Privacy notice

Hold is made by Iraady Ltd, London, United Kingdom ("we"). This notice says what we collect, why, who sees it, how long we keep it and how you can delete it. Questions: hello@iraady.com.

What we collect

• Account: your first name, email address and a hashed password.
• Health and fitness data you enter: the medicine you took (a choice from a list), your start, lowest, current and goal weights, your stop date, optional height, age and sex, your daily weigh-ins and notes, and your daily check-ins (protein, movement, hunger from 1 to 5), plus your 7-day reset ticks.
• Purchases: whether you have a subscription and until when. Card details are handled by Stripe on the web, or by Apple or Google in the phone apps, and are never seen by us.
• Waiting list: your email, and the optional medicine and stop date you give. We email you a link to confirm; unconfirmed entries are removed after 30 days.
• Technical: a sign-in session (cookie or app token), your time zone, and basic security logs (IP address and browser type for sessions, kept up to 12 months).

We do not collect your location, contacts, photos or advertising ID. We have no advertising and no analytics or tracking tools in the app or on this website.

Why we use it

To run Hold for you: to calculate your trend, zones, weekly report and plan, to sign you in, to keep your subscription in sync, to send the emails you ask for (password reset, waiting list), and to keep the service secure. Health data is special category data. We use it only with your explicit consent, which you give when you set up your plan, and only to provide Hold to you. You can withdraw consent at any time by deleting your account.

Who sees it

• Our hosting provider (Amazon Web Services, servers in the United States) and Cloudflare, which passes web traffic to our servers.
• Amazon SES, to send emails.
• Stripe (web payments) and RevenueCat with Apple or Google (phone subscriptions), only about your subscription and your account ID.

We do not sell your data and do not share it for advertising. Your data is stored outside the UK and EU, in the United States, and moves over encrypted connections (HTTPS).

How long we keep it

For as long as your account exists. When you delete your account, your profile, weigh-ins, check-ins and reset history are deleted straight away. A short audit line that an account was deleted (with no health data) can stay for up to 12 months. Server backups, if any, are overwritten on their normal cycle.

Your rights

You can look at your data in the app, export it as a CSV file (Settings, Export my data) and delete your account and all data (Settings, Delete my account, or see how to delete your account). Under UK and EU law you can also ask us to correct your data, restrict or object to its use, or complain to the Information Commissioner's Office (ico.org.uk) or your local data protection authority. Write to hello@iraady.com.

Cookies

Two small cookies: one keeps you signed in (essential) and one remembers your time zone so that "today" is right. No cookies for tracking or advertising.

Children

Hold is for adults aged 18 or over. If you believe a child has an account, tell us and we will delete it.

Changes

If we change this notice in a way that matters, we will tell signed-in users in the app before it takes effect.

See also the medical disclaimer and the terms.