Privacy policy

Who we are

Holdly is the mobile speaking-practice app described on this site. For questions about this policy or your data, email erricofrancescospeak@gmail.com.

What Holdly does

Holdly is for speaking out loud with an AI assistant and getting a report after the session. It is not a course, it has no quizzes, and it does not offer Google, Apple, or Facebook sign-in. We do not use analytics, ads, or cross-app tracking tools.

Data we process

Identity. Each session is tied to a user identifier. You can use the app as a guest (anonymous account) or create an account with email and password. For a registered account we process your email, email confirmation, password reset, and password change. We do not ask for a phone number, photo, date of birth, address, or advertising IDs.

Profile. After you choose a native language and a practice language we store: optional display name (max 40 characters), email if you registered, those two languages, your plan (Free or Premium trial), and the device time zone, used for the daily speaking limit.

Conversations. We store session metadata (languages, duration, status) and the text of turns: what you said and the assistant’s reply, with a translation into your native language on the reply. We generate a report (strengths, corrections, vocabulary) and keep progress (words, moments to review) and minutes spoken that day.

Plan. Free includes 5 minutes of speaking per day. With a registered account you can start a 3-day Premium trial (10 minutes per day and a fuller report). When it ends you return to Free and, if applicable, join a waitlist. There are no in-app payments today.

Microphone and audio

The microphone is used only while you hold to speak during a session. We do not use it in the background.

Your voice audio is sent live to OpenAI’s Realtime service (WebRTC) so the assistant can reply with voice. Holdly does not save audio files. After each turn we store only the text transcript.

Why we use it

We use this data only to run Holdly: identity and session, conversation, reports, progress, daily quota, and the Premium trial. We do not use it for advertising and we do not sell it.

Who receives it

Supabase: authentication (guest or email/password), database, and confirmation / password-reset emails.

OpenAI: live audio during a session; text to translate replies and generate reports.

Upstash Redis: a temporary queue to generate reports. The job holds only conversation and user identifiers, not audio.

This website is hosted on Vercel. The landing page loads fonts from Google Fonts. The mobile app uses fonts bundled in the app, without that request.

Apple and Google see what you send them when you download the app from their stores. We do not use their sign-in.

Where data goes

OpenAI is a provider based in the United States. When you speak or we generate a report, data may leave the European Economic Area. We send it only to provide the feature you are using.

How long we keep it

We do not auto-delete conversations or reports after a fixed number of months. They stay for as long as the account exists. If you delete your account, we delete server data as described on the Account deletion page.

Deletion

If you have a registered account, go to Settings and tap Delete account. That permanently deletes the account, conversations, messages, reports, progress, daily usage, Premium trial, and waitlist.

Sign out only closes the session on this phone: server data stays.

Guests do not have a delete button. If you use Holdly as a guest and then sign in to another account, the guest session on this phone closes but that guest identity on the server is not deleted by that action. To request deletion of a guest session, email erricofrancescospeak@gmail.com.

On your phone

On the device we keep the signed-in session in encrypted form and some local preferences: interface language, practice languages, whether you have seen onboarding, and the last report if you are a guest. Uninstalling the app removes this from the phone, not data already on the server.

This website

The landing page does not use tracking cookies or analytics. It loads fonts from Google Fonts, which may see the network address of people who open the page.

Children

Holdly is not directed at children under 13. We do not knowingly collect data from children under 13.

Your rights

Where the GDPR applies you can ask for access, correction, deletion, restriction, objection, and portability. Email erricofrancescospeak@gmail.com. You can also lodge a complaint with your country’s supervisory authority (in Italy, the Garante per la protezione dei dati personali).

Changes

If Holdly changes (for example when we open payments), we will update this page and the date at the top.