Privacy Policy
Holdfast is an app that reads the expiry dates on your personal documents and reminds you before they run out. It is published by FrozenBox, a trading name of Christian Bamani ("we", "us"). This policy explains what happens to your information when you use it.
- Your documents never leave your phone. Photos, dates and names are stored only on your device.
- Text is read on your phone. The photo is not uploaded anywhere to find the date.
- There is no Holdfast account and no Holdfast server. We cannot see your vault, and we have nothing to sell.
- No advertising and no analytics. The app contains no ad or tracking tools.
- Purchases are the exception. If you buy Holdfast Pro, our payment provider RevenueCat receives what it needs to confirm the purchase.
1. Information stored on your device
When you use Holdfast, the app stores the following in its private storage on your phone:
- photos of documents you take or choose;
- each document's type, the name you give it, its expiry date and earlier expiry dates if you mark it renewed;
- names of household members you add;
- your settings, such as alert time, alert days, date format, look and app lock.
We do not receive any of this. It is not sent to us or to anyone else unless you choose to share or export it yourself, as described below.
Your phone's own backup service (iCloud Backup on iPhone, Google backup on Android) may include the app's data in your device backups, depending on how you have set up your phone. Those backups are handled by Apple or Google under their own privacy policies.
2. Reading dates from photos
To find a document's expiry date, Holdfast uses Google's ML Kit text recognition, which runs entirely on your device. Your photos and the text read from them are not sent to Google or to us.
Google states that ML Kit may send Google diagnostic and usage information about the library itself, such as how it performs on your device, and may download model updates. This information does not include your photos or their contents. See Google's ML Kit terms for details.
3. Permissions
| Permission | Why it is used |
|---|---|
| Camera | To photograph a document so its expiry date can be read. Asked the first time you scan. |
| Photos | To read a document photo you choose from your library. Only the photo you pick is accessed. |
| Notifications | To show expiry alerts. Alerts are scheduled on your phone; no notification is sent from a server. |
| Face ID, fingerprint or passcode | Only if you turn on the app lock. Your phone checks your face or fingerprint itself; the app only learns whether the check passed. |
You can refuse or withdraw any permission in your phone's settings. Holdfast still works; you can type dates in by hand.
4. Purchases
Holdfast Pro is sold through the Apple App Store and Google Play, which process your payment. We never see your card or bank details.
We use RevenueCat to confirm purchases and restore them on a new phone. When you open the app or make a purchase, RevenueCat receives an anonymous identifier created by the app, your purchase and subscription history from the store, and basic technical information such as your device platform, operating system version, app version, country and IP address. This is used only to provide and verify your purchase. It is not linked to your documents, and RevenueCat does not receive any of your vault's contents.
5. When you share or export
- Share card. When you tap "Share my card", the app creates an image showing the document type and the days left, and copies a caption to your clipboard. It never includes a name, document number, photo or exact date. Where it goes is up to you, and the app you share to handles it under its own policy.
- Calendar file. Holdfast Pro can create a calendar file containing a document's name and dates, which you choose where to open or send.
- Backups. Holdfast Pro can export a backup file containing your documents, including photos. The file is not encrypted. Store it somewhere you trust, and delete copies you no longer need.
6. How long information is kept
Everything stays on your device until you delete it. You can delete a single document from its page, or everything at once with Settings → Delete everything. Deleting the app also removes its data from your phone, although copies may remain in your device backups or in files you exported.
RevenueCat keeps purchase records for as long as needed to provide and verify your purchase and to meet legal obligations.
7. Your rights
Depending on where you live, you may have the right to access, correct, delete or move your personal information, or to object to how it is used, including under South Africa's Protection of Personal Information Act (POPIA), the EU and UK General Data Protection Regulation, and the California Consumer Privacy Act.
Because your documents are held only on your device, you control them directly. For purchase information held by RevenueCat, contact us at the address below and we will help with your request. We do not sell or share personal information for advertising.
South Africa (POPIA)
For the purposes of POPIA, the responsible party is FrozenBox, a trading name of Christian Bamani, contactable at support@frozenbox.co.za. We process only the purchase information described in section 4, on the basis that it is needed to provide what you bought. Personal information about your documents is not processed by us at all, because it never leaves your device.
Some of that purchase information is handled by RevenueCat, Apple and Google, which may process it outside South Africa under their own safeguards. If you believe your personal information has been handled unlawfully, please contact us first. You also have the right to complain to the Information Regulator of South Africa: inforegulator.org.za.
8. Children
Holdfast is not directed at children under 13, and we do not knowingly collect information from them. Because the app holds no data on our side, there is nothing for us to collect from anyone.
9. Security
Your vault is kept in the app's private storage, which other apps cannot read. You can add the app lock for extra protection. No method of storage is perfectly secure, so keep your phone protected with a passcode.
10. Changes to this policy
If we change this policy, we will update the date at the top of this page. If a change affects how your information is handled, we will also tell you in the app before it takes effect.
11. Contact
Questions or requests about privacy: support@frozenbox.co.za