Helix Helper / Legal
Privacy Policy
Last updated: 14 July 2026
This policy covers Helix Helper, the free iOS and iPadOS capture companion for Helix, published by CoreTools (Zak Noble-Clarke). It explains what the app does and does not do with your data. Helix Helper is a professional tool for authorised security research and reverse engineering.
The short version
- There is no account. You never sign in, and we do not ask for your name, email, or any identity.
- There is no cloud. The app has no backend server operated by us. We do not receive, store, or see anything you capture.
- Your captures go only to your own Mac. Data moves directly from your phone to a computer running Helix on your local network, and nowhere else.
- No tracking, no analytics, no ads. The app contains no third-party tracking or advertising software.
Data the app handles
Helix Helper captures short-range wireless and radio data so you can analyse it on the desktop. Depending on which features you use, this can include:
- Bluetooth Low Energy scan results and GATT data (services, characteristics, and values you read or write).
- NFC tag contents that you tap to read (identifiers, records, and memory).
- Barcode and QR code contents that you scan.
- Connected accessory information (Made-for-iPhone / External Accessory details).
- A snapshot of your local network environment when you request one (nearby Bonjour services and current Wi-Fi details).
- Files pulled from a connected Flipper Zero, and files you choose to send into Helix (for example pcap, HAR, or JSON).
This data is captured at your explicit request, for you. We do not collect it, and it is not sent to CoreTools or any third party.
Where your data goes
Captured data is either held on your device or sent to a Mac you control that is running Helix.
- On device. Captures collect into named stores on your phone. Pairing tokens and a list of Helix desktops and Flipper devices you have connected to are also stored locally so you do not have to set them up again.
- To your Mac. When you pair with a desktop (using a six-digit PIN shown in Helix) and offload or stream a store, the data is transferred to that desktop over your local network. A local store is deleted only after the desktop confirms it was received.
The connection is direct, between your phone and your computer, on your own network. It does not pass through any server we run.
Device permissions
iOS asks your permission before the app can use each of the following. They are used only for the capture features described above:
- Local Network. To find and connect to Helix on your Wi-Fi, and to snapshot nearby Bonjour services when you ask.
- Bluetooth. To scan, read from, and write to nearby Bluetooth devices, including a Flipper Zero.
- NFC. To read tags you tap.
- Camera. To scan barcodes and QR codes. Images are processed on device to read the code and are not stored or transmitted.
- Location. iOS requires location access to reveal the current Wi-Fi network name (SSID). It is used only to record Wi-Fi details in a network snapshot. The app does not track or log your location.
Data we collect: none
We do not collect personal data through Helix Helper. There is no account system, no usage analytics, no crash reporting sent to us, and no advertising or tracking identifiers. Because we operate no server for the app, there is no data for us to hold or share.
Your responsibility
Helix Helper can read from and write to nearby wireless devices. You are responsible for only capturing from, and interacting with, devices that you own or have explicit permission to test. The app includes consent prompts before actions such as writing a Bluetooth payload, but the legal responsibility for how you use it is yours.
Children
Helix Helper is a professional tool and is not directed at children. We do not knowingly collect data from anyone, including children.
Changes to this policy
If this policy changes, we will update this page and revise the date at the top. Continued use of the app after a change means you accept the updated policy.
Contact
Questions about this policy or the app can be sent to support@coretools.app.