Privacy

Helios is a small, invite-only training coach. This page explains what Helios stores about you, why, who else is involved, and how to remove it. The short version: your data is used only to coach you. It is never sold, never used for advertising, and never shown to other Helios users.

What Helios stores

• Account: your email, name, and a salted scrypt hash of your password. Helios never stores the password itself.
• Profile: what you enter during setup and in Settings, such as weight, FTP, heart-rate thresholds, sports, and timezone.
• Strava (if you connect it): your activities and their power, heart rate, cadence, and GPS streams.
• Oura (if you connect it): sleep, readiness, HRV, and activity summaries.
• Apple Health (if you set up the export): the body-composition and health metrics you choose to send.
• What you create: logged and recorded workouts, plans, goals, races, saved routes, and notes, including notes your own Claude connector writes back.
• Derived data: training load, fitness trends, FTP estimates, and summary images computed from the above.
• Usage markers: the calendar days you used Helios; the dates you first connected an AI app, first talked to your coach and first ran a weekly review; and the name of the AI app you connected from. No content, and no record of what you asked. Kept for about 13 months.
• Email preferences: which kinds of email you have switched on, and a record of which setup emails were already sent to you so they are not sent twice. The unsubscribe link in each email carries a random token that stops working when you delete your account and otherwise expires after about 13 months.

How it is used

Everything above powers the features you see: your dashboard, plans, metrics, and the coach. Helios writes to your Strava only if you turn it on in Settings → Integrations. That covers posting a workout summary to an activity's description and renaming an activity to match your plan. Both are off for new accounts. The person who runs Helios can access the database to operate and fix the service. They do not browse your data otherwise.

Claude and AI

Helios does not send your data to any AI provider. The coach runs in your Claude account: when you connect Claude to Helios, your Claude client reads your data through Helios's connector. It does so with permission you grant and can revoke at any time. Those conversations are covered by Anthropic's terms and privacy policy, not by Helios.

Where it lives and who else is involved

• Amazon Web Services (US West, Oregon) hosts the database, files, and servers. Data is encrypted at rest. Access tokens you create in Helios are stored only as hashes.
• Strava and Oura provide data only when you connect them, under their own terms. You can revoke Helios's access from their settings at any time.
• Amazon SES delivers the emails Helios sends you: invites, password resets, coach notes you receive by email, and the setup and weekly-summary emails you can switch off in Settings, then Notifications. Each of those carries its own unsubscribe link.

Helios uses no third-party analytics, advertising, or tracking services, and sets no cookies. To learn whether people find the site, Helios counts visits to its public pages itself. It records the page, the site that linked to it (such as a search engine), and any campaign tags in the link, stored only as hourly totals. Unique visitors are counted with a one-way hash of your IP address and browser. The hash uses a random key that changes every day and is deleted after two days, so a visit can't be traced back to you. Visits to the public pages are not counted while you're signed in. If you join the waitlist, where your visit started is saved with your entry.

Separately, once you have an account, Helios records which calendar days you used it and which AI app you connected from, so it can tell whether setup works and whether people come back, and so it can send the setup and weekly emails above. These markers are tied to your account, are never sold or shared, and are deleted with it.

Helios also runs a public demo connector with a fictional athlete. Nothing you say to it is saved or linked to you. It counts only totals of conversations and tool calls, and to limit abuse it keeps a one-way hash of your address for a few minutes.

Your browser keeps your sign-in token and display preferences in its local storage, and where the current visit started in session storage, which clears when you close the tab.

Keeping and deleting your data

• Your data is kept for as long as you have an account.
• Delete everything yourself in Settings → Session → Delete account. This permanently erases your account and all the data above, and revokes Helios's Strava and Oura access. Your activities on Strava itself are not touched.
• You can disconnect Strava or Oura at any time, either from Settings or from their own settings. Helios then stops syncing.
• For a copy of your data, or help with deletion, email privacy@helioscoach.com.

Changes and contact

If this policy changes materially, the date above is updated. Questions go to privacy@helioscoach.com.