Privacy
You are here because you want to know whether this is safe to use. Fair question. Here are the straight answers, then the full detail under them.
Last updated 25 July 2026
The short version
Will anyone know it is me?
Your email sits with Clerk, our sign-in provider, and is never copied into the app database. Everything you log is stored under an account id with no name and no email beside it. We do not sell data and we do not run ads.
What shows up on my card statement?
HELMDEN. Nothing about what the app is, what it is for, or what you bought.
Does a person read what I write?
One place, yes: if you send a question to the coaches, a human reads it and answers it. That is the point of it. Your encounter log and your check-ins are yours, and we do not browse them. We can see database rows when we are fixing a bug, and that is the only time we look.
Will you email me something embarrassing?
We send no marketing email, ever, and no email about your progress. The only emails are the ones signing in needs, like a code to prove it is you. The only nudge is a phone notification you have to switch on yourself, and it reads: Today's rep is waiting. One short session keeps the streak.
If I delete it, is it really gone?
Yes. Delete account in Settings cancels your subscription first, then wipes every row you created, then deletes your login. You can also download everything first as a file.
What we store
Your quiz result: your subtype, your scores, and the goal you typed. Your progress: the level you are on, your control score, your check-in sliders, and how long a rep ran. Anything you choose to log: what you enter when you log sex, including the free text about how long it went and what was going on, your questions to the coaches, your drill counts, and your notes on a chapter.
Also your membership tier and the date it runs to. Never your card number, and never anything about your card.
If you take the quiz without an account, your individual answers are never written to our servers at all. Only the result they produce is.
What never leaves your phone
Some things are deliberately kept on your device and never sent to us. The positions you rate, because they name your sex circumstances. Your quiz answers while you are still taking the quiz. The echo of your answers on the result screen. Your audio and interface preferences.
Clearing your browser data clears these, and we have no copy.
Before you have an account
When you take the quiz or play the first session as a visitor, we set one cookie called pe_anon holding a random id. No name, no email, nothing about you. It lasts 30 days and it is how your result is waiting for you if you decide to sign up.
If you sign up, that row becomes yours. If you never sign up, it stays anonymous, and it stays with us until you ask us to remove it. Email support@helmden.com and we will.
Who else touches your data
We keep this list short on purpose, and it is the whole list.
- Clerk.
- Sign-in. Holds your email and your login.
- Supabase.
- The database. Holds everything in the list above.
- Stripe.
- Payment. Holds your card, which we never see.
- PostHog.
- Product analytics and the replays described below. Only after you accept cookies.
- Google Tag Manager.
- Loads our measurement tags. Tags stay off until you accept.
- Vercel.
- Hosting, traffic counts, and page speed.
- Sentry.
- Crash reports, with your identity stripped out.
- Upstash.
- Sees your IP for about a minute to block abuse.
- Your browser maker.
- Delivers a reminder notification, if you switched them on.
Cookies and analytics
Product analytics only start after you accept the cookie notice. Nothing analytics runs before that. What we send is deliberately blunt: a page was viewed, a session was finished, a plan was chosen. Your quiz answers, your logs, your check-ins, and anything you typed are never sent to analytics.
Three things run outside that gate, and you should know about them. Crash reporting, so we hear about a broken page, with your identity, cookies, and everything in the address bar stripped out before it is sent. Traffic and page speed measurement from our host. And the Google Tag Manager container, which loads on every page while the tags inside it stay switched off until you accept.
Session replay, honestly
We record screen replays on two surfaces only: the home page and the /learn articles. It is how we find the paragraph that confuses people. It starts only after you accept cookies, and typing is masked everywhere.
It is switched off on everything that could carry anything about your sex life. The quiz is never recorded. Your result is never recorded. Sessions are never recorded. Nothing inside the app is ever recorded. Signing up stops any recording that was running.
How it is protected
Every table with your data in it is guarded by row level security inside the database. The rule that says these rows are yours is checked by the database on every single query. The protection sits in the database itself, well under the screen.
Traffic is encrypted. Payment details go straight from your browser to Stripe and never pass through our servers.
How long we keep it
Your account data stays while your account is open and goes when you delete it. The anonymous quiz row stays until you claim it by signing up or ask us to remove it. Your IP address is held for about a minute by our rate limiter, to stop abuse, and is never stored anywhere else.
Two things outlive deletion. Stripe keeps a record of payments, because tax law requires it of them. And analytics events already recorded carry an account id and nothing you wrote, so if you want those cleared too, email us and we will do it by hand.
Your rights
Download everything: Settings, then Your data, then Download my data. It gives you a file holding every row we have for you. Delete everything: Settings, then Delete account. You can also ask us to correct something, ask what we hold, or object to how we use it, by emailing support@helmden.com.
If you are in the UK, the EU, or California, the law gives you these rights explicitly, and we honour them for everyone regardless of where you live.
Reminders
Off unless you turn them on. Turning them on asks your browser for permission and stores what your browser needs to deliver a notification. You can block them again any time in your browser or phone settings, and deleting your account deletes what we stored.
Where your data is processed
Our providers are United States companies, so your data may be processed there and in other countries where they operate.
Age
Helmden is for adults, 18 or older. We do not knowingly hold data on anyone younger.
When this changes
If what we do changes, this page changes in the same breath, and the date at the top moves. Every claim on this page is checked against what the code actually does.
Questions
Email support@helmden.com. Helmden is responsible for the data described here, and that address reaches us.