‍‍Effective December 13, 2024
  • On December 13, 2024, we changed the host for our website
  • On February 20, 2023, we withdrew two subcontractors
  • On January 12, 2023, we specified our new French hosting provider
  • On October 21, 2022, we added a paragraph specifying the export terms and conditions.
  • On September 20, 2022, we added a subcontractor: AppSignal
The heloa.app website and the Heloa application are published by Kelindi SAS. Kelindi SAS is referred to below by the word “kelindi“. To find out more about us, you can read our Legal Notice and if you want to contact us, you can do so from our Contact page.

How does Kelindi process your data?

The Heloa application, published by kelindi, is designed to provide personalized health monitoring for children and their parents. The user is the parent of one or more children. So that parents and their children can benefit from a personalized health pathway, the Heloa application collects personal and medical data from children and users themselves, then analyzes the responses to offer health advice adapted to the context. As the exclusive purpose of the application is to provide personalized information, the user must provide the personal information requested to enable this processing. If you do not wish to provide us with this information, you cannot and must not use the Heloa app. On the other hand, he/she can, free of charge, benefit from non-personalized health advice on the heloa.app website. Optional: non-personalized advice is also sent by e-mail as part of a newsletter. As an option, parents can join the Heloa nest if they wish, and give feedback to the product team by video.

Do you have a question or would you like to exercise your rights?

You may at any time ask us a question or exercise your right to access, rectify, oppose, delete or limit the processing of your personal data by contacting : For any complaint concerning your personal data:
  • you can contact our DPO at [email protected]
  • contact the Commission Nationale Informatique et Liberté (CNIL) directly at cnil.fr

Who has access to my data at Kelindi?

At kelindi, access to your personal data is strictly controlled. Within kelindi, the Medical Department is a separate body, independent of the administrative and general management departments. Its members, all doctors, are bound by medical confidentiality. It ensures that the application maintains a high level of medical quality, which implies the possibility of accessing certain medical data concerning users or their children, in very specific cases:
  • if you contact us to ask specific questions about a result displayed by Heloa, as consultation of the input data is required to check the output data,
  • to control anomalies automatically detected by statistical sampling, such as out-of-range results.
The medical department may be assisted by technical staff (systems engineers, data engineers) who, under its supervision, make requests to improve the reliability of the results presented to you by Heloa.

What personal data do we process?

For the Heloa mobile application

To create your profile, we ask you :
  • Your e-mail address to create an account and secure your access if Apple connect authentication is not preferred;
  • Your first name.
When using Heloa, we collect the following personal and medical data about you:
  • Health monitoring questionnaires (health habits, height, weight, stages of child development, etc.);
  • Health programs (health knowledge, health behavior, etc.).
When using Heloa, you can provide us with personal and medical data for each child you register:
  • Identity: first name, last name (optional), date of birth, gender, photo (optional);
  • Curves: weight, height, head circumference;
  • Medical information: Heloa pediatric questionnaires (developmental follow-up), vaccines, allergies, blood type, family history, personal history.
What do we do with it? You provide this information in order to use the Heloa application, to obtain health advice adapted to your profile, and to archive and consult it quickly. This data is used to ensure the smooth running of Heloa and in particular our system of regular questionnaires on your child’s state of health. How long do we keep this data? Data is archived for as long as you use the application. If you so request in your Heloa mobile interface, the data will be destroyed on your initiative. If you stop using the application for 36 months, the data will be automatically archived, then stored for 24 months to ensure you don’t lose key information about your child’s life, before being automatically and permanently deleted to guarantee your right to be forgotten. How can I consult, modify or delete this data? Any data submitted to Heloa can be modified or deleted directly by the account owner. You can also request the deletion of your account in the application settings. Deletion is definitive: you can’t go back. This operation is performed autonomously by the user. Alternatively, you can ask for help by sending an e-mail to [email protected].

For heloa.app

When you subscribe to our newsletter, we collect your e-mail address and your child’s date of birth. What do we do with it? This data is used to send you our newsletter. How long do we keep this data? The data is kept for the duration of our active relationship. Each time you receive an e-mail, you have the option of unsubscribing from further e-mails. Unsubscription is immediate. How can I consult, modify or delete this data? For each e-mail address, by using the “unsubscribe or change my preferences” link. Alternatively, by sending an e-mail to [email protected]

How do we protect your data?

We respect the state of the art for the protection of your data:
  1. Kelindi employees do not have access to your information, with the exception of certain employees duly authorized to guarantee the proper functioning of the Heloa service and/or to assist medical management.
  2. We have opted for an ISO 27001-certified health data hosting provider, and to localize our data in France.
  3. Servers are regularly updated to comply with manufacturers’ security updates, with a continuous watch and on-call service.
  4. Your data is encrypted within our databases, to prevent access by the host’s personnel.
  5. All our processes are documented and regular monitoring and audits are carried out at regular intervals.
  6. The list of subcontractors and contributors can be consulted on this page.
Is your data transferred outside the European Union? As part of the processing operations described above, Kelindi may transfer your personal data outside the European Union. These transfers may take place when Kelindi uses software applications, cloud platforms and storage spaces provided by service providers subject to North American legislation. Under this legislation, service providers are required to give national security authorities access to the data they process. The service providers concerned are listed below. These transfers are governed by a subcontracting agreement between Kelindi and each of these service providers, and by the European Commission’s standard contractual clauses. This contractual arrangement is supplemented by technical measures that provide for data encryption. We ensure that no data is directly accessible via encryption. If you would like more information on these guarantees surrounding the transfer of your data, please contact Kelindi’s Data Protection Officer: dpo @ kelindi.com.

List of subcontractors and contractors

The companies listed below are our service providers. They process, store and transfer data on our instructions. We ensure that they comply with current regulations.

For the Heloa mobile application

Storage of personal data: Scalingo SAS Storage of non-identifying data : Google Cloud France SARL
  • Data hosted exclusively within the EU (Paris, France – backup copy in Saint-Ghislain, Belgium)
  • HDS certification, ISO 27001 + encryption at rest
  • Further information: https: //cloud.google.com/security/compliance/hds
Sending e-mails: Postmark
  • Information may be transferred outside the EU under specific contractual clauses in line with the Commission’s recommendations.
  • Further information: https: //postmarkapp.com/eu-privacy
Sending e-mails: Mailchimp Diagnostics, error reports: AppSignal B.V.

For heloa.app site only

Host : OVH, 2 Rue Kellerman 59100 Roubaix, France Audience analysis (optional): Google Analytics, for users who have accepted the use of Cookies – this service provider may transmit information outside the EU. Audience analysis (optional): Facebook, for visitors from Instagram who have accepted the use of Cookies – this provider may transit information outside the EU.