Privacy Policy
Last updated 18 August 2026
Holt reads the school, sports, and activity email a parent already receives so they can ask what is happening this week and get an answer, instead of searching their inbox for it. To do that it has to read your mail, so this policy is specific about what Holt reads, what it keeps, who it shares it with, and how you get rid of it.
Holt is operated by the developer of Holt. Questions, requests, and complaints: privacy@checkholt.com.
1. What we collect
Information you give us
- Your email address, used as your account identifier and to send you sign-in codes and your brief.
- Household details you enter: your children's first names, their schools, teams, and activities, and which organisations belong to which child. You choose what to enter; a nickname works as well as a legal name.
- Settings: brief timing, notification preferences, which senders to capture or ignore.
Information from mailboxes and calendars you connect
When you connect a mailbox, Holt reads incoming messages in order to find school and activity mail. It reads broadly and keeps narrowly. From a message that matches a sender you have confirmed, Holt keeps:
- the extracted item — a title, date, time, location, amount, and whether something is due from you;
- the sender address and the message's identifier, so an update to the same event can replace it rather than duplicate it;
- a short excerpt of the sentence an item came from, so you can see why Holt thinks practice moved.
Holt does not store the full text of your messages, and does not store attachments. A message that matches no confirmed sender leaves behind at most the sender address, the subject, and a short snippet, in a review list so you can decide whether that sender matters. Anything you ignore there is dropped.
Information collected automatically
- Session cookies that keep you signed in.
- Operational logs — timestamps, error messages, and counts of messages processed — used to keep the service working. Logs are not used to build a profile of you.
2. Google user data
Connecting a Google account is optional. If you do, Holt requests exactly two permissions, and uses each one for a single purpose:
| Permission | Scope | What Holt does with it |
|---|---|---|
| Read your email messages and settings | gmail.readonly |
Reads incoming mail to identify school, sports, and activity messages and extract the dates, deadlines, payments, and forms in them. Also reads your Gmail address once, at connection time, so the app can show you which mailbox is connected. Holt never sends, replies to, modifies, labels, archives, or deletes anything in your mailbox. |
| Manage events on your Google Calendars | calendar.events |
Creates and updates calendar events for the items you choose to add, and removes one if the underlying activity is cancelled. Holt only touches events it created. It does not read, change, or delete your other events, and it cannot see or change your calendar settings or sharing. |
Holt requests read-only access to Gmail because it needs the body of a message to find a time, a place, and a deadline. Metadata-only access — sender, subject, and date — cannot answer "what time is the bus", which is the entire point of the product.
Limited Use
Holt's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Concretely, that means Holt does not:
- sell, rent, or trade your Google data;
- use it for advertising, retargeting, or ad personalisation;
- use it to develop, train, or improve generalised or general-purpose AI or machine learning models;
- transfer it to anyone other than the service providers listed below, and then only as needed to run Holt for you, or where you direct it, or where the law requires it.
No human at Holt reads your messages, with these narrow exceptions permitted by the policy: where you have given explicit consent for a specific message (for example, when you send us a support request about something Holt got wrong); where it is necessary for security purposes, such as investigating abuse; where the law requires it; or where the data has been aggregated and de-identified so that it no longer relates to you.
3. Automated processing, and the model behind it
Holt uses a large language model to turn a message into a structured item. This is the only place your message content leaves Holt's own infrastructure, so it is worth being exact about it.
Your email is never used to train an AI model
Extraction runs on Anthropic's commercial API. Under Anthropic's Commercial Terms of Service, inputs and outputs submitted through the API are not used to train Anthropic's models. That is a contractual commitment we rely on, not a setting we hope is switched on. Holt does not use consumer AI products, does not paste your mail into a chat interface, and does not have — or want — any arrangement that would let a model learn from your family's mail. Holt does not train models of its own.
What actually gets sent
- Only messages from a sender you have confirmed as a school, team, club, or activity. Everything else is discarded in memory and is never sent anywhere.
- Only the subject line and the message's own text. Quoted reply chains are stripped first, attachments are never sent, and long messages are truncated.
- Nothing about you is attached to it: no name, no email address, no account identifier. The request carries the message and nothing more.
What happens to it afterwards
Anthropic processes the request and returns the extracted items. It acts as our processor, bound to use the content only to serve that request. Extraction results are cached on our side against a hash of the message text, so the same newsletter is not processed twice; the cache holds the extracted items — a title, a date, a place — never the original message, is not linked to any account, and is cleared after 90 days without use.
If you want to check any of this rather than take our word for it, ask us at privacy@checkholt.com. We will tell you exactly which model version ran, what was sent, and what came back.
4. Service providers
| Provider | Purpose | Data involved |
|---|---|---|
| Render | Application hosting and the database | All stored Holt data |
| Anthropic | Extracting items from message text | Message text, transiently |
| Resend | Sending sign-in codes and briefs | Your email address and brief content |
| The mailbox and calendar you connect | As described in section 2 |
Each is bound by contract to use the data only to provide their service to Holt. Holt has no other recipients, and does not use analytics, advertising, or tracking services.
5. How your data is protected
- All traffic is served over HTTPS.
- Mailbox credentials and OAuth refresh tokens are encrypted before they are written to the database, with a key held outside it.
- Data is separated by household at the database level, so one family's records cannot be read through another family's session.
- Sign-in is by emailed one-time code — there is no password for an attacker to guess or reuse.
No system is perfectly secure. If a breach affects your data we will tell you and the relevant regulator without undue delay.
6. How long we keep things
- Items and calendar dates — kept while your account is open, so past terms remain answerable. You can delete any item at any time.
- Unmatched senders in the review list — dropped when you ignore them, and otherwise cleared as the list is worked through.
- OAuth tokens and mailbox credentials — deleted the moment you disconnect that source.
- Everything else — deleted when you delete your account, as described below.
7. Your choices, and deleting your data
You can, at any time, from inside Holt:
- Disconnect a mailbox or calendar. Holt deletes the stored credentials and, for a Google account, tells Google to revoke the token so the access is withdrawn on Google's side too.
- Delete your account. This removes your household and everything in it — children, organisations, contacts, items, history, sources, and stored credentials — from the live database, and revokes any connected Google access. It cannot be undone. Residual copies in encrypted backups age out within 30 days.
You can also revoke Holt's access directly at myaccount.google.com/permissions. Doing it there stops the access but does not delete what Holt already holds — use the in-app deletion for that, or email privacy@checkholt.com and we will do it for you.
Depending on where you live you may also have the right to access, correct, export, or restrict the processing of your data, and to complain to your data protection authority. Write to the address above and we will respond within 30 days.
8. Children
Holt is a service for parents and carers. It is not directed to children, it does not have accounts for children, and it does not collect information from children. The only information about a child in Holt is what a parent chooses to enter — typically a first name — plus the school and activity dates that concern them, all of it entered and controlled by that parent.
9. Where data is held
Holt's servers and database are hosted in the United States. If you use Holt from elsewhere, your data is transferred to and processed in the United States.
10. Changes
If this policy changes in a way that materially affects how your data is used, we will email you before the change takes effect. The date at the top always reflects the current version.