Privacy at Helera
This notice explains what information Helera processes, why we need it, and the choices and rights available to you.
Last updated 27 September 2026
Who is responsible?
Helera AS is the controller when Helera determines why and how personal data is processed. You can contact us at info@helera.no.
When you follow a link to Høvik Hørsel and make a purchase there, Høvik Hørsel processes the purchase information under its own privacy notice.
The helera.no website
The website does not use analytics tools, advertising pixels or marketing cookies. We therefore do not show a tracking consent banner.
Technical request data, such as IP address, browser type and time, may be processed by the hosting provider to deliver and secure the website. Public pages and images may be stored in a necessary local cache so the website loads faster and can show a basic offline page.
Information in the Helera app
Depending on the features you use, Helera may process:
- email address, first name, sign-in information and user role
- a link between a user and caregiver when both choose to connect their accounts
- registered hearing aids, equipment, scan results and history you choose to save
- consents and the time a consent is given or withdrawn
- limited technical usage information needed for security and to enforce the scan limit
When you scan a hearing aid
You must be signed in and provide explicit consent before an image is sent for analysis. The image is sent over an encrypted connection to Helera's backend to suggest a manufacturer, model or part. The current solution does not store the raw image in Helera's database or image bucket, and the temporary image file on the phone is deleted after analysis.
Image analysis may be performed by a configured external model provider, such as Google Gemini or Anthropic. Helera sends the image only when the analysis feature is used. The result may be stored on your account if you choose to register the device.
A separate optional consent exists for future model improvement. The current client does not retain images for training. If this changes, this notice will be updated before retention begins.
Purposes and legal bases
Account, profile and equipment data is processed to provide the features you request and administer the user relationship. Security logs and necessary technical operations rely on Helera's legitimate interest in a secure and stable service.
The scan image is processed on the basis of your explicit consent. Because an image of a hearing aid may be linked to hearing and health, Helera treats it as special-category data and asks for explicit consent before analysis.
Providers and processing outside the EEA
Helera uses Supabase for authentication, database and backend functions in an EU region, and Vercel to host the website. The email provider is used to deliver one-time codes. When external image analysis is enabled, Google or Anthropic may process the image for Helera.
If a provider processes information outside the EEA, Helera will use a valid transfer mechanism and the necessary data processing agreements.
How long is information kept?
The raw image from a normal scan is not retained by Helera after analysis. Your account, saved equipment, scan results and consent history are kept while the account is active or until you delete the data. Technical security logs are kept only for as long as needed for operations and security.
You can delete saved data or the entire account from the app settings. Account deletion removes user data and any user files from Helera's systems.
Your rights
You may request access, correction, erasure, restriction and data portability, and object to processing based on legitimate interests. Consent can be withdrawn in the app. Withdrawal does not affect processing that was already lawful.
Contact info@helera.no to exercise your rights. You may also complain to the Norwegian Data Protection Authority.
Children and changes
Helera is intended for people aged 18 and over and for adult caregivers. We update this notice when processing changes. Material changes to scan processing require new information and, when necessary, renewed consent.