Effective Date: July 15, 2026

Last Updated: July 15, 2026

Welcome to Hold Up ("we," "our," or "us"). We are committed to protecting your personal privacy and maintaining complete transparency regarding how our mobile application operates on your iOS device.

This Privacy Policy explains what information is collected when you use the Hold Up mobile application, how that information is processed, and your rights regarding your data. By downloading, installing, or using Hold Up, you agree to the practices described in this Privacy Policy.

1. Our Core Privacy Pledge

Hold Up is built with privacy-first architecture. Our primary mission is to help you build healthier screen habits, reclaim focus, and manage digital distractions. To achieve this, we do not collect, store, sell, or share your personal identities, contact lists, photos, exact locations, or private communications.

2. Apple Screen Time & Family Controls APIs (Transparent Disclosure)

To provide screen time blocking, app restrictions, challenge tracking, and deep work focus sessions, Hold Up utilizes Apple’s Screen Time APIs, including Family Controls, Managed Settings, and Device Activity.

In compliance with Apple's strict privacy guidelines and technical sandbox rules:

• Opaque Activity Tokens Only: When you select applications, categories, or websites to block using the in-app picker (FamilyActivityPicker), Apple's operating system generates opaque cryptographic tokens to represent your selections. Hold Up never receives, reads, or gains access to the actual names, bundle identifiers, icons, or URLs of the applications or websites you select.
• Strictly Local Processing: All blocking schedules, break counters, active shield configurations, and usage thresholds are processed and enforced locally on your device inside Apple-protected system extensions.
• Zero External Transmission: Your Screen Time selections, app block lists, and usage restrictions are never transmitted to our servers, nor are they shared with any third-party analytics or subscription providers.

3. Information We Collect & How We Use It

While we do not collect Personally Identifiable Information (PII), we utilize industry-standard, privacy-compliant third-party services to ensure our application functions reliably, unlocks premium subscriptions, and improves user experience.

A. Product Analytics (PostHog)

We use PostHog (posthog-ios) to understand how users navigate our onboarding flow and interact with core application features so we can identify technical friction and improve accessibility.

• Data Processed: Pseudonymous device telemetry, including application version, iOS version, device model, anonymous installation/distinct device identifiers, and onboarding progress timestamps (e.g., time spent on specific onboarding steps and whether system permissions were granted or denied).