Privacy policy
Last updated 25 August 2026
Holdout is operated by Greninger Enterprises LLC. This policy covers the Holdout website and the Holdout mobile apps.
What we collect
Your account. Your name, your email address, and a hashed form of your password. We never store the password itself.
Your household. The household name, how many adults, children and pets it covers, and your notification preferences.
What you put in. The places you track, including any address you enter and the coordinates it resolves to; your supplies, with names, notes, quantities, categories, expiry dates, lot numbers and barcodes; your trip schedules, restock lists, upkeep records and stock movements.
Your devices. If you turn on push notifications, we store the push token your phone gives us, along with the platform and a device name, so we know where to send an alert.
Payment. If you subscribe, Stripe handles the transaction. We store the identifiers Stripe gives us for your customer and subscription record, and the tier you are on. We never see or store your card number.
We do not collect analytics, we do not track you across other apps or websites, and we do not use advertising identifiers.
How your household data is stored
The contents of your household — the names of your supplies, your notes, your addresses and coordinates — are encrypted in the database with a key issued to your household alone. Your email address, your name, and your billing identifiers are not encrypted this way, because the system needs to be able to find you by them.
When you delete your account, that household key is destroyed along with the rows. Destroying the key is what makes the deletion final: the encrypted data cannot be read afterwards, including by us, and including from a backup.
Who we send it to
We share what is listed here and nothing else. We do not sell your data, and we do not share it for advertising.
- The National Weather Service (weather.gov) receives the coordinates of the places you track, so we can tell you which alerts cover them. No account information is sent.
- OpenStreetMap Nominatim receives an address you type when you ask us to look it up.
- Stripe receives your email address and handles payment if you subscribe.
- Resend delivers our email, so it handles your email address and the contents of any notification you asked us to send.
- Google Firebase Cloud Messaging and, on iPhones, Apple Push Notification service carry push notifications. A push includes the name of the alert and the name of the place it affects, so it can be read from a lock screen.
FEMA's IPAWS, the GDELT Project and the FDA recall feeds are read by our servers on a schedule. They receive nothing about you: we fetch public data and match it here.
Our servers are hosted in the United States. If a court order or a lawful request compels disclosure, we will comply, and will tell you unless we are prohibited from doing so.
How long we keep it
Your household data stays for as long as your account exists. Delete your account and it goes, immediately and permanently — there is no grace period and no archive copy. Encrypted backups are retained for up to 30 days, and the destroyed household key means the data in them cannot be read.
Weather and civil alerts are public records and are kept independently of your account; the record of which alerts matched your places is deleted with your household.
Your choices
- See it. Everything we hold about your household is visible in the app. Your plan can be downloaded as a PDF.
- Correct it. Every field is editable in the app.
- Delete it. Account › Delete account, in the app or on the website. This cancels any subscription and erases everything.
- Turn off notifications. Account › Household, per kind and per channel. Push can also be revoked in your phone's settings.
Depending on where you live you may have additional rights over your personal information, including the right to a copy of it and the right to object to how it is handled. Write to us and we will act on it.
Children
Holdout is not directed at children and we do not knowingly collect information from anyone under 13. A household can record how many children it covers; that is a number used in the calculation, not information about a child.
Changes
If this policy changes in substance we will update the date at the top and tell you in the app before the change takes effect.
Contact
Questions about any of this go to help@holdoutprep.com.