Privacy

Helios is a small, invite-only training coach. This page explains what Helios stores about you, why, who else is involved, and how to remove it. The short version: your data is used only to coach you. It is never sold, never used for advertising, and never shown to other Helios users.

What Helios stores

• Account: your email, name, and a salted scrypt hash of your password. Helios never stores the password itself.
• Profile: what you enter during setup and in Settings, such as weight, FTP, heart-rate thresholds, sports, and timezone.
• Strava (if you connect it): your activities and their power, heart rate, cadence, and GPS streams.
• Oura (if you connect it): sleep, readiness, HRV, and activity summaries.
• Apple Health (if you set up the export): the body-composition and health metrics you choose to send.
• What you create: logged and recorded workouts, plans, goals, races, saved routes, and notes, including notes your own Claude connector writes back.
• Derived data: training load, fitness trends, FTP estimates, and summary images computed from the above.

How it is used

Everything above powers the features you see: your dashboard, plans, metrics, and the coach. Helios writes to your Strava only if you turn it on in Settings → Integrations. That covers posting a workout summary to a ride's description and renaming a ride to match your plan. Both are off for new accounts. The person who runs Helios can access the database to operate and fix the service. They do not browse your data otherwise.

Claude and AI

Helios does not send your data to any AI provider. The coach runs in your Claude account: when you connect Claude to Helios, your Claude client reads your data through Helios's connector. It does so with permission you grant and can revoke at any time. Those conversations are covered by Anthropic's terms and privacy policy, not by Helios.

Where it lives and who else is involved

• Amazon Web Services (US West, Oregon) hosts the database, files, and servers. Data is encrypted at rest. Access tokens you create in Helios are stored only as hashes.
• Strava and Oura provide data only when you connect them, under their own terms. You can revoke Helios's access from their settings at any time.
• Amazon SES delivers any emails Helios sends you, such as invites.

Helios has no analytics, advertising, or tracking services. Your browser keeps your sign-in token and display preferences in its local storage.

Keeping and deleting your data

• Your data is kept for as long as you have an account.
• Delete everything yourself in Settings → Session → Delete account. This permanently erases your account and all the data above, and revokes Helios's Strava and Oura access. Your activities on Strava itself are not touched.
• You can disconnect Strava or Oura at any time, either from Settings or from their own settings. Helios then stops syncing.
• For a copy of your data, or help with deletion, email privacy@helioscoach.com.

Changes and contact

If this policy changes materially, the date above is updated. Questions go to privacy@helioscoach.com.