Privacy

Last updated 18 October 2026

Helm is built so that the people who use it own their information. This page explains what Helm stores, where, and who can see it.

Where your data lives

• On your phone: your personal notes, private reminders, voice command history, meeting transcripts and your encryption keys. These never leave the phone. Helm stores them in app-private storage, and your keys and synced data are encrypted with a key held in the phone's secure keystore.
• On the Helm server at escapeplan.in: your account (name, Helm ID, title, company, city, a short bio you choose to add, and a scrambled form of your password), the organisations, projects and departments you belong to, expenses and their approvals, calendar events, tasks, notifications, club connections, and chat messages in encrypted form.

Chats are end-to-end encrypted

Messages are encrypted on the sender's phone with keys that belong to the people in the chat, and decrypted only on their phones. The server stores and passes on encrypted messages it cannot read. Each message is signed by its sender so it can't be altered or forged. If you sign in on a new phone, Helm creates new keys there, and chats sent before can't be read on the new phone.

No outside services

Helm does not use Google services, advertising networks, analytics or tracking. Notifications are generated by the app on your phone after it checks your organisation's own server. Voice commands are recognised on your phone; the wake word and meeting notes use an offline speech model. Tap-to-talk may use your phone's built-in speech recogniser, which is provided by your phone's maker.

Who can see what

• People in your organisation see your name, title and role, and messages in chats you share.
• Expenses are visible to the person who added them and to people with approval rights in that organisation.
• A personal assistant can see and change the calendar of the person they support, and that person can see and change theirs.
• Club members can look up your card (name, title, company, city) only if they know your Helm ID. They can message you only after you accept their request.
• Owners and co-owners can see an activity log of changes in their organisation, such as role changes and approvals.

Leaving and deleting

Signing out erases Helm's data from your phone. When an owner removes you from an organisation, your access to its chats, calendar and expenses ends immediately. To have your account removed from the server, ask the owner of your Helm server, or request it through the invitation form on the home page.

Security

All traffic to the server uses HTTPS. Passwords are stored as one-way hashes. Sign-in attempts are rate-limited. You can lock Helm with your fingerprint or screen lock, hide it from recent apps and screenshots, and sign out of every phone at once.

Changes

If this policy changes, the date at the top will change and the app will show a note on its next update.