Privacy Policy
Effective 22 October 2026 · Holdout (“we”, “us”) is made by Owais Builds. Contact: support@owaisbuilds.com
Holdout is an app that helps adults quit nicotine pouches. We collect only what the app needs to work. We don’t sell your data, we don’t show ads, and we don’t use advertising or tracking SDKs.
What we collect
| Data | Why | Who sees it |
|---|---|---|
| Email address | To sign you in with a one-time code | Only you, and our sign-in provider. Never shown to other users. |
| Holdout name (handle) and country | Your identity on the boards and in crews | Other users, if you’re on public boards (you can hide yourself in Settings) |
| Quit details: pouches per day, strength, tin price and size, currency, when cravings hit | To work out money kept and pouches skipped, and to time reminders | Only you |
| Hold sessions: start/end times, duration, the strength you rate (1–5) | To run the hold, score the board, and show your insights | Your count of scored holds appears on boards; details stay private |
| Slips: time, type, optional trigger | To reset your pouch-free clock and show insights | Only you. If you choose “I’m back on them” and you’re in a crew, crewmates see that you’re back on it. |
| Crew membership, crew names, waves | To run crews | Members of your crew |
| Witness answers: yes/no, optional note (≤140 characters), a one-way hash of the witness’s IP address | To show the “witnessed” tick and prevent abuse | You see the answers. Only the tick is public. |
| Subscription status | To unlock Holdout Plus | Only you |
We do not collect your location, contacts, photos, advertising ID, or browsing data. Your country is something you choose. Reminders are scheduled on your phone and need no data from us.
Service providers
We use a small number of processors, each only to run the service:
- Clerk: sign-in with email codes.
- Neon: our Postgres database, hosted in the United States.
- Vercel: hosting for our website and API.
- Google Play and RevenueCat: subscription purchases and their status. Google processes payments. We never see your card details.
Data is encrypted in transit (HTTPS) and at rest by our providers.
How long we keep it
We keep your data while your account exists. Hold heartbeats and abuse-prevention hashes are kept only as long as needed to score and protect the board. When you delete your account, we delete your data immediately from our database. Backups roll off within 30 days.
Your choices and rights
- Hide from public boards: Settings → “Show me on public boards”.
- Change your name or country: Settings.
- Delete your account and data: in the app under Settings → Delete account, or see Delete your account.
- Access or correct your data: email us and we’ll respond within 30 days.
Depending on where you live (for example, under GDPR or CCPA), you may have additional rights to access, correct, delete or port your data, or to object to processing. Email us to use them. We process your data to provide the service you asked for (contract) and, for abuse prevention, under our legitimate interest in keeping the board fair.
Age
Holdout is for adults 18 and over. Nicotine products are age-restricted, and we don’t knowingly collect data from anyone under 18. If you believe a minor is using Holdout, contact us and we’ll delete the account.
Health disclaimer
Holdout is a self-help tool. It isn’t a medical device and doesn’t give medical advice. Talk to a doctor or pharmacist about nicotine replacement and other support.
Changes
If we change this policy, we’ll update the date above. If the changes are significant, we’ll also tell you in the app.