Privacy Policy

Helm is a personal planning app operated by Memriq Holdings, Inc. (“Memriq”, “we”). This page says what Helm keeps about you, what it is used for, who else sees it, and how you stay in control. Everything on this page, our two promises included, is what Helm actually does today.

Our promise to you

The short version

• Your boards are yours. Nobody else who uses Helm can open them unless you share a board with them, and you can stop sharing at any time.
• When you correct Helm's agent, it learns for you alone. What you teach it is never used on anyone else's to-dos.
• Your to-dos and boards are kept in the United States, and everything travels between your device and Helm over a secure connection.
• We never receive your Google password. If you sign in with an email address instead, we keep only a scrambled, one-way version of your password, never the password itself.
• You can download or delete your Helm data from Settings › Accounts, any time.

What we collect

• Your account — your email address and name. If you sign in with Google, also your Google profile picture and Google account ID.
• Your boards and to-dos — the boards, columns, to-dos, sub-tasks and reminders you create, and the daily brief Helm writes for you.
• Calendars you connect — if you connect a Google calendar, which calendars you attach to a board, and any event you turn into a to-do: its description is copied into the to-do.
• Mail and Drive files Helm finds for you — Helm reads your Gmail and Google Drive only through Harbor, Memriq's service for your own mail and documents: your Gmail once you connect it there, and your Drive once you turn on “Let Helm search my whole Drive” there. When a to-do names an email or a file and you or Helm's agent look for it, Helm searches for it; an email you attach is kept in that to-do, sealed with the key of the account that holds the to-do. Helm's agent looks in your mail or Drive only for a to-do in your own accounts; when you choose to add an email or Drive file to a to-do on a board someone shared with you, Helm first tells you that everyone on that board will be able to read it, and it is kept in that board owner's account, sealed with its key. A Drive file is kept only as a pointer — its name, kind, last-changed date, link and the words that found it — sealed the same way; the files the agent found while looking (up to ten, never their contents) stay in that run's record, sealed the same way. Helm never downloads or keeps the file itself.
• What you give Helm's agent — the to-dos you hand it, anything you tell it, and what it gives back.
• How you use Helm — which of Helm's views you use each day, and how much of your plan's allowance you have used.
• Records that help us fix problems — while you use Helm, it keeps a short record of your visit: the pages you open, how long they take and any errors. It keeps none of what Helm shows you — no to-dos, no answers from the agent, no search words. If something breaks, or you send us feedback, the record also includes a replay of the last 30 seconds on your screen with every word on it hidden, so we can see where you clicked but not what you read. Records made before 28 September 2026 held short snippets of what Helm showed; those snippets were removed on 28 September 2026. These records carry your email address.

How we use it

• To keep your boards and to-dos, and show them to you on every device you sign in on.
• To write your daily brief, and to do the jobs you ask Helm's agent and the Helm Organizer to do.
• To learn from the corrections you give the agent, for you alone.
• To send an invitation email to someone you invite to a board, only when you press Invite.
• To find and fix problems.
• To run your plan: what it includes, and how much of it you have used.

Who else sees it

• OpenAI. To write your brief, read in a list you import, answer the Helm Organizer and do the work you give the agent, Helm sends the to-dos and words involved to OpenAI's AI models. Based on our arrangement with OpenAI, they do not train on your data.
• Google. If you sign in with Google, Google tells us your name, email address and profile picture. If you connect a calendar, Helm reads and writes that calendar through Google.
• Stripe. If you buy Helm Pro, you enter your card on Stripe's own checkout page. Helm keeps which plan you are on, never your card.
• The people you choose. Anyone you share a board with sees that board. Someone you invite gets an email, sent by Memriq's email service, saying who invited them.
• Memriq's team. To decide what the agent should learn to do next, we see only the kinds of help that several people wanted and it could not give, each named by that person's own agent and never in their words, and how many people asked. We are never shown what anyone asked it. We read the records above when we fix a problem.

We do not sell your data.

Information from your Google account

Helm's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. It is used only to provide the features on this page, to you; it is never sold, never used for advertising, and never used to develop, train or improve a generalized or foundational AI or machine-learning model. When Helm's agent works on a to-do, the email text involved is sent to OpenAI's API, whose terms state that OpenAI does not train its models on API data. No person at Memriq reads it, except with your permission for a specific message, when needed to investigate abuse or keep the service secure, or when the law requires it.

• Encryption. Everything travels between your device, Helm, Harbor and Google over encrypted connections (HTTPS/TLS). Helm never stores a Google token: the grant is Harbor's, and its tokens are encrypted before Harbor stores them. An email or Drive pointer you attach is sealed with the key of the account that holds the to-do. Helm's agent looks in your mail or Drive only for a to-do in your own accounts; when you choose to add an email or Drive file to a to-do on a board someone shared with you, Helm first tells you that everyone on that board will be able to read it, and it is kept in that board owner's account, sealed with its key.
• Access controls. Helm reads Gmail and Drive only for the account that connected them, and only through Harbor. Memriq's internal tools have no screen that shows anyone's mail or Drive files.
• Retention. An email or Drive file you attach stays in that to-do until the to-do is deleted or the account that holds it is closed; a Drive file is kept only as its pointer (name, kind, last-changed date, link and the words that found it), never its contents. When Helm's agent looks in your Drive for a to-do, the run keeps what it found (up to ten files: name, kind, last-changed date, link, owners and the words that found them, never their contents), sealed with your account's key, until you close your account.
• Deletion. Deleting a to-do deletes what was attached to it, and “Close this account” deletes everything Helm holds. To stop Helm reading your mail or Drive, disconnect them in Harbor, or remove Memriq's access at any time at myaccount.google.com/permissions.

Keeping and deleting it

We keep your data while your account is open. To delete it, sign in, open Settings › Accounts and choose “Close this account”: every Helm record that account holds is deleted straight away, and so are the problem-fixing records of your visits. That button does not yet reach one thing kept outside Helm: your billing history. Email privacy@memriq.ai to ask us to remove it.

Your data explains what Helm keeps in everyday words, and how to take a copy with you.

Your rights

You may ask to see, correct or delete your data at any time by emailing privacy@memriq.ai. We respond within 30 days.

Contact

Questions? privacy@memriq.ai