Privacy policy
PRIVACY AND PERSONAL DATA PROTECTION POLICY
Last updated: October 22, 2026
PREAMBLE
Committed to protecting the personal data of its users, Helite undertakes to comply with the provisions of French Law No. 78-17 of 6 January 1978 on information technology, data files and civil liberties, as amended, and with those of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
As data controller, Helite therefore undertakes to respect the confidentiality and ensure the security of your personal data, under the conditions set out in this Personal Data Protection Policy.
Before any use of our website or of our mobile application, before creating an account, subscribing to our newsletter or placing any order, acceptance of this privacy policy is required.
So that you can browse our website and use our mobile application with complete peace of mind, we, HELITE, as data controller, provide you with all the information relating to the processing of your personal data. This “Personal data and cookies” policy will be updated whenever we change our personal data processing.
This privacy policy applies to all of our services:
– The helite-service.com website
– The Helite mobile application (available on the Apple App Store and the Google Play Store)
The Helite mobile application complies with the data protection requirements of the Apple App Store and the Google Play Store. It uses monitoring and analytics services hosted exclusively in the European Union (CLIENT variant only for analytics).
We are available to answer your questions at the following email address: helite@helite.com
1- DEFINITION OF PERSONAL DATA AND IDENTIFICATION OF THE DATA CONTROLLER
Personal data is defined by the aforementioned Regulation (EU) 2016/679 as any information relating to an identified or identifiable natural person.
An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, economic, cultural or social identity of that natural person.
The data controller is the natural or legal person which, alone or jointly with others, determines the purposes and means of the processing of personal data.
The controller of the personal data transmitted in particular when browsing the website, using the mobile application, creating a customer account or placing an order is:
HELITE
SAS (French simplified joint-stock company) with a share capital of €1,100,000
1 rue de la Petite Fin
21121 Fontaine-Lès-Dijon
Registered with the Dijon Trade and Companies Register (RCS) under number 883 586 869
Email: helite@helite.com
2- DEFINITION OF A COOKIE
The French data protection authority (Commission Nationale de l’Informatique et des Libertés, CNIL) defines a cookie as a string of information, generally small and identified by a name, which may be sent to your browser by a website you connect to. Your web browser keeps it for a certain period and sends it back to the web server each time you reconnect to it. Cookies have many uses: they can be used to remember your customer ID on a merchant website, the current content of your shopping cart, an identifier used to track your browsing for statistical or advertising purposes, etc.
Cookies are thus used in particular to collect information about your browsing on websites and to provide you with personalized services.
Beyond the trackers placed and/or read when visiting a website, the term “cookie” also covers trackers placed and/or read in particular when reading an email or using software or a mobile application.
For the Helite mobile application: the storage technology used is AsyncStorage (secure local storage on iOS/Android), without cookies in the web sense. Data is stored on your mobile device. Only data relating to the features of your user account (see section 5) is transmitted to our servers, and only anonymized technical data is sent to our monitoring partners (Sentry for error detection and PostHog for usage statistics – CLIENT variant only), both hosted in the European Union.
3- WHAT TYPES OF COOKIES DO WE USE AND FOR WHAT PURPOSES?
We use different types of cookies for different purposes, in particular for browsing our website and for optimizing and personalizing our services on the website. We mainly use cookies to improve your experience on our website.
The information collected by cookies may include, for example, the following types of information: type of device used, unique browser identifier, IP address, unique cookie identifier, browser type, language, country, operating system, system settings, information about your interaction with our websites (purchases, stated preferences and browsing behavior).
There are three types of cookies:
Strictly necessary cookies
These are the cookies required for our website to work. They allow you to use the main features of our website (for example using the shopping cart or accessing your account). Without these cookies, you will not be able to use our website normally. These cookies are placed by Helite and relate only to the operation of our website.
Analytics cookies
Analytics cookies collect information about how visitors use the website, in an aggregated and anonymous way. They are used to analyze and improve how the website works.
Functional cookies
Functional cookies allow the website to remember your choices and to personalize your experience on our website (for example your user name, your language, remembering the items in your shopping cart before you continue shopping, etc.) and thus provide more personal features. They can be used to provide the services you have requested, such as watching a video.
3bis- TECHNOLOGIES USED IN THE MOBILE APPLICATION
The Helite mobile application uses specific storage and monitoring technologies, which are different from web cookies.
AsyncStorage (Local Storage)
The storage technology used is AsyncStorage, a native secure storage solution on iOS/Android.
– Local storage on your mobile device
– Data transmitted to our servers is limited to the data of the features linked to your user account (see section 5)
– Automatic and permanent deletion of all your data when the application is uninstalled
Monitoring and Analytics Services
The application integrates third-party services to improve quality, stability and the user experience. All these services are GDPR-compliant and hosted exclusively in the European Union.
Sentry (Error Monitoring)
– Purpose: Detect and fix bugs, improve the stability of the application
– Data collected: Application crashes, technical errors, debugging logs, device model, operating system version, application version, path through the application leading up to the error (screens visited and actions performed), serial number and software versions of the connected CDU
– Personal data: Pseudonymized data only. When you are signed in to your account, the technical identifier of your account and its role are attached to error reports so that support can diagnose a reported problem. No name, email address, telephone number or GPS position is transmitted.
– Hosting: European Union (Frankfurt, Germany)
– GDPR compliance: Guaranteed
– Privacy policy: https://sentry.io/privacy/
PostHog (Analytics – CLIENT Variant Only)
– Purpose: Understand how the application is used and improve the user experience
– Availability: This feature is active only in the CLIENT version of the application (com.helite.client), not in the INTERNAL version (com.helite.internal)
– Data collected: Anonymized usage events (screens visited, actions performed, session duration), anonymous unique installation identifier
– Personal data: No personally identifiable data is transmitted
– Hosting: European Union (AWS Ireland)
– GDPR compliance: Guaranteed
– Privacy policy: https://posthog.com/privacy
MapLibre (Mapping)
– Purpose: Display maps to view your recorded rides
– Data collected: No personal data transmitted
– Storage: Map tiles cached locally on your device
– Nature: Open source mapping library
– Transmission: No transmission of personal data
– Website: https://maplibre.org/
No cookies in the web sense are used in the mobile application.
No transfer of personal data outside the European Union.
4- ACCEPTING OR REFUSING COOKIES
Before placing or reading a cookie, in accordance with applicable laws and regulations, we:
– inform you of the purpose of the cookies (see 3- What types of cookies do we use and for what purposes?);
– ask for your prior consent, which is given for a maximum period of
13 months;
– give you the option of refusing cookies;
– give you the option of accessing the services of our website even if you refuse to consent to cookies;
– provide you with a means of withdrawing your consent to cookies.
Please note that cookies essential to the technical operation of our websites and those relating to the provision of an online communication service at your express request are not subject to these obligations.
You have several ways of managing cookies.
Settings on helite-service.com
You can choose to disable cookies at any time by clicking on the following link:
Cookie Management (link to be set up to accept or refuse cookies)
Settings in your web browser
You can change your browser settings to delete or prevent the storage of certain cookies on your computer or mobile device.
You can choose to disable these cookies at any time.
Your browser can also be set to notify you of the cookies placed on your computer and ask you whether or not to accept them. You can accept or refuse cookies on a case-by-case basis or refuse them systematically once and for all.
If your browser is set to refuse all cookies, strictly necessary cookies will also be blocked. As a result, you will not be able to make purchases. By blocking functional cookies, you will also be unable to benefit from essential features of our website, such as storing items in your shopping cart.
To manage cookies as closely as possible to your expectations, we invite you to configure your browser taking into account the purpose of the cookies as mentioned above. Each browser is configured differently. The configuration is described in your browser’s help menu, which will tell you how to change your cookie preferences.
You can disable cookies by following the links below, depending on your browser:
Internet Explorer: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox: https://support.mozilla.org/en-US/kb/clear-cookies-and-site-data-firefox
Safari: https://support.apple.com/en-us/guide/safari/sfri11471/mac
Google Chrome: https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DDesktop&hl=en
For other browsers, please refer to their help menu.
4bis- MANAGEMENT OF THIRD-PARTY SERVICES IN THE MOBILE APPLICATION
Services Essential to the Operation of the Application
The Sentry (error monitoring) and PostHog (analytics – CLIENT variant only) services are essential to the proper operation, stability and continuous improvement of the Helite mobile application.
These services cannot be disabled individually by the user, as they are required to:
– Detect and fix errors and bugs (Sentry)
– Understand how the application is used in order to improve the user experience (PostHog – CLIENT only)
Hosting and GDPR Compliance
All third-party services used by the Helite mobile application are hosted exclusively in the European Union and fully comply with the General Data Protection Regulation (GDPR):
– Sentry: Hosted in the European Union (Frankfurt, Germany)
– PostHog: Hosted in the European Union (AWS Ireland)
– MapLibre: Tiles stored locally, no data transmission
No transfer of personal data outside the European Union.
GDPR compliance guaranteed for all services.
Nature of the Data Transmitted to Third-Party Services
The data transmitted to our monitoring partners is strictly technical and anonymized:
Sentry (Error Monitoring):
– Technical data: Error logs, crash traces, system information
– Device model and operating system version (iOS/Android)
– Application version
– Path through the application leading up to the error (screens visited, actions performed)
– Serial number and software versions (firmware, setup) of the connected CDU
– Technical account identifier and role (pseudonymized data, only if you are signed in)
– No name, email address, telephone number or location
PostHog (Analytics – CLIENT Variant Only):
– Anonymized usage statistics: Usage events, screens visited, session duration
– Anonymous unique installation identifier (not linked to a personal identity)
– No personally identifiable data
MapLibre (Mapping):
– No data transmitted
– Map tiles cached locally
Your Personal Data and our Servers
Your personal data (GPS ride history, preferences, CDU device data, etc.) is stored on your mobile device. When you are signed in to your user account, some of it is transmitted to the api.helite.com server operated by Helite: your rides, the airbag deployment logs of your CDU (see section 14), your emergency contacts and your emergency alerts (see section 13), as well as the data you choose to send to support. None of this data is transmitted to third-party services for commercial purposes.
Only anonymized technical data is sent to the monitoring services to improve the quality of the application.
5- WHAT PERSONAL DATA IS COLLECTED?
1. Collection of your personal data
We collect data about you in the following two ways:
– from the information you provide to us,
– through automated technologies.
a) The data you provide to us
The categories of personal data we collect directly from you depend on how you interact with our services (website or mobile application) and may include:
For the helite-service.com website:
“Mandatory” data:
(This information is necessary to provide the services we offer. It is marked with asterisks.)
– your contact details such as your surname, first name, email address, postal address, mobile and/or landline telephone number, your login and your password,
– any information specific to a request that may be necessary to provide the requested service,
– information relating to purchases and orders and to the implementation of the warranty.
“Optional” data:
(This data is requested in order to get to know our users better and thus best meet their expectations.)
– riding discipline,
– date of birth,
– comments, reviews, feedback and other information you share with us,
– etc.
For the Helite mobile application only:
The mobile application allows you to create a user account. The data collected is as follows:
User Account:
– Email address
– First name and surname
– Date of birth (only when signing up with an email address and password)
– Preferred language
– Password (stored in encrypted form, only when signing up by email)
Sign-in with Google or Apple (optional):
If you choose to sign in with your Google or Apple account, we receive the following data from these providers: email address (or an anonymized relay address if you use Apple’s “Hide My Email” feature), first name and surname, and a technical account identifier. We never receive your Google or Apple password. No other data from your Google or Apple account is accessed. The terms of use of these services are governed by the privacy policies of Google (https://policies.google.com/privacy) and Apple (https://www.apple.com/legal/privacy/).
Bluetooth (BLE) Device Identifiers:
– UUID (unique identifier) of the CDU (Controller Data Unit) peripheral
– Commercial name of the Helite peripheral
– Accessible Bluetooth services and characteristics
User Preferences (Local Storage):
– Application language (French, English, German, Spanish, Italian, Portuguese)
– Favorite devices saved for quick connection
– Application settings (theme, notifications, etc.)
Contact Form (If Present in the Application):
– Name
– Email address
– Message or description of the request
An account is required to access certain features (ride synchronization, transmission of airbag deployment logs, emergency contacts, sending data to support). It can be created with an email address and a password, or with a Google or Apple account.
You can edit your information (surname, first name, date of birth) and delete your account at any time from the Profile page of the application. Deleting the account erases your account data, your emergency contacts and your device associations. Airbag deployment logs already transmitted are dissociated from your account and retained without any link to it (see section 14).
b) Data collected automatically
For the helite-service.com website:
(See the provisions of this policy relating to cookies)
We may automatically collect data based on the way you, and your device, interact with our services, in particular:
– so-called “behavioral” information: type of pages visited, nature and amount of purchases, purchase path, etc. (non-exhaustive list).
– electronic identification data available on or from your computer (such as “cookies” or “IP addresses”)
For the Helite mobile application only:
GPS Location Data:
– Geographic coordinates (latitude, longitude) recorded during your rides
– Collected only with your explicit consent through the operating system permissions (iOS/Android)
– Stored on your mobile device and, if you are signed in to your account, synchronized with the api.helite.com server so that they can be viewed from the application
– Used to record your rides and display them on a map
Ride History:
– Date, time and duration of each ride
– Complete GPS track of the route
– CDU device data associated with the ride (battery, modes, status)
– Stored on your device and, if you are signed in to your account, synchronized with the api.helite.com server
Technical Data of the CDU (Controller Data Unit) Device:
– Battery status (charge level, voltage)
– Operating modes (pyro, sensor modes, detection modes)
– Internal status of the CDU (status codes, diagnostics)
– Data from the onboard sensors (accelerometer, gyroscope, etc.)
– Real-time orientation of the CDU (angles), read only while the 3D visualization tool reserved for authorized Helite accounts is displayed; these values are neither recorded nor transmitted
– Device usage history
Airbag Deployment Logs (if you are signed in to your account):
– For each deployment recorded by the CDU: date and time, GPS position and speed at the time of deployment, inertial sensor measurements around the deployment, device status, CDU software versions
– Automatically transmitted to the api.helite.com server (details in section 14)
Diagnostic and Monitoring Data:
– Technical error logs, path through the application leading up to the error, serial number and versions of the connected CDU, pseudonymized technical account identifier (via Sentry – EU hosting)
– Anonymized usage events (via PostHog – CLIENT variant only, EU hosting)
– Crash reports and sessions (Sentry Session Replay)
– No name, email address, telephone number or GPS position transmitted to the monitoring services
Technical Identifiers of the Mobile Device:
– Mobile device model (iPhone, iPad, Android devices)
– Operating system version (iOS, Android)
– Version of the installed Helite application
– Anonymous unique installation identifier (for analytics – not linked to a personal identity)
No health data is collected by the mobile application.
Personal data (GPS rides, preferences, CDU history) is stored on your mobile device. Only the data relating to the features of your account (rides, airbag deployment logs, emergency contacts and alerts, data sent to support) is transmitted to the api.helite.com server.
c) Protection of the data of minors under 13
We may occasionally process data relating to minors under the age of 13 on our website or in our mobile applications. However, in accordance with Article 8 of the aforementioned European Data Protection Regulation, we ensure that such collection takes place with the express authorization of the holder of parental responsibility over the child.
6- WHEN DO WE COLLECT YOUR PERSONAL INFORMATION?
Your personal information may be collected when:
For the helite-service.com website:
– you browse our website (which may use cookies);
– you create an account or register on our website;
– you place an order on our website;
– you subscribe to our newsletter;
– you take part in a satisfaction survey;
– you send us an email.
For the Helite mobile application:
– When the application is installed and launched for the first time on your mobile device;
– When using the Bluetooth features (scanning for BLE peripherals and connecting to Helite CDU devices);
– When enabling and recording rides via GPS (with explicit consent through system permissions);
– When viewing the ride history and the usage data of the CDU device;
– When the application connects to your CDU device, or when you sign in to your account while the CDU is connected: automatic transmission of airbag deployment logs (if you are signed in to your account);
– When exporting your personal data (PDF or CSV format, sending by email);
– When using the contact form built into the application (if present);
– In the event of a technical error or crash of the application (automatic transmission of logs to Sentry – EU hosting);
– When using the application, for the collection of anonymized usage events (PostHog – CLIENT variant only, EU hosting).
7- WHY DO WE COLLECT YOUR PERSONAL INFORMATION?
When we collect personal information from you under European data protection laws, we do so:
– with your consent (for example: enabling GPS to record rides, Bluetooth permissions); or
– where necessary to provide you with services, carry out a transaction or perform a contract, or at your request (for example: handling the warranty of your Helite product); or
– where necessary, to comply with applicable legislation or another legal obligation.
Where we process your data on the basis of consent, you may withdraw that consent at any time and, where we process it on the basis of a legitimate interest, you may object to it.
Depending on how you communicate with us and use our services (website or mobile application), we use your personal data for the following purposes:
– complying with our legal obligations, resolving disputes and enforcing our agreements,
– performing our contractual obligations,
– evaluating the services we offer.
More specifically, in particular:
For the helite-service.com website:
– handling your requests for information and answering your questions;
– allowing you to create and access a personal space on the website;
– managing our commercial relationship, in particular processing and following up your order, your delivery, your invoicing and after-sales service;
– managing unpaid amounts and disputes;
– combating fraud;
– adapting the presentation of our website to your device (mobile, computer or tablet);
– being able to personalize the offers / products that may interest you based on your purchase history;
– producing commercial statistics or measuring the performance of the communications deployed;
– carrying out analyses and using marketing tools (e.g. scoring, segmentation, etc.),
– managing the competitions, surveys, etc. in which you take part.
For the Helite mobile application:
Functional Purposes:
– Connecting to and communicating with your Helite device (airbag vest) via Bluetooth Low Energy (BLE);
– Recording and displaying your ride history with GPS geolocation;
– Viewing the technical data and status of your CDU (Controller Data Unit) device: battery, operating modes, internal status, sensors, orientation (authorized Helite accounts);
– Mapping and viewing your rides on an interactive map (MapLibre);
– Exporting your personal data in the formats you want (PDF, CSV, sending by email) to exercise your GDPR rights;
Product Safety Purposes:
– Analysis of airbag deployments (fall, accident or unintended deployment) in order to improve the reliability of detection and the safety of Helite products (see section 14);
Contractual and Legal Purposes:
– Managing the warranty of your Helite product;
– After-sales service and technical support;
– Complying with our legal and contractual obligations;
Technical and Improvement Purposes:
– Improving the quality, stability and security of the mobile application (via Sentry – EU hosting);
– Analyzing how the application is used in order to improve the user experience (via PostHog – CLIENT variant only, EU hosting);
– Detecting, fixing and preventing bugs and technical errors;
All these purposes are implemented in compliance with the GDPR, with exclusive hosting in the European Union for third-party services (Sentry, PostHog).
8- WHO ARE THE RECIPIENTS OF YOUR PERSONAL DATA?
Depending on the service provided, we may need to disclose your data to
processors (for example postal services, Helite distributors in particular in the context of after-sales service or a product recall) in order to process the necessary data on the basis of your instructions and in accordance with this privacy policy and any other applicable confidentiality and security measures.
For the Helite mobile application, your CDU device usage data may be disclosed to our Helite distributors exclusively in the context of after-sales service, the warranty of your product or a product recall. This disclosure is necessary for the performance of our contractual and legal obligations.
We will disclose your personal data if we believe in good faith that such disclosure is necessary to:
– comply with applicable laws, regulations, legal proceedings or other legal obligations,
– detect, investigate and prevent security, fraud or technical issues.
In addition, Helite undertakes not to sell your personal data to third parties for commercial purposes. Your data may be passed on by us to our distributors or partners in order to respond to your requests, but we never do so in return for payment.
Only authorized persons within Helite have access to your personal data.
Third-Party Services for the Helite Mobile Application:
The mobile application only transmits anonymized technical data to the following third-party services, all hosted in the European Union and GDPR-compliant:
Sentry (sentry.io) – Error and Crash Monitoring:
– Purpose: Detection, analysis and correction of technical errors, bugs and crashes of the application
– Data transmitted: Anonymized error logs, crash traces, system information (device model, OS version, app version)
– Personal data: No personally identifiable data transmitted
– Hosting: European Union (Frankfurt, Germany)
– GDPR compliance: Guaranteed
– Privacy policy: https://sentry.io/privacy/
PostHog (posthog.com) – Analytics (CLIENT Variant Only):
– Purpose: Analysis of how the application is used in order to improve the user experience
– Availability: Active only in the CLIENT version of the application (com.helite.client), disabled in the INTERNAL version (com.helite.internal)
– Data transmitted: Anonymized usage events (screens visited, actions performed, session duration), anonymous unique installation identifier
– Personal data: No personally identifiable data transmitted
– Hosting: European Union (AWS Ireland)
– GDPR compliance: Guaranteed
– Privacy policy: https://posthog.com/privacy
MapLibre – Mapping:
– Purpose: Displaying maps to view your rides
– Data transmitted: No personal data transmitted
– Storage: Map tiles cached locally on your device
– Nature: Open source mapping library
– Website: https://maplibre.org/
GDPR Compliance – Third-Party Services of the Mobile Application:
All third-party services used by the Helite mobile application fully comply with the General Data Protection Regulation (GDPR):
✓ Sentry: Hosted in the European Union (Frankfurt, Germany)
✓ PostHog: Hosted in the European Union (AWS Ireland)
✓ MapLibre: No transmission of personal data
No transfer of personal data outside the European Union.
Full GDPR compliance with exclusive EU hosting for all third-party services.
9- WILL YOU RECEIVE MARKETING COMMUNICATIONS?
You will not receive marketing communications. Helite will ask for your explicit consent should this ever change. Without consent, no communication or solicitation will be sent to you.
This provision applies both to the helite-service.com website and to the Helite mobile application.
10- HOW CAN YOU EXERCISE YOUR RIGHTS?
In accordance with the regulations in force regarding the protection of personal data, you may:
– access all of your data;
– rectify or update your data if it is inaccurate, incomplete or out of date;
– request the portability of your data;
– object to the processing of your data or request its restriction;
– request the erasure of your data. This is not an absolute right, as we may be required to retain your personal data for legal, legitimate or contractual reasons.
You may exercise your rights as described above at any time by sending your request to helite@helite.com
We may verify your identity before processing your request.
Details for the Helite Mobile Application:
Right of Access:
You can view and export all of your personal data directly from the mobile application using the built-in export features (PDF, CSV, email). All your data is accessible at any time from the application interface.
Right to Erasure:
Uninstalling the Helite mobile application automatically and permanently deletes all your personal data stored locally on your device (GPS ride history, user preferences, CDU device data, saved devices, etc.). It does not delete the data already transmitted to the api.helite.com server as part of your account: you can delete your account from the Profile page of the application, or request the erasure of this data at helite@helite.com.
Right to Data Portability:
The mobile application allows you to export your personal data in the following standard formats:
– PDF format (for viewing and archiving)
– CSV format (for importing into other applications)
– Sending by email (for transmission or backup)
Right to Rectification:
You can change your user preferences (language, favorite devices, settings) directly in the settings of the mobile application, without having to contact us.
Right to Object and to Restriction:
You can revoke the permissions granted to the application (Bluetooth, GPS Location, Photo Library) at any time in the settings of your operating system (iOS or Android):
– Revoking the Bluetooth permission will prevent connection to the Helite device
– Revoking the Location permission will prevent GPS recording of rides
– Revoking the Photo Library permission will prevent saving exports and ride images to your photos
Contact for Exercising your Rights:
For any question or request relating to the exercise of your GDPR rights concerning the website or the mobile application, you can contact us at the following email address: helite@helite.com
11- WHERE IS YOUR PERSONAL DATA STORED? IS IT SECURE?
Helite undertakes, by taking reasonable precautions, to protect the security of your personal information. We have implemented technical and organizational measures to protect your personal data against loss, theft, misuse and unauthorized access, disclosure, alteration and destruction. Personal data is stored in compliance with French law and European regulations. Operations with a service provider receiving your data are covered by a contract to ensure the protection of your data and respect for your rights.
For the helite-service.com website:
A customer account can only be created by entering a login and a password that are personal to you. You must nevertheless protect your account password and not share it with anyone. As a reminder, Helite will never ask you for your login, your password or your bank details by email.
Helite may sometimes transfer your personal data outside the European Union, for example when our partners’ servers are located outside the European Union or when you live outside the European Union. However, you will be informed of this, and Helite ensures that your personal data is adequately protected in accordance with French and European regulations. Protecting our customers’ data is a priority for Helite.
For the Helite Mobile Application:
Local Storage on Your Mobile Device:
The personal data collected by the Helite mobile application is stored on your mobile device using the AsyncStorage technology (native secure storage on iOS/Android).
Data stored locally:
– Complete history of your GPS rides (geographic coordinates, date, time, duration, track)
– User preferences (language, favorite devices, application settings)
– CDU (Controller Data Unit) device usage data: battery, modes, status, sensors
– Bluetooth devices saved for quick connection
Data Transmitted to the Helite Server:
When you are signed in to your user account, the following data is transmitted to the api.helite.com server operated by Helite, in encrypted form (HTTPS): your rides, the airbag deployment logs of your CDU (section 14), your emergency contacts and alerts (section 13), and the data you choose to send to support. Without an account, none of this data is transmitted.
Monitoring Data (Third-Party Services):
Only anonymized technical data (error logs, usage statistics) is transmitted to our monitoring partners:
– Sentry: For detecting and fixing bugs (EU hosting – Frankfurt, Germany)
– PostHog: For anonymized usage analysis – CLIENT variant only (EU hosting – AWS Ireland)
No personally identifiable data is transmitted to these third-party services.
Security Measures of the Mobile Application:
Operating System Level Encryption:
– iOS: Secure storage via the iOS Keychain and native file system encryption
– Android: Secure storage via the Android Keystore and native encryption
Secure Bluetooth Connection:
– Bluetooth Low Energy (BLE) connection with a standard encryption protocol
– Secure communication between the application and the Helite CDU device
Data Transmission over the Internet:
– Data linked to your account is transmitted only to the api.helite.com server, over an encrypted connection (HTTPS)
– Only anonymized technical data is transmitted to the monitoring services (Sentry, PostHog – EU)
Optional User Account:
– The application can be used without an account; an account is required for the features listed in section 5
– Any password is stored in encrypted form; Helite never knows any Google or Apple password
Hosting of Third-Party Services (Mobile Application):
All third-party services used by the mobile application are hosted exclusively in the European Union and comply with the GDPR:
Sentry (Error Monitoring):
– Hosting: European Union (Frankfurt, Germany)
– GDPR compliance: Guaranteed
– Purpose: Detecting and fixing bugs and crashes
PostHog (Analytics – CLIENT Variant Only):
– Hosting: European Union (AWS Ireland)
– GDPR compliance: Guaranteed
– Purpose: Anonymized usage statistics to improve the user experience
MapLibre (Mapping):
– Map tiles stored locally on your device (local cache)
– No transmission of personal data
– Open source library
No Transfer Outside the European Union:
All third-party services used by the Helite mobile application fully comply with the GDPR and are hosted exclusively in the European Union. No personal data is transferred outside the EU by the application itself.
The only exception, at your initiative: sharing a ride image with a third-party application that you select (see “Sharing your Ride Images with Third-Party Applications” below). The publisher of the receiving application may be established outside the European Union. This transfer results from your explicit action and does not take place without it.
Mobile Application Permissions:
The Helite mobile application requests the following permissions on your mobile device:
Bluetooth (iOS and Android) – Mandatory Permission:
– Purpose: Detect and connect to your Helite device (airbag vest) via Bluetooth Low Energy (BLE)
– Use: Scanning for nearby BLE peripherals, connecting to the CDU, reading and writing technical data
– Without this permission, the application cannot connect to the Helite device
GPS Location (iOS and Android):
– Main purpose: Recording GPS rides with geolocation
– Secondary purpose (Android only): Required by Android to perform the Bluetooth scan (technical constraint of the Android system, not imposed by Helite)
– Use: Recording geographic coordinates during your rides for later viewing on a map
– Consent: You must explicitly grant this permission through your operating system settings
Photo Library / Gallery (iOS and Android) – Optional Permission:
– Purpose: Save data exports (PDF, CSV) and the ride images generated by the sharing feature to your photos
– Use: Saving exported files and ride images to the Photos app (iOS) or the gallery (Android) of your device
– This permission is optional and is not required to use the application; it is only requested when you choose to save a file or an image
Sharing your Ride Images with Third-Party Applications:
The application allows you to generate an image of one of your rides (GPS track, date, distance, duration, average speed) and share it with the application of your choice: Instagram, Facebook, Messenger, WhatsApp, SMS messaging, email, or your device’s gallery.
– Trigger: This sharing only takes place on your explicit action, image by image and recipient by recipient. No automatic sharing is performed.
– Nature of the data transmitted: Only the generated image (PNG file). It contains the track of your ride and the statistics displayed, the content of which you can check in the preview before sharing.
– Recipients: The third-party application you select, and its publisher (in particular Meta Platforms Ireland Limited for Instagram, Facebook, Messenger and WhatsApp). These publishers may be established outside the European Union and apply their own privacy policies, over which Helite has no control.
– Warning: A ride image may reveal sensitive information such as your home location or your usual routes. Please take this into account before publishing.
– Role of Helite: None of these images is transmitted to Helite or to its servers. They are generated locally on your device and handed over directly to the application you designate.
– Legal basis: Your consent, expressed by the sharing action (Article 6(1)(a) GDPR).
Managing and Revoking Permissions:
You can manage and revoke the permissions granted to the Helite application at any time in the settings of your mobile device:
iOS:
Settings > Privacy & Security > Bluetooth / Location Services / Photos
Android:
Settings > Apps > Helite > Permissions
Consequences of Revoking Permissions:
– Bluetooth revoked: Unable to connect to the Helite CDU device
– Location revoked: Unable to record new GPS rides (the existing history remains accessible)
– Photo Library revoked (iOS and Android): Unable to save exports and ride images to your photos (sending by email and sharing directly with a third-party application remain possible)
12- HOW LONG WILL YOUR DATA BE RETAINED?
Users’ personal data is retained for as long as it is necessary for the purpose pursued. It is erased as soon as the user exercises their right to erasure and to be forgotten. Contractual data is retained and archived for the period necessary for contractual obligations (warranty, compliance, etc.) and for legal, accounting and tax obligations and/or for the applicable limitation periods.
In the absence of specific instructions given by the deceased person during their lifetime, the heirs may only exercise the rights to erasure and to be forgotten.
Retention Period for the Helite Mobile Application:
Data Stored Locally on Your Mobile Device:
Your personal data stored on your device (GPS ride history, user preferences, CDU device data, saved devices) is retained indefinitely until:
– You delete it manually directly in the application:
You can delete individual rides or saved devices, or reset your preferences, at any time from the application settings.
– The mobile application is uninstalled:
Uninstalling the Helite application automatically and permanently deletes all your personal data stored locally on your device. Data already transmitted to the api.helite.com server as part of your account is not affected.
Airbag Deployment Logs:
See section 14.
Monitoring Data (Third-Party Services):
The anonymized technical data transmitted to the monitoring services is retained according to the following retention policies:
Sentry (Error Monitoring):
– Retention period: Generally 90 days (according to the default configuration)
– Type of data: Error logs, crash traces, anonymized system information
– Hosting: European Union (Frankfurt, Germany)
PostHog (Analytics – CLIENT Variant Only):
– Retention period: According to PostHog’s retention policy (see https://posthog.com/privacy for more details)
– Type of data: Anonymized usage events, usage statistics
– Hosting: European Union (AWS Ireland)
Legal and Contractual Obligations:
In accordance with our legal, contractual, accounting and tax obligations, certain data may be retained beyond the requested deletion, in particular:
– Product warranty data: Retained for the duration of the legal and contractual warranty
– Accounting and tax data: Retained in accordance with the applicable legal obligations
– Data necessary to defend our rights in the event of a dispute: Retained for the applicable limitation periods
These obligations apply both to the website and to the mobile application.
Rights of Heirs:
In the absence of specific instructions given by the deceased person during their lifetime, the heirs may only exercise the rights to erasure and to be forgotten, in accordance with the regulations in force.
13- EMERGENCY CONTACTS
As part of the emergency alert feature of the Helite application, the user may designate up to three emergency contacts whose telephone number will be used to automatically send an SMS in the event of an airbag deployment.
Data processed: name and telephone number of third parties designated by the user.
Purpose: sending SMS alerts in the event of an airbag deployment (Helite vest), in order to inform the user’s relatives of their geographic location and condition.
Legal basis: legitimate interest (Article 6(1)(f) GDPR) — protecting the physical safety of persons constitutes a legitimate interest justifying this processing.
Retention period: emergency contact data is retained until it is deleted by the user in the application, or until the user’s account is closed.
SMS processor: alert SMS messages are sent via Infobip (European company, Croatia). This service provider is established in the European Union; no data is transferred outside the EU in this context.
Before adding an emergency contact, the user undertakes to have informed that person of the use of their telephone number for emergency alert purposes.
14- AIRBAG DEPLOYMENT LOGS
Each time the airbag of your Helite product deploys, the CDU device records a deployment log, which it keeps in its memory.
Transmission: when you are signed in to your user account, the application automatically transmits these logs to the api.helite.com server operated by Helite, when the application connects to your CDU, when you sign in to your account while the CDU is connected, or when you synchronize from the history screen of the application. A log read from the CDU while you are not signed in to your account is kept on your device and transmitted the next time you sign in; its detailed data is deleted from your device once transmitted. Without an account, no log is transmitted.
Data transmitted, for each deployment:
– serial number of the CDU and software versions (firmware, configuration);
– date and time of the deployment and active detection mode;
– geographic (GPS) position at the time of the deployment when available, number of satellites and speed;
– status of the device at the time of the deployment: battery, temperature, pyrotechnic firing system (voltage, resistance and status), internal status;
– inertial sensor measurements around the deployment (accelerations, angular velocities, angles) and detection parameters (source and conditions of the deployment);
– electrical firing curve of the pyrotechnic firing system.
Each log only contains the data of the deployment concerned: the data of the other deployments recorded in the CDU is removed from it. Neither the usage history of the CDU nor the continuous recording of its sensors is transmitted in this context.
Association: logs are associated with the serial number of the CDU and with the account of the user who transmitted them.
Purposes: analysis of airbag deployments (fall, accident or unintended deployment) in order to improve the reliability of detection and the safety of Helite products; after-sales service and warranty; product safety monitoring, in particular in the event of a recall.
Recipients: only authorized persons within Helite (engineering and support teams), through an internal administration tool. This data is neither sold nor used for commercial purposes.
Legal basis: Helite’s legitimate interest in ensuring the safety of its products and improving accident detection (Article 6(1)(f) GDPR). You may object to this processing by writing to helite@helite.com.
Retention period: [RETENTION PERIOD TO BE DEFINED BY HELITE]. If you delete your account, the logs already transmitted are dissociated from your account and retained without any link to it, for the safety analysis and Helite product improvement purposes described above.
15- UPDATES TO THIS PRIVACY POLICY
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date.
Last updated: October 22, 2026
This privacy policy applies to all of our services: the helite-service.com website and the Helite mobile application (available on the Apple App Store and the Google Play Store).
16- CONTACT
If you have any questions, comments, complaints or requests regarding this privacy policy or the way we process your data (website or mobile application), please contact: helite@helite.com
You may also lodge a complaint with the CNIL (French data protection authority):
Postal address: 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07, France
Phone: +33 1 53 73 22 22