Last updated · May 2026
What Held knows, and what it does with it.
Held only collects what helps it help you. We don't sell your data. We don't share it with advertisers. You can see and delete it at any time.
What we collect
When you sign in, we receive your email address and name from the provider (Google, or via email magic link). If you grant Held access to your Google Calendar, we read your event times, titles, and descriptions. If you grant access to your device location, we store the coordinates so we can show weather alongside suggestions. If you write tasks or notes, we store what you typed. If you use voice input or play back a narrative, your audio passes briefly through our transcription and synthesis providers (see below). We also keep small operational records: timestamps for reminder emails we send you, a log of feedback you've submitted, and the standard server logs Vercel keeps for security.
What we don't collect
We don't track you across other sites. We don't install third-party advertising or analytics SDKs. We don't buy or sell user data. We don't scan your calendar or tasks for keyword ads. The whole business model of Held is a household paying for an app that serves them, not advertisers paying us to surveil you.
How we use it
Everything Held stores about you is used to make Held work for you specifically: to draft proposals that fit your week, to remind you of tasks you set reminders on, to render your day's narrative in voice if you tap the speaker, to suggest open windows in your schedule, and to let your Circle members see what you've explicitly shared with them.
Sign-in providers
You can sign in to Held three ways: with Google, with Apple, or with a one-time email link via Resend. With Google we receive your email and name (and, separately, a calendar OAuth token only if you grant it). With Apple we receive your name and an email (sometimes a private Apple relay address); we never see your Apple ID password. With email we send a magic link to the address you entered. We don't store passwords for any of these methods.
Billing
Held Family is billed through Stripe. Stripe collects and stores your payment method directly — Held never sees or stores your card number. We do store a Stripe customer id and your current subscription state so the app knows whether you're on a paid plan. Cancel anytime from inside Held; your circle data stays intact, you just stop being charged.
The AI services we use
Held's AI features pass small amounts of your data to three third-party providers. Each one receives only what the immediate request needs:Anthropic (Claude): calendar context (upcoming events, your work schedule, Circle members' busy windows — never their event titles) is sent when you make an Ask Held request, so Claude can draft a proposal. Held does NOT send tasks, location, or voice recordings to Anthropic.OpenAI (Whisper): short audio clips you record by tapping the mic on the Ask page are sent for transcription only when you record. Audio is not stored after transcription.ElevenLabs: short text strings (your narrative line, your Ask summary) are sent for voice synthesis when you tap a speaker icon. Audio is cached briefly so re-tapping the same line doesn't re-synthesize.We've chosen providers that contractually agree not to train on customer inputs. If that policy changes, we'll evaluate alternatives.
Where your data lives
Held's database is hosted on Neon (in the United States). The application servers run on Vercel. Encryption is in transit (HTTPS to and from Held) and at rest (Neon and Vercel both encrypt storage by default). For an extra layer, your Google Calendar OAuth tokens are encrypted at the database-column level with AES-256-GCM — even if someone gained read access to the raw database, those tokens would be unreadable without the application encryption key.
Error monitoring
When something breaks, Held may send a stack trace and your account id to Sentry so we can fix it. Sentry never receives calendar contents, circle relationships, or AI request bodies — just the technical error.
Your Circle
When you share a task with your household Circle, every active member of that household can see it. They can never see your personal tasks (the ones you didn't share) or your private calendar event titles. Held's AI never tells one Circle member what another is doing — only when someone is free or busy, never what they're doing.
What you can do
Open Settings → What I know about you. You'll see every category Held has stored about you, with a link to the page where you can edit or remove each one. Delete my data (also in Settings) removes the account and every row Held has stored — including tasks, reminders, calendar connections, voice cache, and Circle relationships. Once that runs, we can't restore.
Retention
We keep your data as long as your account exists. If you delete your account, all rows directly tied to you are removed. Backups roll over within 30 days.
Children
Held isn't designed for users under 13. If you believe a child has signed up, write us and we'll remove the account.
Changes
We'll update this page as Held evolves. For meaningful changes (new categories of data, new third- party processors), we'll email you before they take effect.
Contact
Privacy questions or data requests: hello@myheldapp.com.
See also our Terms.