Privacy Policy

Last updated: 31 August 2026

Holder is designed around a simple principle: your knowledge belongs to you.

This Privacy Policy explains what information Holder processes, why it processes it, and what happens when you connect Holder to third-party services such as Google Drive.

1. Who we are

Holder is a volunteer-run free and open-source software project maintained by the Holder Team.

The project is supported by Zeth Ltd, a company registered in England and Wales, which provides administrative and organisational support to the project.

For privacy and data protection matters relating to Holder, Zeth Ltd acts on behalf of the Holder Team.

You can contact us at:

privacy@holder.team

2. Information stored in Holder

Holder is designed primarily to store your data on your own devices and in storage services that you choose.

Depending on how you use Holder, this data may include:

• cards, notes and other text you create;
• files and other assets you add to Holder;
• tags, relationships and other organisational information;
• application settings and configuration;
• information required to connect Holder to storage or synchronisation services you choose to use.

Holder does not claim ownership of the content you create or store using the application.

3. Third-party storage services

Holder may allow you to connect storage services provided by third parties.

When you choose to connect such a service, Holder may communicate with that service in order to store, retrieve, list, update or delete data as necessary to provide the functionality you requested.

Your use of a third-party service is also subject to that provider’s terms and privacy policy.

4. Google Drive

If you choose to connect Google Drive, Holder requests access to Google services only for the purpose of providing the Google Drive functionality you requested.

Holder may use Google account information to identify and display the account you have connected.

Holder may send files to Google Drive, retrieve files from Google Drive, locate files previously stored by Holder, and delete those files when you ask Holder to do so.

Holder does not use Google Drive access for advertising, marketing, profiling or tracking.

Holder does not sell Google user data.

Holder does not transfer Google user data to third parties except where necessary to provide functionality explicitly requested by you, where required by law, or where you explicitly direct Holder to do so.

Holder’s use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

5. Google authentication

Holder uses Google’s authentication and authorisation systems when you connect Google Drive.

Holder does not need your Google password and does not receive it.

Authorisation credentials supplied by Google are used only to provide the Google functionality you have authorised.

You can revoke Holder’s access to your Google account through your Google Account settings.

6. Other storage and synchronisation providers

Holder may support other storage and synchronisation systems, including services operated by third parties or infrastructure operated by you.

When you configure one of these systems, information necessary to perform the requested synchronisation or storage operations may be sent to that system.

Holder’s goal is to give you a choice of where your information is stored rather than requiring your information to be held by a single Holder-operated service.

7. Information we collect

Holder is designed to minimise information sent to us.

Some versions or services associated with Holder may need to process limited technical information to provide requested functionality, maintain security, diagnose failures or operate a service.

Where we introduce functionality that requires additional collection or processing of personal information, we will describe that processing in this policy.

8. Sharing and sale of information

We do not sell your personal information.

We do not sell the contents of your Holder data.

We do not use the contents of your Holder data for third-party advertising.

Information may be disclosed where required by law, necessary to protect the security or integrity of a service, or necessary to provide functionality that you have explicitly requested.

9. Data retention and deletion

Data stored locally by Holder remains on your device until you remove it, uninstall the relevant application, or otherwise delete its storage.

Data stored using a third-party provider remains subject to that provider’s storage and deletion mechanisms.

Where Holder operates a service that stores personal information on your behalf, you may contact us at privacy@holder.team regarding access to or deletion of that information.

10. Security

We take reasonable technical and organisational measures to protect information processed by Holder.

No software or network service can guarantee absolute security. You are also responsible for the security of devices, accounts and storage providers that you choose to use with Holder.

11. Children’s privacy

Holder is a general-purpose application and is not designed to collect personal information from children for advertising or profiling.

If particular Holder services become subject to additional requirements concerning children’s information, this policy will be updated accordingly.

12. Changes to this policy

Holder is under active development and its capabilities may change.

We may update this Privacy Policy when Holder’s functionality or legal obligations change. The current version will be published on the Holder website with its revision date.

13. Contact

Questions about this Privacy Policy or Holder’s handling of personal information can be sent to: privacy@holder.team