Holo Privacy Policy
Last updated: August 13, 2026
Effective date: August 13, 2026
Welcome to Holo ("the App"). We know how much personal data matters, and we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information.
Core principle: Your data belongs to you. Wherever possible, your data is stored locally on your device and in your own iCloud. We do not sell your personal data, and we do not use your data for advertising.
1. Information We Collect
1.1 Information You Provide
- Account information: When you use Sign in with Apple, we receive the email address associated with your Apple ID and a unique user identifier. You may choose to hide your email address.
- Financial records: Expense and income entries you enter manually, including amounts, categories, accounts, dates, and notes. This data is stored locally on your device and in your iCloud.
- Health data: With your permission, the App reads steps, sleep, stand, and workout data from Apple HealthKit. The App never writes to or modifies your health data.
- AI processing of health data: When you use AI features that require health context, a minimal health summary is sent to third-party AI services through the Holo backend after you consent to AI data processing; AI-derived memories in the health domain are stored only on your device.
- Habits and to-dos: Habit tracking records and to-do items you create.
- Thoughts: Notes, tags, and references you create, stored locally on your device and in your iCloud.
- AI-derived memories: After you enable automatic memory formation, Holo organizes domain memories and cross-domain observations from structured signals and aggregated data across modules. Regular memories may be stored on your device and in your personal iCloud; health-domain memories and cross-domain memories that include health sources are stored only on your device.
- Voice input: When you use voice input, audio data is sent to our server for speech-to-text processing. The audio is not retained after processing completes.
1.2 Data Processed by AI Features
The App provides AI assistant features (including insights, memory analysis, and smart categorization). When you use these features:
- Your question and the relevant context are sent over an encrypted connection to our backend server.
- The backend forwards the data to third-party AI service providers for processing.
- The AI provider returns the result. We do not proactively retain the raw text of your AI requests or full context as user profiles.
- Generated results and derived memories are stored on your device or in your personal iCloud as described above. You can view, correct, disable, or forget individual memories in Memory Management, and you can delete your account and data in Settings.
1.3 Automatically Collected Information
We do not automatically collect device information, location data, or usage behavior data. We do not use any third-party analytics tools.
2. How We Use Information
| Data type | Purpose |
|---|
| Apple ID information | Authentication and sign-in |
| Financial records | Expense tracking, statistics, and display |
| Health data (read-only) | Health display, trend analysis, and authorized AI insights |
| Habits and to-dos | Habit tracking and task management |
| Thoughts | Notes, tags, and reference management |
| Voice audio | Speech-to-text for expense entry or AI chat input |
| AI conversation context | Data analysis, suggestions, and other AI features |
| AI-derived memories | Reducing repeated analysis and providing personalized context for relevant questions |
3. Data Storage and Security
3.1 Local Storage
Your core data is stored locally on your device, managed with Apple's Core Data framework.
The App Store release does not retain raw AI requests, full context, or full response logs on your device.
3.2 iCloud Sync
After you sign in to iCloud and enable sync, your Holo records and regular AI-derived memories sync across your devices via Apple CloudKit. Transfers and storage are protected by Apple's encryption. We cannot access the user data in your iCloud. Holo never writes or syncs raw health data read from Apple HealthKit, health-derived memories, or cross-domain memories containing health sources to Holo's iCloud database.
3.3 Server-Side Processing
- AI and speech recognition requests are transmitted to our backend over HTTPS.
- The server is used for request forwarding, rate limiting, security protection, and troubleshooting. We do not proactively retain the raw text of AI requests, voice audio, or full context as user profiles.
- To keep the service stable, the server retains minimized technical logs or summaries, such as device identifier, call type, provider, model, latency, error information, request/response summary or length, and call time. Logs are used for security, rate limiting, and troubleshooting; full text is not retained by default, and logs are purged on schedule per backend configuration.
3.4 Security Measures
- All network communication is encrypted with TLS 1.2+.
- API keys are not stored in the client app; they are kept securely on the backend server.
- Servers run in a firewall-protected cloud environment.
4. Information Sharing
We do not sell, rent, or trade your personal information.
- AI service providers: After you enable AI features and consent to AI data processing, your questions and necessary context are sent to third-party AI services (such as Alibaba Cloud Bailian (Qwen), DeepSeek, Moonshot (Kimi), and Zhipu (GLM)).
- Apple services: Sign in with Apple and iCloud sync are provided by Apple and governed by Apple's Privacy Policy.
- Legal requirements: We may need to disclose your information when required by applicable law.
5. Your Rights
- Access: You can view all stored personal data in the App at any time.
- Deletion: You can choose "Delete Account & Data" in Settings.
- Withdraw consent: You can withdraw any permission at any time in the device's Settings > Privacy & Security.
6. Data Retention
- Local data: retained until you delete it or uninstall the App.
- iCloud data: retained with your iCloud account.
- Server logs: only minimized technical logs or summaries are retained for security, rate limiting, and troubleshooting, purged on schedule per backend configuration; we do not proactively retain raw AI request text, voice audio, or full context as user profiles.
- Voice audio: destroyed immediately after processing.
7. Children's Privacy
The App is not directed at children under 13. If we learn that a child's data has been collected by mistake, we will delete it immediately.
8. Changes to This Policy
Material changes will be announced in the App. Continued use means you agree to the updated policy.
9. Contact Us