Privacy Policy
This Privacy Policy explains how Holisty ("we", "us", "our") handles information when you use the Holisty mobile application (the "App"). Holisty is designed with privacy in mind. The App works primarily offline, and we collect as little data as possible.
1. Information Stored on Your Device
This policy describes the guest release of Holisty. No account is required, and login, account API requests and cloud history synchronization are disabled in this release.
- Installed app list: Focus uses app names, identifiers and icons locally so you can choose which apps to block. The list is not uploaded.
- Preferences: Appearance, favorites, exercise settings, app selections and schedules are saved in local device storage.
- Activity history: Completed sessions, their duration and exercise details are saved on this device. They are not synchronized to an account.
- Focus usage: When you choose an hourly allowance, Focus stores local counters for time spent in the selected apps to enforce that allowance.
These local records and accessibility events are not uploaded or shared.
2. How the App Uses Information
Holisty processes these local records to provide timers, exercise history, preferences and the Focus rules you choose. Training cues, mobility routines, breathing exercises and timers are bundled with the app. Ambient sounds require an internet connection to download from the public audio service described below.
3. Network Services
Holisty does not use advertising or analytics services in this release. When you choose an ambient sound, the app requests its audio file from public Supabase Storage. The hosting service receives the network information needed to deliver it, including your IP address and the requested audio file. These requests do not include your activity history, installed app list or accessibility events. Network handling is subject to Supabase's privacy policy.
The guest release does not make account API or service-status requests. Opening a public website such as this privacy policy also requires a network request to its host.
4. Accessibility Service
Holisty Focus uses Android AccessibilityService to access the identifier of the currently
open app from window-change events (TYPE_WINDOW_STATE_CHANGED). It compares
that identifier with the apps you chose for an active session or an enabled schedule. This
can work while Holisty is in the background. To block a selected app, Focus briefly displays
its own blocking overlay and uses Android's Home action to return you to the Home screen.
Hourly allowance counters are used only for the exceptions you choose.
Focus does not read screen content, messages, passwords or typed text, take screenshots, or simulate taps or gestures. Accessibility events, app identifiers and usage counters are processed locally and are not shared with servers or third parties.
Focus only processes accessibility events after you explicitly agree to its separate in-app notice and enable the service in Android settings. You can decline the notice and continue using the rest of Holisty. You can pause or stop sessions, disable schedules, or withdraw consent in Focus. Withdrawal stops Focus blocking and accessibility data processing, stops the manual session, disables schedules and clears allowance counters. It does not delete your activity history or saved app selections. You can turn the Android service switch off separately in Android Accessibility settings.
5. Device Storage and Security
Local records are held in the app's private storage, subject to Android's app isolation and your device security. Focus consent is stored outside Android backup and device transfer, and Focus preferences and the app's local database are excluded from those backups. Protect your device with a screen lock and keep its software up to date.
6. Data Retention
Local history and preferences remain on your device until you clear the app's storage or uninstall it. Holisty does not retain a server copy of those local records in the guest release. Withdrawing Focus consent is not a request to erase all app data. Public audio delivery is handled separately by the hosting provider described above.
7. Children's Privacy
Holisty is not directed at children under 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect information from children. If you believe a child has provided us with personal information, please contact us and we will promptly address the issue.
8. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above. A change to the purposes of accessibility access requires a new explicit consent request; continued use alone does not grant that consent.
9. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us at privacy@holisty.app.