Privacy Policy
Effective: 2026-07-16 · Last updated: 2026-07-16 · Version 1.1.0
This Privacy Policy explains how HOLD ("HOLD", "we", "us") collects, uses, and protects your information when you use the HOLD application.
1. Information we collect
HOLD is designed to help property owners track recurring costs, bills, mortgage obligations and payday contributions. We collect only the information necessary to provide this service.
2. Account information
When you create an account, we collect your email address, name and authentication details. Authentication is managed securely by our platform provider. We do not store your password.
3. Property information
You may add property details such as a nickname, address, property type, ownership structure and whether the property is an investment. This information is used to organise your costs and provide relevant insights.
4. Payment information
You may add details about recurring payments, bills and subscriptions, including provider names, amounts, billing frequencies and due dates. HOLD does not connect to your bank account and does not collect bank account credentials or card numbers.
5. Uploaded documents
You may upload documents such as council rate notices, water bills, strata levies, insurance statements and mortgage statements. Uploaded documents remain private unless you explicitly share them with connected household members. You control who can see each document.
6. Mortgage information
If you choose to add mortgage details, we store information such as your lender, loan balance, interest rate, repayment amount and repayment frequency. This information is used to calculate loan progress, repayment projections and cash rate impact estimates. Mortgage information is private by default and is only visible to household members you explicitly grant access to.
7. Shared household information
You may invite other people to share access to a property. When you do, you choose what each member can see - payments, documents, mortgage details or limited information only. Nothing is shared automatically. Adding a member does not share your data; you must explicitly choose to share.
8. AI document extraction
HOLD may use AI-assisted extraction to help identify information from documents you upload, such as amounts, due dates, provider names and billing periods. This feature is designed to save you time entering data manually.
AI-assisted extraction may be used to help identify information from uploaded documents. Users should always review extracted information before relying on it.
AI extraction assists the user and does not provide financial or legal advice. Extracted information should be verified against the original document.
9. Analytics
We use privacy-safe, aggregated analytics to understand how the application is used in general - such as feature usage counts and error rates. We do not send your payment amounts, document contents, mortgage details, email addresses or full names to analytics providers.
10. Cookies
We use essential cookies for authentication and basic functionality. We may use analytics cookies with your consent. See our Cookie Policy for details.
11. Security
We use reasonable technical and organisational measures designed to protect your personal information. All data is encrypted in transit using HTTPS/TLS connections. Stored data is encrypted at rest. Authentication is managed securely by our platform provider - we do not store your password.
Access to your data is restricted to your authenticated account through server-side authorisation. Other users cannot access your records by guessing IDs or manipulating requests. Uploaded documents are only accessible to you and members you have explicitly granted access to.
HOLD does not currently offer two-factor authentication or biometric sign-in. We do not use end-to-end encryption. For a detailed explanation, see our Security Centre.
12. Data retention
We retain your data for as long as your account is active. When you request account deletion, your data is deleted or anonymised after a 14-day grace period. Some data may be retained where legally required. General data retention period: 24 months after account closure.
13. International users
HOLD is available to users globally. Your information may be processed in countries other than your own, including where our hosting and authentication providers operate. Data is hosted in Australia. By using HOLD, you consent to the transfer of your information as described in this policy.
14. Children's privacy
HOLD is not directed to children under 16, and we do not knowingly collect information from children. If you believe a child has provided information to us, please contact us and we will take steps to delete it.
15. Your rights
You have the right to: access your data; correct inaccurate data; export your data in a structured format; delete your account and data; restrict or object to certain processing; and withdraw any consent you have given. To exercise these rights, visit our Data and Privacy Requests page or use the in-app settings.
16. Changes to this policy
We may update this policy from time to time. Material changes will be communicated through the app and may require renewed acceptance. Previous versions are preserved.
17. Contact
If you have questions about this Privacy Policy, contact us at jenn@myfmn.com or visit our Contact page.
Registered address: 220 New South Head Road, Edgecliff NSW 2027, Australia.
Governing law: Laws of New South Wales, Australia.