Last updated: April 4, 2026
Holdy ("we", "us", "our") operates the holdy.money website and the Holdy crypto savings application. This policy explains what data we collect, why, and how we protect it.
Important: Holdy is a read-only savings tracker. We interact exclusively with public blockchain data. We never hold, custody, manage, or transfer your cryptocurrency. Your funds remain in your own wallets at all times, under your sole control. We have no access to your private keys.
Account data. When you sign up we collect your email address and, optionally, your name. If you sign in via Google or Telegram we receive your public profile (name, avatar). We never receive or store your social-network passwords.
Wallet addresses. You may add public blockchain wallet addresses to track savings progress. These are public on-chain identifiers — we never request private keys, seed phrases, or signing permissions.
Usage data. We log anonymised page-view counts, feature usage, and error reports to improve the product. Logs may include your IP address, browser type, and operating system.
Payment data. Subscription payments are processed via cryptocurrency (through PassimPay) and, where available, via traditional payment methods (credit/debit card). For crypto payments we store the transaction hash and payment status. For card payments we rely on a PCI-compliant third-party payment processor — we never see or store your full card number. We do not have access to your wallet balances beyond what is publicly visible on the blockchain.
We do not sell, rent, or trade your personal data. We share data only with:
Data is stored on encrypted servers within the European Union. We apply industry-standard safeguards including TLS encryption in transit, hashed passwords (bcrypt), HTTP-only secure cookies, CSRF protection, and rate limiting. Access to production systems is restricted to authorised personnel via key-based SSH.
We use only essential cookies needed for authentication and session management. We do not use advertising, analytics, or third-party tracking cookies. You can delete cookies at any time through your browser settings.
You may at any time:
Account data is retained for as long as your account exists. After deletion, data is purged within 30 days, except where retention is required by law (e.g. payment records for tax compliance, typically 7 years).
Holdy is not intended for individuals under 18. We do not knowingly collect data from minors.
We may update this policy. Material changes will be communicated via email or an in-app notice at least 14 days before they take effect.
For privacy inquiries: [email protected]