Helix Markets Privacy Policy

Information we collect

We may process your Apple-provided account identifier and, if Apple provides it, your email address; session and security records; device and request information; watchlists; alerts; simulated portfolios, orders, fills, and performance; journal entries; learning progress; support communications; subscription entitlement status; and analytics or crash diagnostics only when you enable the applicable consent.

Do not place sensitive personal, financial-account, health, or government-identification information in journal or AI fields. Helix does not need bank-account or brokerage credentials.

How we use information

We use information to authenticate users, provide and synchronize features, calculate simulated results, personalize educational feedback, prevent abuse, maintain security, respond to support, comply with law, and improve the service with consent where required. We do not sell personal information or use it for cross-context behavioral advertising.

Service providers and disclosure

Information may be processed by Apple for authentication and subscriptions, Cloudflare for hosting, security, and primary AI processing, Alpaca for market-data requests, and OpenAI only when the primary AI service is unavailable. Provider credentials remain server-side. AI requests should be minimized to the context necessary for the requested explanation. We may disclose information when required by law, to protect rights or safety, or in connection with a business reorganization subject to appropriate protections.

Users ages 13 through 17

Helix is not intended for children under 13 and we do not knowingly collect their personal information. Users ages 13 through 17 require permission and supervision from a parent or legal guardian. A parent or guardian may contact [email protected] to request access, correction, deletion, or restriction of a minor’s information.

If we learn that a user is under 13, we will suspend the account and delete associated personal information unless retention is legally required.

Retention and security

We retain account data while the account is active and for only as long afterward as reasonably necessary for security, dispute resolution, legal compliance, and backups. Session and audit records use limited retention periods. We use access controls, short-lived session credentials, encryption in transit, server-side secrets, and account-deletion tools, but no security method is perfect.

Your choices and rights

Settings lets you manage analytics and diagnostics consent, export account information, revoke sessions, and request account deletion. You may also request access, correction, deletion, or a copy by emailing [email protected]. Depending on your location, additional appeal or privacy rights may apply. We will verify requests before acting.

Contact and updates

The operator and privacy contact is Benjamin Scesa; email [email protected]. Material policy changes will be communicated through the service or another reasonable method.