Holding HandsThe short version
- The Holding Hands app doesn't send your family's information to us. It has no account, no server of its own, no ads, no analytics and no tracking.
- Everything you enter is stored in your own iCloud, end-to-end encrypted, and shared only with the people you invite.
- Smart features like visit recaps and med-list scanning run on your device.
- If you sign up for the beta on this website, we keep your name and email to send you the TestFlight link and beta news.
This policy explains how DevScape.io LLC ("DevScape", "we", "us") handles information in the Holding Hands app for iPhone, iPad and Mac (the "app") and on holdinghands.app (the "website"). If you have questions, email support@devscape.io.
Information in the app
Holding Hands is a shared care binder: medications and doses, appointments, tasks, journal entries, health and insurance details, contacts, documents and the Emergency Card. We call this your "care information." It often includes health information about the person you care for.
Where it's stored
Your care information is stored on your devices and in your iCloud account using Apple's CloudKit. We don't operate a server that receives it, and we can't read it.
- End-to-end encryption. Every field the app saves to iCloud uses CloudKit's encrypted fields. Photos, card scans, drawings and documents are sealed with AES-GCM using a key that belongs to each care circle. Neither Apple nor we can read the contents.
- What Apple can see. To run iCloud, Apple's servers can see some technical details that aren't encrypted, such as record types, identifiers, links between records, sizes and timestamps. Apple's handling of iCloud is covered by the Apple Privacy Policy.
- On your device. Widgets, Siri and Shortcuts read from a copy of your data that stays on your device.
Sharing with your family
When you invite someone to a care circle, Apple's iCloud sharing makes that circle's care information available to them. Everyone in the circle can see what's in it and who did what, for example "Given by Maya at 8:02 am," along with each member's name as it appears in their Apple Account. You choose whether each person can edit or only view, and the circle's owner can remove anyone.
Invitations use a link and a one-time code. To check a code, the app saves a small record in the app's public iCloud database that contains only the invitation's expiry date and access level, under a name derived from the code. It contains no names or care information, and invitations expire after 72 hours. The share link's identifier sits after the "#" in the link, so it never reaches this website's server.
Features that run on your device
- Visit recaps, the weekly digest and med-list scanning use Apple Intelligence and Apple's Vision text recognition on your device. What you scan or ask for isn't sent to us.
- Medication suggestions come from a copy of the U.S. National Library of Medicine's RxTerms list that's built into the app. What you type is searched on your device.
- Reminders and missed-dose alerts are scheduled on each device. iCloud sends silent notifications so a device learns when someone else logs a dose.
Purchases
Holding Hands Plus is sold through Apple's App Store. Apple handles payment, and we never receive your payment details. Apple tells the app which plan you have so it can turn on Plus. Which people your plan covers is saved with the care circle in iCloud, so everyone in that circle gets Plus.
Information we don't collect
The app doesn't collect analytics, advertising identifiers, location, contacts from your address book, or crash reports for us. It doesn't track you across other apps or websites. Its App Store privacy label is "Data Not Collected."
The beta and TestFlight
If you join the beta through the form on this website, we collect your name and email address. We use them to email you the TestFlight link, send beta updates and launch news, and manage beta offers such as the free year of Plus for the first 100 testers. You can unsubscribe at any time by emailing support@devscape.io.
If you install the beta through Apple's TestFlight, Apple shares some information with us, such as your device model and system version, install and session dates, crash reports, and any feedback or screenshots you choose to send. This is covered by Apple's TestFlight privacy notice. Purchases made in the TestFlight version aren't charged.
The website
holdinghands.app is hosted by Cloudflare. Like any website, Cloudflare processes your IP address, browser details and the pages you request in order to deliver the site and protect it from abuse. The site loads its typeface from Google Fonts, which receives your IP address and browser details when you visit. The website doesn't use analytics or advertising and doesn't set cookies of its own.
The invitation page, holdinghands.app/join, never receives your circle's invitation details, because they're kept in the part of the link after the "#" that browsers don't send to servers.
Service providers
We don't sell or rent personal information, and we don't share it for advertising. We use these providers to run the beta and the website:
| Provider | What it does | Information involved |
|---|---|---|
| Apple | iCloud, App Store purchases, TestFlight | As described above, under Apple's privacy policy |
| Resend | Stores the beta list and sends beta emails | Name, email address, emails sent |
| Cloudflare | Hosts the website | IP address, browser details, requests |
| Google Fonts | Serves the website's typeface | IP address, browser details |
We may also disclose information if the law requires it, to protect someone's safety, or as part of a merger or sale of our business, in which case this policy will continue to apply to it.
If you email us for support, we use what you send only to help you.
Keeping and deleting information
- Care information stays in iCloud until you delete it. You can delete entries in the app, leave a circle, or, as a circle's owner, delete the circle. You can also remove the app's data in your device's iCloud settings. Because we never have it, we can't recover it for you.
- Beta sign-ups are kept until you ask us to delete them, or until we no longer need them for the beta and launch. To delete yours, email support@devscape.io.
- Support emails are kept only as long as needed to help you.
Your rights
Depending on where you live, including Texas, California, the European Union and the United Kingdom, you may have the right to know what personal information we have about you, to get a copy, to correct it, to delete it, and to object to or limit how we use it. We hold very little: usually only your beta sign-up or support emails. To use these rights, email support@devscape.io. We'll respond within 45 days and won't treat you differently for asking. If we turn down a request, you can reply to ask us to reconsider.
Health information
Holding Hands is made for families, not healthcare providers. We don't receive the health information you keep in the app, and we're not a healthcare provider or a business associate under HIPAA.
Children
Holding Hands isn't directed at children under 13, and we don't knowingly collect personal information from them. If you believe a child has signed up for the beta, email us and we'll delete it.
Changes to this policy
If we change this policy, we'll update the date at the top of this page. If a change affects how we handle information we already have, we'll tell you in the app or by email before it takes effect.
Contact
DevScape.io LLC
support@devscape.io