HoldaCARE

Privacy Notice

Effective 25 August 2026 · Beta Phase 1

This will change. HoldaCARE is in an invited beta, and this notice describes what the app does today. Our full Privacy Policy is with legal counsel, and this will be replaced by it. If anything material changes about how your information is handled, we will tell you rather than quietly updating this page.

HoldaCARE is used to keep track of someone else's care. That means it holds information about a person who is not you, and often cannot speak for themselves. We have tried to write this the way we would want it written about our own families.

What we hold

Who can see it

Your account, and nobody else's. The rules that enforce this run on the server and are tested on every change — one caregiver's account cannot read another's. HoldaCARE staff do not browse your entries.

The one exception is deliberate and visible: if you write a review on a recipe, that review is public to other caregivers and shows your first name. Nothing else you write is ever shared.

What we do not do

Analytics, and how they stay off

Anonymous usage analytics are switched off unless you turn them on in Settings under Privacy. Until you do, the analytics service is never even started, so no identifier is created for your device.

If you do turn it on, it records which screens are used and when errors happen — never what you wrote. Error reports carry the type of fault and where in the code it occurred, deliberately not the message, because an error message can quote the text that caused it.

Where it is kept

On Google Cloud, through Firebase, in the United States. Your entries and documents are stored there and sent over an encrypted connection.

Loading the app also fetches its display engine and fonts from Google's content network, which necessarily tells Google your IP address and browser, as visiting any website does. No cookies are set by this.

Feedback you send us

When you send feedback from inside the app, it reaches our team along with your name, your email address and which screen you sent it from, so we can reply. It is stored in our systems and in a Google Workspace spreadsheet and email that only our team can see.

Please bear in mind that whatever you type is sent as you write it. Nothing about the person you care for is attached automatically — but if you describe them in the message, that description comes with it.

Emergency Mode and your location

If you tap Share Location, your device asks your permission, and your location is used once, immediately, to build a map link inside a text message that you send to contacts you pick. We do not store your location, and it is never sent to us.

Holda

Holda's conversations are not switched on during this phase of the beta. When they are, messages are answered by an AI service and only two things about you travel with them: the name you asked to be called, and how you said you would like to be encouraged. Nothing about the person you care for is sent, and nothing you have written elsewhere in the app is sent.

Deleting your account

Settings → Delete my account. Your sign-in and profile are removed straight away, and what you have stored is removed with them. A small amount of cleanup — files and deeply-nested records — completes shortly afterwards on our servers. You can ask us to confirm it is done.

Who this beta is for

Invited testers aged 18 or over. Access is by invitation, and we ask you to confirm your age when you sign up.

Asking us anything

Write to hello@holdacare.app — including if you want a copy of what we hold about you, or want something corrected or deleted. This is a small team and a real address.