HoldaCARE

Privacy Notice

← Back to HoldaCARE

Effective 2 September 2026 · Beta Phase 1

HoldaCARE helps you organize care for someone you care about while also giving you a private space for your own caregiving needs. This means the app may hold information about both you and the people you care for. We have tried to explain how that information is handled in the same clear and respectful way we would want for our own families.

What we hold

• Your account. Your email address and the name you chose to be called.
• What you record about the person you care for. Medications, appointments, doctors and care team, notes, observations, vitals, questions for the doctor, and any documents you save to the Vault.
• What you record for yourself. Journal entries, check-ins, tasks, respite plans and your own emergency details.
• Preferences. How you would like to be encouraged, what helps you feel cared for, and food preferences for recipes.
• Not you, but worth listing here: a shared count of how often each feature is opened, which carries nothing that identifies anybody. See "Counting which features get used" below.

Who can see it

Your account, and nobody else's. The rules that enforce this run on the server and are tested on every change — one caregiver's account cannot read another's. HoldaCARE staff do not browse your entries.

What we do not do

• No advertising. There is none in the app, and no advertising company receives anything about you.
• No selling your information. We do not sell your personal information or share it with advertisers. We use service providers only as needed to operate HoldaCARE.
• No cookies. The app sets none at all.
• No tracking you across other websites.

Counting which features get used

This one is on unless you turn it off, and it is the only thing on this page that is. It is worth explaining why, because "on by default" usually deserves suspicion.

When you open a part of the app — the journal, a recipe, your medications — HoldaCARE adds 1 to a running total for that feature. Not one for you: one, shared, for everybody. The total is a single number sitting in our database, and the server rules refuse to store anything alongside it. No account, no device, no time of day, nothing you typed. There is no record that it was your visit rather than somebody else's, which is also why there is nothing here to delete when you close your account — there is nothing with your name on it to find.

It tells us that the journal was opened four hundred times last week and Plan a Break eleven, which is how we know where to spend our time during the Beta. It cannot tell us anything about you.

Settings → Privacy → Beta Feature Usage turns it off, and nothing is counted from that moment.

Analytics, and how they stay off

Anonymous usage analytics are switched off unless you turn them on — either in Settings under Privacy, or by agreeing when the app asks whether it may send error reports. Those are the same switch: error reports travel as analytics events, so saying yes to one turns on the other, and the question says so. Until you turn it on, the analytics service is never even started, so no identifier is created for your device.

If you do turn it on, it records which screens are used and when errors happen — never what you wrote. Error reports carry the type of fault and where in the code it occurred, deliberately not the message, because an error message can quote the text that caused it.

Where it is kept

On Google Cloud, through Firebase, in the United States. Your entries and documents are stored there and sent over an encrypted connection.

Loading the app also fetches its display engine and fonts from Google's content network, which necessarily tells Google your IP address and browser, as visiting any website does. No cookies are set by this.

Feedback you send us

When you send feedback from inside the app, it reaches our team along with your name, your email address and which screen you sent it from, so we can reply. It is stored in our systems and in a Google Workspace spreadsheet and email that only our team can see.

Whatever you include in your feedback message is sent to us when you submit it. Nothing about the person you care for is attached automatically — but if you describe them in the message, that description comes with it.

Emergency Mode and your location

If you tap Share Location, your device asks your permission, and your location is used once, immediately, to build a map link inside a text message that you send to contacts you pick. We do not store your location, and it is never sent to us.

Holda

During this phase of the Beta, Holda uses prerecorded voice clips to welcome you, guide you through setup, and help explain how to use HoldaCARE. These recordings do not listen to, analyse, or send your information to an AI service.

Live conversations with Holda are not switched on. When they are, this section will be updated and reviewed before the change goes live.

Deleting your account

Settings → Delete my account. Your sign-in and profile are removed straight away, and what you have stored is removed with them. A small amount of cleanup — files and deeply-nested records — completes shortly afterwards on our servers. You can ask us to confirm it is done.

Who this beta is for

Invited testers aged 18 or older whose primary residence is in Indiana. You do not need to be physically located in Indiana every time you use HoldaCARE. Access is by invitation, and we ask you to confirm your age when you sign up.

Asking us anything

Write to hello@holdacare.app — including if you want a copy of what we hold about you, or want something corrected or deleted. This is a small team and a real address.