Privacy Policy
Last updated: 15 September 2026.
Helpen is a private journal. You write down one good thing you did each day, and the app grows a garden from it. There is no feed, no friends, and nothing you write is shown to anyone else.
What we collect
Your email address. Used only to sign you in. We send a six-digit code to it. We do not send marketing email.
Your name, as you type it. Shown in the greeting on your own screen.
Your entries. The text you write, the date each entry belongs to, and when it was created and last changed.
That is everything. We do not collect your location, your contacts, your photos, your device identifiers, or any advertising identifier. There is no analytics in this app, no advertising, and nothing that follows you between apps or across the web.
How it is stored
Entries are written to your phone first, and the app works fully offline. When you have a connection they are copied to our database so they survive losing your phone and follow you to a new one. That database is hosted by Supabase (supabase.com), and row-level security means a signed-in account can read and write only its own rows.
Your sign-in is kept in your phone's own secure storage — the Keychain on iPhone, the Keystore on Android — and is set not to travel to a different device in a backup.
Signing out erases the entries from your phone. They remain in your account until you delete it.
Who we share it with
We do not sell your data, we do not share it with advertisers, and we do not use it to train anything.
Three companies handle parts of this on our behalf, and only on our instructions. None of them may use your data for their own purposes.
Supabase hosts the database and the sign-in system. They store your email address, your name and your entries.
Resend delivers the email containing your sign-in code. They see your email address and the code. They do not see your entries or your name.
Cloudflare runs the security check on the sign-in screen, which is there to stop automated abuse of the code-sending system. You will not normally see it or have to do anything. It looks at signals from your device and your browser engine to judge whether the request is coming from a person. It does not see your email address, your name or your entries, and it is used on the sign-in screen only. Cloudflare's handling of it is covered by the Cloudflare Turnstile Privacy Addendum.
Deleting your account
Settings → Delete account removes your account, your name, and every entry, from your phone and from our servers. It is immediate and cannot be undone.
You can also write to hello@helpen.app and ask us to do it. How to delete your account sets out both routes in full.
Children
Helpen is not directed at children under 13, and we do not knowingly collect anything from them.
Changes
If this policy changes, the date at the top changes with it.
Contact
Helpen — a daily record of small kindnesses. Delete your account