Privacy Policy

The data controller responsible for your personal data is Helpy sp. z o.o. (helpy.com.pl). For any privacy-related enquiries, please contact us at privacy@helpy.com.pl.

• Account data — name, email address, and password hash when you register.
• Therapy session data — session notes, messages, and video call metadata shared between you and your therapist. This constitutes special-category health data under GDPR Art. 9.
• Mood diary entries — optional self-reported wellness data you choose to record.
• Payment data — billing details handled by our payment processor (Stripe). We do not store card numbers.
• Usage data — anonymised analytics about how you interact with the platform (page views, feature usage).

• Providing and improving the Helpy therapy platform.
• Matching you with certified therapists.
• Processing payments and issuing invoices.
• Sending service notifications and session reminders.
• Complying with legal obligations (e.g. anti-money-laundering, medical records retention).

• Contract (Art. 6(1)(b)) — processing necessary to provide the service you signed up for.
• Explicit consent (Art. 9(2)(a)) — for health and therapy session data.
• Legitimate interest (Art. 6(1)(f)) — for fraud prevention and product analytics.
• Legal obligation (Art. 6(1)(c)) — for financial and medical record-keeping.

We never sell your personal data. We share data only with:

• Your therapist — who is bound by professional confidentiality obligations.
• Stripe — for payment processing (Privacy Policy: stripe.com/privacy).
• Firebase / Google Cloud — for infrastructure and secure data storage within the EU (europe-central2).
• Legal authorities — where required by law.

Account and therapy data is retained for the duration of your account plus 7 years to meet medical-record obligations. Mood diary data is retained until you delete it or close your account. Anonymised analytics data may be retained indefinitely.

As a data subject in the EU you have the right to: access, rectify, erase, restrict processing of, and port your data. You also have the right to object to processing and to withdraw consent at any time. To exercise any of these rights, email us at privacy@helpy.com.pl. You may also lodge a complaint with your national supervisory authority (in Poland: UODO — uodo.gov.pl).

Helpy uses only essential cookies required for authentication and session management. No third-party advertising cookies are used.

We may update this policy periodically. Material changes will be notified via email or an in-app notice at least 30 days before taking effect.