Most health apps ask you to trust their security. Helix is built so there is less to trust: there is no backend and no account. Nothing to sign up for, no password to leak, no server-side database of your health data, because there is no server holding one. Every score you see, recovery, strain, sleep, stress, is computed on your iPhone and stored on your iPhone.
The architecture is the privacy policy
Helix reads Apple Health with the permissions you grant, builds your baselines and scores locally, and keeps everything it learns about you on the device. Raw Health samples are never uploaded anywhere. Your profile, journal, day ratings, uploaded bloodwork and learned personalization all live on the phone too. There is no analytics SDK in the app, no ad tracking and no data broker, health data or otherwise.
What ever leaves the device
A small number of features send something out, and only when you use them:
- The AI coach. When you ask the coach a question, it sends anonymized numbers, scores and metrics, to the AI providers (OpenAI and Claude). They receive numbers, not your identity, name or raw Apple Health samples. Nothing is stored server-side by Helix, because Helix has no server to store it on. You can turn the coach off in Settings at any time.
- Other AI features you invoke. Physique and gym scans, exercise guides and workout imports send the input you chose to submit, get the result back, and store nothing. The privacy policy describes each one.
- Subscriptions. Helix Pro purchases are processed by Apple and managed through a subscription processor that receives an anonymous identifier and a purchase receipt, never health data.
- Game Center, if you opt in. Achievements and leaderboard scores ride Apple’s own network under your Apple identity. Helix never sees your friends list and holds no copy of the leaderboards.
Data, at a glance
| Data | Where it lives | What ever leaves |
|---|---|---|
| Apple Health data (HRV, heart rate, sleep, workouts) | Apple Health, read on your iPhone | Nothing. Raw samples are never uploaded |
| Scores and baselines (recovery, strain, sleep, stress) | Computed and stored on your iPhone | Anonymized numbers, only when you ask the AI coach |
| Profile, journal, day ratings, bloodwork | Your iPhone | Nothing |
| Subscription status | Apple / subscription processor | Anonymous identifier and receipt, no health data |
| Game Center scores (opt-in) | Apple’s network | Scores and badge names, via Apple, not Helix |
What this means in practice
- No password to leak. There is no account, so a Helix credential breach is not a thing that can happen.
- Deletion is real. Delete the app, or use Settings to delete all data, and the data is gone with it. There is no server-side copy left behind to request removal of.
- Your data stays portable. The underlying health data lives in Apple Health, which you can export at any time. It was always yours; Helix just reads it.
This page describes the architecture. The authoritative legal document is the privacy policy, which covers the same facts in full.