Security and data
What we store, where, and how to erase it
Helio sees only the statements you’ve exported from your bank yourself. We don’t connect to your accounts, we don’t know your passwords, and we can’t move your money.
In short
No bank passwords
Only the files you exported yourself.
The file stays in your browser
Your browser reads the statement. The file itself never reaches our servers; only the operations read from it are saved.
Data in Belgium, EU
Google Cloud, region europe-west1.
We don’t sell data
No ads, no pixels, no third-party analytics.
01
What we store and where
Exactly what the month’s picture needs: date, amount, currency, transaction description, bank, category and your household’s answers. All of it sits in a Google Cloud data center in Belgium. That’s how it’s been set up from day one.
| Data | Where | How long |
|---|---|---|
| Transactions, rules, household members | Google Cloud Firestore, Belgium | Until you delete the household |
| Statement files | Read in your browser, not uploaded to a server | Not kept, only the operations read from them |
| Sign-in | Sign-in with Google or Apple, we hold no password | As long as the account exists |
| Backups | Google Cloud, Belgium (europe-west1), managed by Firestore | Daily, each kept 30 days |
| Waitlist email address | Google Cloud Firestore, Belgium | Until Helio Premium launches, or until you ask us to delete it |
Between your browser and us, data travels only over HTTPS. On Google Cloud disks it’s encrypted.
02
What we never ask for
- An online banking login or password
- A code from an SMS or from the bank’s app
- A card PIN or CVV
- Access to your account through intermediaries
You export the statement in your bank’s app yourself and upload the file to Helio. So we see nothing beyond that file and can neither transfer money nor change anything at the bank. If someone in Helio’s name asks for a password or a code, it’s fraud.
03
Who sees your data
The members of your household whom you’ve invited yourself. Each signs in with their own Google or Apple account. They see only what’s been uploaded to the household: nobody sees a card whose statement you don’t add.
We don’t sell data, we don’t show ads, and we pass nothing to ad networks. We look at a household’s data only when its owner asks us for help.
Who processes data for us
| Google Cloud | Storage, backups, sign-in. Region europe-west1, Belgium. |
| Stripe | Will appear together with payments. Sees only payment details, not your transactions. |
04
How to delete everything
This is how deletion will work. The button will appear in the settings.
- You’re the last one in the householdYou delete your account, and along with it the household’s transactions, rules and answers disappear right away.
- Your partner stays in the householdYour account and sign-in disappear. The transactions you’ve already uploaded stay in the shared household until whoever is left deletes it.
- BackupsA deleted household can stay inside backups for up to 30 days, until they expire.
- Statement filesThey are not uploaded to a server, so there is nothing to delete. The operations read from them are removed as described above.
Before deleting, you can ask for a copy of all your data by email. It’s free on any plan. We’ll delete your waitlist address on your first email to hello@heliofamily.com.
05
The free tool
“Statement to chart” works entirely in your browser. The file is read on your computer and is sent nowhere, not even to us. You can check: open the page, turn off the internet and drag in a statement.
06
Contact
Security and vulnerabilities
Data, deletion, questions
Pay for Helio Premium in Plan in your cabinet. For billing questions, write to hello@heliofamily.com.
See what exactly Helio does with a statement
A demo with a fictional household. Nothing to upload.