Last updated: September 7, 2026
Holdback ("we", "us") makes a mobile app that helps self-employed people estimate how much of their income to set aside for taxes. This policy explains what we collect, why, and your choices.
Account information. If you create an account, we store your email address and an encrypted password (handled by our authentication provider, Supabase).
Tax data you enter. Your filing status, state, expected income, and the payments you log are stored locally on your device. If you enable Backup (a paid feature), an encrypted copy is stored on our servers (Supabase), associated with your account, so you can restore it or sync another device. Row-level security ensures only your account can read it.
Subscription status. If you subscribe to Holdback Plus, our payment processors (Apple, Google, or Stripe) tell us whether your subscription is active. We do not receive your card number.
Diagnostics (optional / consent-gated). In production builds we use Sentry for crash reporting and PostHog for privacy-preserving product analytics (sampled, with personal fields scrubbed before they leave the app). On the web, analytics run only after you consent via the cookie banner. On mobile you can disable analytics in Settings → Privacy.
The calculator. Numbers you type into the calculator are processed on your device to show a result. We do not transmit or store them.
We do not use your information for advertising or profiling, and we do not sell it.
We share information only with service providers that run the app on our behalf, under contract:
| Provider | Purpose |
|---|---|
| Supabase | Authentication and (if you enable Backup) encrypted storage of your tax data |
| Apple / Google / Stripe | Subscription billing |
| Sentry | Crash reporting (production) |
| PostHog | Product analytics (consent-gated / opt-out) |
| Expo | Push-notification delivery (if you enable reminders) |
We may disclose information if required by law, or to protect our rights or users' safety.
Depending on where you live (e.g. the EEA/UK, California), you may have additional rights to access, correct, delete, or restrict processing of your personal information. Contact us to exercise them.
Local data stays until you clear it or uninstall the app. Backed-up data is kept until you delete your account or disable Backup and delete the account. Billing records are retained as required by the app stores and by law.
Data in transit is encrypted with TLS. Backed-up data is encrypted at rest by our storage provider and protected by per-account access rules. No system is perfectly secure; keep your device and account credentials safe.
Holdback is for adults (18+) with self-employment income. We do not knowingly collect information from children.
Our service providers may process data in the United States and other countries. By using Holdback you consent to this transfer.
We will post any changes here and update the "Last updated" date. Material changes will be announced in the app.
Questions or requests: ankit013002+holdback@gmail.com