Privacy Policy

Data Storage & iCloud Sync

HoldSpace stores your organization, group, member, meeting, and note data on your device and syncs it to your own private iCloud using Apple's CloudKit. Your data lives in your personal iCloud account — encrypted by Apple, scoped to your Apple ID, and synced privately across your own devices. There is no HoldSpace account and no HoldSpace server: NorthPack Studios LLC operates no backend, cannot see your data, and performs no analytics. If you are not signed into iCloud, HoldSpace keeps everything on your device and syncs once iCloud becomes available.

Your data leaves your control only through features you invoke yourself — sharing an organization with a co-facilitator (see Co-Facilitation & Sharing), or the Maps & Geocoding, Sending Email, and Backups features below.

Co-Facilitation & Sharing

You can share an organization with other facilitators. When you do, that organization's groups, members, meetings, contact log, notes, and follow-ups are shared — through Apple's built-in CloudKit sharing — only with the facilitators you explicitly invite, so the two of you can co-edit it. The sharing runs entirely on Apple's infrastructure; NorthPack Studios LLC has no server in the loop and cannot see the shared data. Your personal library (templates, prompts, readings, videos, podcasts, and online resources) is never shared — each facilitator keeps their own. You can stop sharing at any time from Manage Current Organization.

Maps & Geocoding

When you open a group's map or tap a member's address, HoldSpace asks Apple's map service to turn that address into a location it can show on a map. Apple processes those addresses to return the result, subject to Apple's privacy policy; HoldSpace does not store the resulting coordinates. If you'd rather not send addresses to the map service, don't open the group map or tap addresses.

Sending Email

HoldSpace does not send email itself. When you choose to send a message or a meeting reminder, HoldSpace opens your device's mail app with the recipients and text pre-filled; the message is sent (or not) by you, through your own email account. HoldSpace records that you sent a message — the recipient and a copy of the text — in its local data so it appears in the member's timeline.

Photos

Member photos you add are stored with the member record. Like the rest of your data, they sync to your own private iCloud and — if you share an organization — travel with that organization to the co-facilitators you invite. They are not part of the JSON backup file you export, and they are never sent to NorthPack Studios.

Notifications

HoldSpace uses local notifications to remind you about upcoming meetings, important dates, and follow-up tasks with due dates. Notification content is generated on your device; nothing is sent to or stored on an external server.

Notes & Follow-ups

Notes and follow-up tasks are stored and synced alongside your other data. They attach to an organization, group, meeting, or member; deleting that parent also removes its notes and follow-ups. Both are included in JSON backups you export, and — for a shared organization — are visible to the co-facilitators you invite.

Backups You Export

When you export a backup, HoldSpace writes an unencrypted file containing all of your group, member, and note data. Where that file goes — Files, iCloud Drive, AirDrop, email — is your choice, and protecting it afterward is your responsibility.

Printable Reports

The printable Meeting Report is built on your device from your own data and includes that meeting's roster — member names, pronouns, emails, photos or icons, who attended, and any of a member's important dates that fall near the meeting. Library Item handouts (Readings, Prompts, Templates, Videos, Podcasts, and Online Resources) are built on your device from the library content you authored or saved. The Group Report, by contrast, contains only aggregate counts and no names. When you print, save, or send any of these, where it goes and protecting it afterward is your choice.

Library Links

Videos, podcasts, and online resources in your library are link references — HoldSpace stores the title, source, URL, and your own summary text on your device. It does not contact those websites or services; opening a link uses your device's browser or mail app and is subject to those services' own privacy policies.

Deleting Data

You control your data and can erase it. Deleting a member removes that member and everything tied to them — contact log, message history, photo, notes, and follow-ups — from the device permanently. Deleting a meeting removes its record, reminder, notes, and follow-ups. Settings → Data → Data Management → Delete All Data wipes everything. None of these can be undone; export a backup first if you might want the data back.

Analytics & Tracking

HoldSpace contains no analytics, advertising, or third-party tracking of any kind. It does not collect data about you.

Sample Data

When you open HoldSpace without any groups or members, you'll see a welcome screen with an opt-in "Try with sample data" link. If you tap it, HoldSpace loads a bundled sample dataset so you can explore every feature before committing real data. Sample data ships with the app, lives only in memory on your device, never persists to disk, never schedules meeting reminders or any notifications, and is discarded the moment you start your own tracking. While viewing sample data, Export Data and Delete All Data are disabled.

Changes

If this policy changes, the date above will be updated.

Contact

Questions about this policy? Reach us at support@northpackstudios.org.