Privacy Policy
App: Helixia • Effective date: 5 July 2026 • Last updated: 5 July 2026
This Privacy Policy explains how Helixia (“we”, “us”, “the app”) collects, uses, shares and protects your information when you use the Helixia mobile application. By using Helixia you agree to the practices described here.
1. Information We Collect
Account information. When you sign up or sign in, we collect the details you provide through Firebase Authentication:
- Email address (email/password or Google sign-in)
- Display name and profile photo (if provided or via Google)
- Phone number (if you use phone sign-in)
- A unique account identifier (Firebase UID)
Profile & learning data. Data you generate while using the app, stored in Cloud Firestore:
- Profile details (headline, role) and gamification data (XP, streaks)
- Course/lesson and quiz progress, bookmarks and notes
- Webinar registrations (your name and email are stored so the host can manage attendance) and bookmarks
- In-app notifications you receive
User-generated uploads. Files you upload (e.g. a profile avatar; for admins, webinar posters and materials) are stored in Firebase Cloud Storage.
Device & usage data. Collected automatically to run and improve the app:
- App usage/analytics events (Firebase Analytics)
- Crash and diagnostic data (Firebase Crashlytics)
- Push notification token (Firebase Cloud Messaging)
- Advertising identifier and ad-interaction data (Google AdMob — see “Advertising” below)
- General device information (model, OS version, language)
Content you submit to AI/research features. Text you enter into the AI assistant and search terms you enter in the Research Hub are sent to the relevant third-party service to return results (see Section 3).
2. How We Use Your Information
- Create and secure your account and authenticate you
- Provide core features: courses, notes, practice quizzes, exams, webinars, research tools and the AI assistant
- Save your progress, bookmarks and preferences across devices
- Send you relevant notifications and reminders
- Measure usage, diagnose crashes and improve performance and reliability
- Display advertising and support the free tier (ads are not shown to Helixia Pro members)
- Prevent abuse and enforce our terms
3. Third-Party Services
Helixia relies on the following third-party providers, each governed by its own privacy policy:
- Google Firebase — Authentication, Cloud Firestore, Cloud Storage, Analytics, Crashlytics, Cloud Messaging and Remote Config.
- Google AdMob — advertising, which may use your advertising identifier.
- Google Gemini API — powers AI assistant features; prompts you enter are processed by Google to generate responses.
- NCBI / PubMed (E-utilities) — research paper search; your search queries are sent to NCBI to return results.
See Google’s Privacy Policy at policies.google.com/privacy and NCBI’s policies at nlm.nih.gov/web_policies.html.
4. Advertising & Consent
We use Google AdMob to show ads (banner, native, opt-in rewarded, and occasional full-screen ads at natural break points). AdMob may collect and use an advertising identifier to serve and measure ads.
- Where required (e.g. the EEA/UK), we present a consent request via Google’s User Messaging Platform (UMP) before serving personalized ads.
- You can reset or limit ad personalization in your device settings: Settings → Google → Ads.
- Helixia Pro members do not see ads.
5. How We Share Information
We do not sell your personal information. Information is shared only:
- With the third-party processors listed in Section 3, to operate the app
- With webinar hosts/administrators, limited to your registration name and email for webinars you register for
- When required by law, or to protect the rights, safety and security of users and the service
6. Data Retention
We retain your data for as long as your account is active or as needed to provide the service. You can request deletion of your account and associated data at any time — see our Data Deletion Policy. Some records may be retained where required for legal or legitimate operational reasons, and aggregated/anonymized analytics may be kept.
7. Your Rights & Choices
- Access and update your profile information from within the app
- Request deletion of your account and data (see Data Deletion Policy)
- Control notification permissions and ad personalization from your device settings
8. Children’s Privacy
Helixia is intended for students and users aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.
9. Security
We use industry-standard measures provided by Google Firebase, including encrypted transport (HTTPS/TLS), server-side security rules that restrict data access per user, and encrypted storage of sensitive values on the device. No method of transmission or storage is 100% secure, but we work to protect your data.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date above and, where appropriate, an in-app notice.