Privacy Policy
Last updated: 2026-05-04
This statement explains what personal data Helpino processes, why, and your rights under the revised Swiss Federal Act on Data Protection (FADP, in force since September 2023).
1. Who we are
Pascal Lauener, Switzerland, contact@helpino.ai. Acting as the data controller for personal data processed via Helpino.
2. What data we collect
Account data: email address, hashed password (we never see plaintext), optional full name, authentication tokens.
Subscription data: Stripe customer ID, Stripe subscription ID, your current plan (free / plus / max / unlimited), and subscription status (e.g. trialing, active, canceled).
Usage data: per-request timestamps and the module used (Ask, Message, Document, Meal). Used to enforce monthly quotas and per-route rate limits.
Content data: text you submit to AI features (questions, situation descriptions, document content) and the AI-generated responses. Saved to your in-app history (rolling per-plan cap: Free 5, Plus 30, Max 50, Unlimited 100); evicted automatically when the cap fills, can be deleted manually from the history sidebar, and is removed on account deletion. Short-term diagnostic logs (≤ 30 days) may also contain partial content.
Environment marker: every record is tagged 'preview' or 'production' so test data and live data never mix.
3. Legal basis
Contract performance (FADP art. 31 para. 2 lit. a; GDPR art. 6 para. 1 lit. b): everything needed to provide the service you signed up for.
Legitimate interest: security, fraud prevention, debugging.
Legal obligation: tax records (Swiss tax law requires retention of invoices for 10 years).
We do not currently process data on the basis of consent — we don't run analytics or marketing trackers.
4. Subprocessors (third parties)
The following third-party services may process personal data on our behalf:
| Service | Purpose | Location |
|---|---|---|
| Supabase | Authentication + Postgres database | EU/US (selectable region) |
| Stripe | Payment processing + subscription management | US / global |
| Anthropic (Claude) | AI for Message, Document, Ask features | US |
| Groq (Llama) | AI for Meal Planner | US |
| HuggingFace | Embeddings (planned) | US |
| Vercel | Hosting + edge runtime | Global |
5. International data transfers
Several subprocessors are based in the United States. Transfers occur under standard contractual clauses and the providers' own GDPR/FADP-compliant frameworks. By using Helpino, you accept these transfers.
6. Retention
Account data: while your account is active, plus 30 days after deletion.
Usage data: rolling 12 months for quota analytics.
Subscription data and invoices: 10 years (Swiss tax law).
Saved results (history): rolling cap per plan (Free 5, Plus 30, Max 50, Unlimited 100); evicted automatically and on account deletion. Diagnostic logs retain partial content for up to 30 days.
7. Your rights
You have the right to access, rectify, or delete your data; to restrict or object to processing; and to receive your data in a portable format.
You may also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC, edoeb.admin.ch).
To exercise any of these rights, email contact@helpino.ai. We respond within 30 days.
8. Changes to this policy
We may update this policy from time to time. Material changes will be announced in-app or by email.