Your privacy & trust
Privacy Policy
This Privacy Policy explains how Holisty ("we", "us", "our") handles information when you use the Holisty mobile application (the "App"). Holisty is designed with privacy in mind. The App works primarily offline, and we collect as little data as possible.
1. Information Stored on Your Device
This policy describes the guest release of Holisty. No account is required, and login, account API requests and cloud history synchronization are disabled in this release.
- Installed app list: Focus uses app names, identifiers and icons locally so you can choose which apps to block. The list is not uploaded.
- Preferences: Appearance, favorites, exercise settings, app selections and schedules are saved in local device storage.
- Activity history: Completed sessions, their duration and exercise details are saved on this device. They are not synchronized to an account.
- Focus usage: When you choose an hourly allowance, Focus stores local counters for time spent in the selected apps to enforce that allowance.
These local records and accessibility events are not uploaded or shared.
2. How the App Uses Information
Holisty processes these local records to provide timers, exercise history, preferences and the Focus rules you choose. Training cues, mobility routines, breathing exercises and timers are bundled with the app. Ambient sounds require an internet connection to download from the public audio service described below.
3. Network Services
Holisty does not use advertising or analytics services in this release. When you choose an ambient sound, the app requests its audio file from public Supabase Storage. The hosting service receives the network information needed to deliver it, including your IP address and the requested audio file. These requests do not include your activity history, installed app list or accessibility events. Network handling is subject to Supabase's privacy policy.
The guest release does not make account API or service-status requests. Opening a public website such as this privacy policy also requires a network request to its host.
Shared workouts and the Holisty plugin
When you choose to create a shared workout, Holisty stores the exercise names, timing, optional training notes, a random link identifier, creation time and expiry time on its Cloudflare-hosted workout service. The workout is accessible to anyone with its link for 30 days. Do not include personal information, diagnoses or medical histories. Creating a share does not upload your device history, account session, installed apps or Focus data.
Opening a short workout link sends its identifier to the service. The host receives the network information needed to handle requests. Holisty does not store IP addresses in its workout database, and application request logging is disabled. Global creation counters limit abuse without building individual profiles. When used through ChatGPT, the requested workout and tool results are also processed by that platform under its own terms.
Expired shares are removed by a daily cleanup. Service backups may retain a removed share temporarily within the hosting provider's recovery window. To request removal before expiry, contact privacy@holisty.app with the link. See Cloudflare's privacy policy and our support page for more information.
4. Accessibility Service
Holisty Focus uses Android AccessibilityService to identify the open app and apply your chosen app blocks, hourly allowance and schedules, including in the background. Whole-app blocking briefly displays an overlay and returns you to Home. If you enable short-video blocking for Instagram, Facebook, YouTube or TikTok, Focus also examines visible interface structure, view identifiers and selected control labels in that app to recognize Reels, Shorts or video feeds. It goes Back when detected, or Home if the section stays open. Short-video blocks remain active outside sessions until disabled or paused.
Focus skips editable and password fields, does not take screenshots or simulate taps or gestures, and does not store or share screen content. Interface checks, accessibility events, app identifiers and usage counters are processed on your device and are not sent to servers or third parties.
Focus only processes accessibility events after you explicitly agree to its separate in-app notice and enable the service in Android settings. You can decline the notice and continue using the rest of Holisty. You can pause all blocks, disable short-video blocks or schedules, stop sessions, or withdraw consent in Focus. Withdrawal stops Focus blocking and accessibility data processing, stops the manual session, disables schedules and short-video blocks, and clears allowance counters. It does not delete your activity history or saved app selections. You can turn the Android service switch off separately in Android Accessibility settings.
5. Device Storage and Security
Local records are held in the app's private storage, subject to Android's app isolation and your device security. Focus consent is stored outside Android backup and device transfer, and Focus preferences and the app's local database are excluded from those backups. Protect your device with a screen lock and keep its software up to date.
6. Data Retention
Local history and preferences remain on your device until you clear the app's storage or uninstall it. Holisty does not retain a server copy of those local records in the guest release. Withdrawing Focus consent is not a request to erase all app data. Public audio delivery is handled separately by the hosting provider described above.
7. Children's Privacy
Holisty is not directed at children under 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect information from children. If you believe a child has provided us with personal information, please contact us and we will promptly address the issue.
8. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above. A change to the purposes of accessibility access requires a new explicit consent request; continued use alone does not grant that consent.
9. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us at privacy@holisty.app.