Privacy

Last updated November 1, 2026

Held For Us holds the most private things you write: promises to yourself, and the reasons behind them. This page says plainly what we collect, how it is protected, who touches it, and what we cannot promise.

The short version

• Your promises are encrypted before they are saved, and locked to your account.
• Our staff do not read promises. There is no screen that shows them.
• We never put promise content in an email.
• We do not sell your information, show ads, or run trackers inside the app.
• You can delete your account, and everything in it, whenever you like.

What we collect

• Your email address and a password. We never see your password in readable form; it is stored scrambled.
• Your birth date, so that a promise set to arrive at a certain age can arrive on the right day.
• Your promises: the promise itself, the reason, and for a promise that waits for an event, a description of that event.
• Details about each promise that are not encrypted: its number, when you wrote it, which kind of delivery you chose (a date, an age, or an event), the date or age itself, and whether it is sealed, delivered or opened early.
• A record of your purchases: what you bought, the amount, and when. Your card details go to Stripe, not to us.
• Basic technical records kept by our hosting, such as IP addresses and the pages requested, used to keep the service running and secure.

How your promises are protected

The text of your promise, your reason, and your event description are encrypted before they reach our database. Every member has their own encryption key, and those keys are themselves locked with a master key that is kept outside the database. Someone who got hold of a copy of the database alone could not read your promises.

We built Held For Us so that staff cannot browse or read promises. No admin screen shows them, and promise content is kept out of our logs, error reports and emails.

We want to be straight about the limit. This is not zero knowledge encryption. Our servers have to decrypt a promise to show it to you, so the software that runs Held For Us, and the people who control it, have the technical ability to read promises. We do not use that ability. We decrypt your promises only to show them to you, signed in, in your own account. We chose this design so that you can reset a forgotten password without losing everything you have written.

What we email you

Emails say only that something is waiting, such as “A promise from you has arrived” or “You have 2 moments waiting.” They never include what you wrote. We also send the emails that keep your account working, such as a password reset or a payment receipt.

Who else handles your information

We use a small number of providers to run the service. Each one only receives what it needs.

• Supabase stores our database and handles sign in. It holds your email, your scrambled password, and your encrypted promises.
• Vercel hosts the app and keeps server records such as IP addresses.
• Stripe takes payments. It receives your card details and email. We do not receive or store your card number.
• Resend sends our emails. It receives your email address and the short message we send.
• GoDaddy runs our domain and our mailbox, which holds anything you choose to email us.

We do not sell your information, share it for advertising, or use it to build profiles.

Cookies and tracking

We use only the cookies needed to keep you signed in. There are no advertising pixels, no analytics trackers, and no session recording inside the app.

Keeping and deleting your information

You can delete your account in Settings. That permanently deletes your profile, your encryption key, every promise, and your check-in and purchase records from our database. We cannot get them back, and neither can you. Copies may remain in our database backups until those backups expire. Stripe and our tax and accounting records keep the payment records that the law requires.

Legal requests

If we receive a legal demand for someone’s information, we will push back on anything overbroad and tell the member unless the law forbids it. Because our servers can decrypt promises, we cannot promise that we would be unable to comply with a valid court order.

If something goes wrong

If a security problem exposes your information, we will tell you, as the law requires.

Who this is for

Held For Us is for people 18 and older. We do not knowingly collect information from anyone under 18.

Changes to this page

If we change this page in a way that matters, we will email you before it takes effect.

Contact

Held For Us LLC. Questions about your privacy, or a request to see or delete your information: alan@heldfor.us.