Privacy Policy

Last Updated: 2026-10-11

Introduction

NeuroHelm® ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services (collectively, the "Service").

The data controller is Leili Oy, Iltarannantie 3 A 11, 40520 Jyväskylä, Finland.

By using the Service, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Personal Information

Account Data: Email address and display name when you register with an email address and password or with Google Sign-In
Health Data: Symptom logs, supplement intake, medication tracking, diet plans, and wellness notes you voluntarily enter. On Android devices where you grant permission, we also read data from Google Health Connect: steps, sleep, heart rate, heart rate variability, weight, active calories burned, and workouts (type, start time and duration).
Usage Data: App interactions, feature usage patterns

Automatically Collected Information

Device type and operating system
App version
Crash reports and performance data (Firebase Crashlytics in the Android app, with a random identifier, never your name, email or account ID)

Google Health Connect (Android)

NeuroHelm integrates with Google Health Connect on Android to read biometric data from your wearable device or fitness apps. This integration is entirely optional and requires your explicit permission.

Data types read from Health Connect: steps, sleep duration, heart rate, heart rate variability (HRV), weight, active calories burned, and exercise sessions (workout type, start time and duration). NeuroHelm does not read routes, location, distance or pace, and never writes anything to Health Connect.

Health Connect data is never sold and never shared with advertisers or data brokers, and NeuroHelm does not use it to train AI models. It is shown next to your symptom logs and included in your weekly Insights report and your conversations with Talia. To write those texts, the relevant data is sent without your name or other identifying details to Google’s Gemini model on Google Cloud in the EU, which processes it only to produce your report or reply.

You can revoke Health Connect permissions at any time via Android Settings → Health Connect → App permissions → NeuroHelm. You can also delete all your data from within the app or by contacting us at privacy@leili.fi.

How We Use Your Information

To provide and maintain the Service
To personalize your health tracking experience
To generate reports and insights based on your data
To process subscription payments
To communicate with you about the Service
To improve and develop new features
To operate, display, and moderate community features such as posts, comments, and user interactions

Talia AI Assistant and Support Requests

Your conversations with Talia are stored in your account so you can continue them. To write each reply, the relevant parts of your logs, notes and wearable data are sent to the AI. Before anything is sent, we remove your name, email address and account ID, and any email addresses and phone numbers in your notes and messages. Other details you write yourself, such as names of other people or places, are sent as written. Your medications are never sent to the AI.

When you send feedback or a support request from the app, we store and email to ourselves your message, your email address, your device model, operating system and app version, and your most recent Talia conversation, so that we can understand the problem.

Analytics

We use Google Analytics on the website (only after you accept cookies) and Firebase Analytics in the Android app to count which screens and features are used. Analytics events never contain your symptom ratings, scores, notes or other health data. They are counted by a random identifier, never by your name, email or account ID.

Advertising

The Android app contains the Google AdMob advertising library, which is currently switched off: no ads are shown. If we switch ads on for the free version in the future, we will ask for your consent first where the law requires it, ads will never be targeted using your health data, and Premium subscribers will see no ads.

Data Storage and Security

Your data is stored securely using Google Firebase, which employs industry-standard encryption both in transit (TLS/SSL) and at rest. Our database and file storage are in Finland, our server functions in Belgium and AI processing in Google’s EU region, all within the European Union. We implement appropriate technical and organizational measures to protect your personal information.

Talia’s replies, Insights reports and community moderation are produced with Google’s Gemini model on Google Cloud (Vertex AI) in the European Union, so this processing stays within the EU. Google processes the data only to produce the reply or report and does not use it to train its models.

Community & Social Features

When you participate in the NeuroHelm community, we collect your chosen social name, the text and images you post, your comments and replies, emoji reactions, and @mention interactions.

Your social name, posts, and comments are visible to other authenticated NeuroHelm users. Your email address and health data are never exposed through community features.

Images you attach to social posts are uploaded to secure cloud storage and are visible to other users. You may delete your posts and associated images at any time.

AI Content Moderation

All community content — including posts, comments, and replies — is automatically reviewed by an AI moderation system to help maintain a safe and supportive environment.

The moderation system checks for hate speech, medical misinformation, spam, and self-harm content. Flagged content is temporarily hidden pending review.

If your content is flagged, you may submit an appeal for human review. We aim to process appeals promptly.

Data Sharing

We do not sell your personal information. We may share data with:

Service Providers: Firebase (data storage, authentication, analytics and crash reports), Google Gemini on Google Cloud in the EU (AI that writes Talia replies and Insights reports and moderates community posts), Mailgun (sends weekly report and support emails, EU servers), RevenueCat (subscription management), Stripe (payment processing), Google AdMob (advertising library, see Advertising)
Legal Requirements: When required by law or to protect our rights

HIPAA Notice (US Users)

Important: NeuroHelm is a personal health tracking application designed for individual consumer use. We are not a "covered entity" or "business associate" as defined under HIPAA. HIPAA regulations do not apply to data stored in this app.

Information you enter about your own care, such as diagnoses, treatments or EDSS scores, is kept as your personal record. It is not shared with your healthcare providers and does not replace their records.

Medical Disclaimer

NeuroHelm is not a medical device and does not diagnose, treat, cure, or prevent any medical condition. The information provided is for general wellness and informational purposes only.

Always consult a qualified healthcare professional for medical advice, diagnosis, or treatment.

Data Retention

We retain your personal data for as long as your account is active or as needed to provide you services. You can delete your account and all data linked to it at any time in the app (Profile → Delete account) or by contacting us.

Children's Privacy

Our Service is not intended for users under 16 years of age. We do not knowingly collect personal information from children under 16.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

Leili Oy
Iltarannantie 3 A 11, 40520 Jyväskylä, Finland

Email: privacy@leili.fi