Helia Privacy Policy

Last updated: October 2026

Helia is a sun coach: it uses your location, the local UV index and, if you allow it, your Apple Health data to tell you when and for how long to be in the sun. It has no third-party analytics, no advertising and no tracking. Your sun history, your health data and your questions to the coach stay on your iPhone. This policy explains exactly what is stored, what leaves your device, and who receives it.

In short

• Your sun sessions, mood and supplement logs, skin profile and Apple Health data are stored on your device. We never receive them.
• The AI coach is a language model that runs on your iPhone. What you ask it and what it answers never leave the device.
• Your coordinates go to Apple's WeatherKit to get the UV index and cloud cover for where you are. That is the only place your location is sent.
• Our servers hold an anonymous account with no name or email address, and the push tokens that let a sun session appear on your Lock Screen.
• No advertising, no tracking, no third-party analytics software, no sale of data.

Who we are

Helia is published by Midgar Oy, a company in Finland. For the information described under Our servers, Purchases and More apps below, Midgar Oy is the controller. You can reach us at support@midgarcorp.cc.

What the app stores on your device

Everything Helia knows about your sun habits is kept in the app's private storage on your device, and in a storage area shared only with Helia's own widget extension. It is not uploaded to us. It includes:

• your sun sessions: start and end time, duration, UV index, UV dose, whether you used sunscreen and how often you reapplied, the place where the session happened (latitude and longitude), the route if the session recorded one, and any note you wrote;
• burn events you log, with their severity, body area and note;
• daily totals, your mood and energy entries, and your supplement entries;
• your profile and skin settings, such as skin type, daily goals and reminder times;
• a short activity log and a crash log, described under Help and diagnostics.

Location

Helia asks to use your location while you use the app, to work out the sun's position, the local UV index and sunrise and sunset. You can also allow "Always" so that Helia can notice when you head outside (it uses iOS's visit and significant-location-change monitoring for that), keep measuring your UV dose while a session runs with the phone in your pocket, and log your sun automatically. This is optional and you can change it in iOS Settings at any time. Helia asks for location to a precision of about one hundred metres, and for finer precision only while a session is running.

Your coordinates are sent to Apple's WeatherKit service to fetch the UV index, cloud cover and rain forecast for where you are. Apple processes this under its own terms. Helia does not send your location to us, and does not look up a place name for it.

If you do not allow location, Helia uses a rough position that it works out on your device from your time zone. It is used for the same sun and weather calculations and is marked as approximate in the app.

Apple Health

If you allow it, Helia reads your time in daylight, steps, sleep and state of mind from Apple Health to build your daily light plan, and writes your sun sessions back as time in daylight and UV exposure, and the state of mind you log. You choose each of these in the Health permission screen and can change them in the Health app. The Health data stays on your device and in Apple Health. It is not sent to us or to anyone else. Resetting Helia does not delete anything from Apple Health, because that data belongs to you and lives outside the app.

Motion, camera and microphone

• Motion: Helia reads whether you are walking, sitting or driving from your device's motion data, on the device, to tell real sun exposure from time indoors or in a car.
• Camera: the camera is used to estimate your skin type from a photo of your face and to read sunscreen and supplement labels. Both are analysed on your device with Apple's Vision framework. The app does not save the pictures and does not upload them.
• Microphone and speech: if you dictate a question or a log entry, Helia uses Apple's speech recognition and the microphone only while you dictate. Helia asks iOS to recognise your speech on the device whenever your device and language support it. Where they do not, iOS may send the audio to Apple, which then handles it under its own terms.

The AI coach

The coach that answers your questions about sun, vitamin D and skin is a language model that runs on your iPhone's own chip. No question or answer is sent to us or to any AI provider, and it works without a connection once the model is on your device.

The first time you use the coach, Helia downloads the model files from Hugging Face (Hugging Face, Inc., United States). The download request reaches Hugging Face's servers like any web request, so Hugging Face sees your IP address and which model files were requested. Helia sends no account, no token and no information about you with it. The model files are public.

Our servers

Helia uses two small services that we run on Cloudflare.

Anonymous account. The first time it needs one, Helia creates an anonymous account with no name or email address. For that it sends our server a token from Apple's DeviceCheck, which our server uses to confirm that the request comes from a genuine Apple device, and a random identifier that Helia generates on your device and keeps in your Keychain. The account record holds that random identifier, a random account ID, a hash of the account's access key, the date it was created and the starting balance of the credit ledger that every Midgar app account carries. The record is used to recognise your device when it talks to our servers and to link your purchase to it. It cannot be traced to you without your device.

Sun session notifications. Helia can show a sun session on your Lock Screen and in the Dynamic Island, and can start one for you while the app is in the background. For this, iOS gives Helia push tokens, and Helia sends them to our server together with your anonymous account ID, a label saying whether the token is for development or production, and a time stamp. When Helia asks our server to start a session while it is in the background, it also sends the start time and the figures the Lock Screen shows: the verdict, the minutes of useful sun left, the estimated vitamin D range, how much of your skin is exposed, and whether you are in shade or in strict protection mode. Our server passes these to Apple's push service and does not keep a copy. Apple delivers them to your device.

Midgar ID. At first launch Helia creates, or reuses, a Midgar ID: a random identifier with no name, email or other personal details, kept in your iCloud Keychain so that our other apps on your devices recognise the same ID. Helia sends it to our identity service at api.midgarcorp.cc and attaches it to its calls to our servers, so a purchase and your anonymous account can be linked to it. It is not used for advertising or tracking.

Both services, and the identity service, are reached through api.midgarcorp.cc and run on Cloudflare, which may keep standard request logs such as your IP address for a limited time. We do not store your location, your Health data, your sun history or your coach conversations on these servers.

Purchases

Helia Pro is sold as a monthly or yearly subscription and as a one-time lifetime purchase through Apple In-App Purchase. Apple handles payment and billing, and we never receive your card details or your Apple Account details.

Each purchase carries your anonymous Midgar ID as Apple's app account token. The app sends the signed transaction record Apple issues (which product, the price, the dates and Apple's transaction identifiers) to Midgar's purchase ledger at api.midgarcorp.cc, which keeps it linked to your Midgar ID so that Helia Pro is recognised on your other devices and your purchases can be restored in your other Midgar apps, and Apple's own server notifications about your purchases reach the same ledger. From version 1.3.7, Helia contains no RevenueCat software, and neither the app nor our servers send anything about your purchases to RevenueCat. Earlier versions of Helia send RevenueCat (RevenueCat, Inc., United States) your Apple transaction records, and RevenueCat keeps what it received from them under its own privacy policy at revenuecat.com/privacy.

Game Center

If you are signed in to Game Center, Helia reports your achievement progress and four consistency scores to Apple: your current daylight streak, the days outside this month, your morning-light weeks and your sun-safe days. These are counts of habits. They do not include UV dose, locations or health readings. Apple shows them in Game Center under its own terms and your Game Center settings. You can turn Game Center off in iOS Settings.

Apple Weather attribution

The Weather data in Helia comes from Apple Weather. The app loads Apple's logo and legal page for it from Apple's servers.

More apps

Settings has a card that shows our other apps. Its "Your Midgar" panel lists the Midgar apps you use, read from our identity service with your Midgar ID, and what you own in them; nothing else about you is used for it. When it appears, at most once a day, the app downloads the list from a catalogue service we run on Cloudflare, and the app names, icons and details from Apple's servers, using your App Store country. When you open the Midgar screen from the card, the app also sends the catalogue service a small anonymous event when an app is shown, tapped or opened: the kind of event, which app, the bundle identifier of Helia, where in the app it happened, and your App Store country. It carries no identifier for you or your device. Whether another Midgar app is installed on your device is checked on the device and is not sent anywhere. Like any web service, Cloudflare may keep standard request logs, such as your IP address, for a limited time.

The app also sends two more kinds of anonymous count to Midgar's servers in the same way: one "active" count the first time you use the app on each day, in each week and in each month, which tells us how many people use the app, and one count for each purchase that names only the product bought. Like the More Apps report, they carry no identifier and are stored only as running totals per day, event, app and platform. They are used only to understand how the app is used, never for advertising or tracking.

Midgar may publish aggregate statistics built from anonymous counts, such as weekly active installs, which never identify a person.

Reminders and notifications

Helia's reminders and warnings are notifications scheduled on your device. No server of ours sends them, and you can turn them off in the app or in iOS Settings. The Lock Screen sun session described under Our servers is the only notification that arrives through Apple's push service.

Help and diagnostics

Helia keeps a short activity log and, if the app crashes, a crash log, in its private storage on your device. They are never sent automatically. In Settings you can export a diagnostics file, which contains the app and iOS version, permission and Live Activity states, your anonymous account ID and the latest log lines, with access keys, tokens and email addresses removed. You choose where it goes through the iOS share sheet; nothing is sent unless you send it. If you have chosen in iOS to share analytics with app developers, Apple may give us anonymous crash and usage reports, which contain nothing we can link to you.

What we don't do

We do not sell your data, show advertising, or use third-party tracking or advertising identifiers. The app does not ask for tracking permission and contains no advertising or third-party analytics software. We do not use your data to train AI models. Your Health data is shared with no one. Your location goes only to Apple's WeatherKit.

How long we keep data

• Your sun history, mood and supplement logs, and settings: only on your device, until you use Start over or Delete account in Settings, or delete the app.
• Anonymous account record: until you delete your account in Settings.
• Push tokens: a notification token and a start token are deleted 90 days after Helia last sent them, and the token of a running sun session 48 hours after it was sent. Helia sends fresh ones while you use it. A start token that Apple reports as no longer valid is deleted when it is next used, and Delete account in version 1.3.7 or later removes them all at once.
• Purchase records: Midgar's purchase ledger keeps them as financial records, linked to your Midgar ID until that ID is deleted, after which nothing links them to a live ID. Purchase records at Apple, and the purchase records RevenueCat received from earlier versions of the app: kept under their policies.
• More apps events and usage counts: anonymous counts, kept as long as they are useful for measuring our own promotion and how the app is used.

Deleting your data

In Settings, "Start over" erases your sun history, profile and settings on your device. From version 1.3.7, "Delete account" removes the push tokens described under Our servers (earlier versions leave them to expire), then your anonymous account and its credit ledger from our server, then erases your sun history, profile and settings on your device and returns the app to its first launch, so nothing stored against your anonymous account ID is left behind. If a server cannot be reached, the steps after it do not run and you can try again. Your Midgar ID is not deleted, because our other apps on your devices use it too; to have it deleted, email support@midgarcorp.cc. Data in Apple Health is yours and is managed in the Health app. Deleting the app or your account does not cancel a subscription: manage or cancel it in iOS Settings under your Apple Account, then Subscriptions. If you want the purchase records that RevenueCat holds erased, contact us and we will ask RevenueCat to do it.

Your rights

Because we keep very little information about you, most requests are answered by the controls above. Where privacy law, such as the GDPR, gives you rights to access, correct, erase, restrict or move information about you, or to object to its use, contact us and we will help. We process the anonymous account and push tokens to provide the app's features, purchases to provide and support what you buy, and the anonymous More apps and usage counts in our legitimate interest in measuring our own promotion and how the app is used. You may complain to your local data protection authority; in Finland that is the Office of the Data Protection Ombudsman (tietosuoja.fi).

Children

Helia is not directed at children. The app tells you at first launch that you must be 16 or older to use it, and we do not knowingly collect personal information from children.

Changes

If this policy changes we will publish the new version here with a new date, and mention material changes in the app's release notes.

Contact

For any questions, contact support@midgarcorp.cc.