to be described on its own, and it covers only that category of data.

HelAI is built and operated by one person, Konstantin Yeftifeyev, at Taugul-1, house 57, Almaty 050001, Republic of Kazakhstan. There is no company and no employees. Questions about this notice go to [email protected].

1. What counts as consumer health data here

These laws define consumer health data broadly: any information that identifies your past, present or future physical health. In HelAI that means three things, and nothing else:

Category	What it is	Where it goes
Health-platform readings	Sleep duration, resting heart rate, heart-rate variability, daily steps, weight, height and body-fat percentage, read from Apple Health or Health Connect if you grant permission	Stays on your device. Never transmitted to us.
Training data	Workouts, exercises, sets, repetitions, weights lifted, personal records, goals	On your device. Also copied to our backend only if you subscribe to HelAI Pro, which includes cloud sync across your devices.
Technique reports	A short summary the AI coach saves after a set: repetition count, detected form errors, joint-angle statistics and tempo	Stays on your device. Never transmitted.

Camera frames are processed on your device and discarded frame by frame. No video or image is stored or transmitted.

2. How it is collected

All of it comes directly from you or from your own device:

from the health platform, after you grant permission in the operating system;
from what you enter or record while training;
from the on-device camera model, while the AI coaching screen is open.

We do not buy health data, and we do not obtain it from any other source.

3. Why we use it

To show you your own training history and progress; to calculate personal records; to display readings from your health platform on the home screen; to give form feedback during a set; and, for HelAI Pro subscribers, to keep that data available on every device you sign in to.

That is the complete list. We do not use consumer health data for advertising, for profiling, or to build any kind of inference about you beyond the figures you can see in the app yourself.

We do not sell consumer health data, and we never have. We have not shared it for any third party's own purposes.

One processor handles it on our instructions: Google LLC, whose Firebase Data Connect stores the cloud copy of training data for HelAI Pro subscribers, in the europe-southwest1 region (Spain). Google acts only on our instructions under the Google Cloud Data Processing Addendum.

Our analytics and attribution providers do not receive consumer health data. Firebase Analytics receives that a workout was completed, with its duration and counts, but never your health-platform readings, your exercise names or your technique reports. It does so only with your Analytics consent, and while that consent is on these events are linked to your account identifier (a pseudonymous id, not your name or email). AppsFlyer receives event names only, with no parameters at all, and only with your Marketing consent.

5. Your rights

If you are a Washington, Nevada or Connecticut resident you may:

Confirm whether we hold consumer health data about you, and get a list of every third party it has been shared with;
Access a copy of it;
Withdraw consent for its collection and sharing at any time;
Delete it. Washington also requires a deletion request to be passed on to every processor and third party that received the data. We have no third parties to pass it to (Section 4); our one processor, Google, holds only the Pro cloud copy, which the deletion removes.

To exercise any of these, write to [email protected] from the email address on your account, or use the form at helai.app/support. We answer within 45 days and may extend once by a further 45 days if the request is complex, telling you why.

Much of this you can also do yourself, immediately, without asking us: revoke the health permission in your device settings to stop the readings; delete a workout or a set in the app to remove it; sign out or uninstall to erase everything held on the device.

If we refuse a request you may appeal by replying to our decision. If we deny the appeal, you may complain to the Washington State Attorney General at atg.wa.gov/file-complaint, or to the Attorney General of your own state.

6. How long we keep it

Health-platform readings and technique reports live only on your device, for as long as the app is installed. The cloud copy of Pro training data is kept until you delete your account or ask us to erase it. When a Pro subscription ends, sync stops and the copy is kept, unused; subscribing again resumes sync with it. Deletion requests are carried out within 30 days.

7. Changes

If we change this notice we will update the date above and, where the change is material, tell you in the app before it takes effect.