Last updated: October 20, 2026
Held is a simple app for parents to capture family moments and revisit them later. This page explains what information Held collects, how it's used, and the choices you have. We keep Held's data footprint small on purpose, and we've tried to be exact about what is stored where. This policy works alongside our Terms of Service.
Account information. To use Held, you create an account with an email address and password, or sign in with Google. If you sign in with Google, we receive the basic profile information Google provides for authentication purposes — typically your name, email address, and profile picture. This account data is stored and managed by our authentication provider, Supabase.
Your photos. Photos you add to Held are stored locally on your device, using your browser's built-in storage (IndexedDB). They are not uploaded to Held's servers. If you clear your browser data or uninstall the app, locally stored content is deleted along with it — Held does not currently back your photos up for you, so we'd recommend keeping your own copies of anything irreplaceable.
Family sharing. Held lets you create a private family space and invite people you trust. When you use this feature, the following is stored with Supabase so the people you invite can join: the family's name; who belongs to it and their role; and invite codes. Only members of that family space can see this information through the app. At this time, the moments and photos you create are not part of this — they stay on your device. Please keep in mind that, as the operator of Held, we technically have administrative access to data stored in our backend; we only use it to run, secure and support the app, and we do not browse it otherwise.
What may change. We are working on features such as syncing across your devices and sharing moments and photos with family. If we add them, your moments, photos, or related details (such as a child's name) may be stored on our servers in order to work. Before any such feature is turned on, we will update this policy and let you know in the app.
We use the account information described above only to let you sign in, keep your account secure, and communicate with you about your account if needed (for example, in response to a support request). We do not use your information for advertising, and we do not sell or rent your information to third parties.
Held is built on a small number of third-party services that help us run the app. Each handles a specific, limited role:
Each of these providers has its own privacy policy governing how it handles data on our behalf.
Held uses your browser's local storage and IndexedDB to keep you signed in, remember what you've already seen (like changelog notices), and store your photos on-device. We don't use cookies or local storage for advertising or cross-site tracking.
We keep your account information for as long as your account is active. You can permanently delete your account at any time from the account screen in the app — this removes your account information from our systems and also clears the moments and photos stored on that device, since they aren't backed up anywhere else. This can't be undone. If you'd rather we handle it for you, or you run into trouble, email us at heldcustomersupport@gmail.com.
Held is intended for use by parents and other adults, not by children. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us at the email below and we'll delete it.
We rely on our service providers' security practices (including Supabase's) to help protect your account information, and we take reasonable steps to protect it. That said, no method of transmission or storage is completely secure, and we can't guarantee absolute security.
We may update this policy from time to time as Held changes — for example, if we add syncing or photo sharing. We'll update the date at the top of this page when we do. If a change is significant, we'll look for a reasonable way to let you know within the app.
Questions about this policy, or about your data? Reach us at heldcustomersupport@gmail.com.