Privacy Policy

Last updated 25 August 2026

Overview

HollyDay (“Holly”, “we”, “us”) helps you collect links about places and turn them into a shared trip plan. This policy explains what personal data we collect, why, and the choices you have. We only collect what we need to run the service.

Information we collect

  • Account details. Your email address (used to sign in) and a display name you choose.
  • Phone number (optional). If you connect WhatsApp, we store your phone number so we can match forwarded messages to your account. You can use Holly without connecting a phone.
  • Content you forward. The messages and links you send to Holly over WhatsApp, and data we derive from them — such as the text of a linked post, place names, categories, and map coordinates.
  • Trip data. The trips you create or join and the places saved to them.
  • Technical data. Standard logs and cookies needed to keep you signed in and to operate and secure the service.
  • Usage data. Analytics about how you use Holly — the pages you visit and the features you interact with (such as searching or filtering the map, or opening a saved place), along with general device and browser information. We use this to understand and improve the product.

How we use your data

  • To provide the service — ingesting the links you forward, geolocating and categorising places, and showing them on your trip.
  • To authenticate you and keep your account secure.
  • To enable collaboration on trips you share with others.
  • To understand how Holly is used — which features help and where people get stuck — so we can improve it.
  • To operate, maintain, debug, and improve the service.

Service providers we share data with

We use a small set of processors to run Holly. They handle your data only to provide their service to us:

  • Supabase — database and authentication hosting.
  • Vercel — application hosting.
  • Zernio / WhatsApp — receiving and sending the messages you exchange with Holly.
  • Apify — retrieving the content of links you forward (e.g. social posts).
  • OpenRouter / Google — an AI model that reads a link's text to identify the place and its category.
  • Google Maps Platform — turning a place name or address into map coordinates.
  • PostHog — product analytics that measure how the app is used, so we can improve it. Hosted in the EU.

We do not sell your personal data. We may disclose data if required by law or to protect the rights and safety of our users.

Data retention

We keep your account and trip data for as long as your account is active. If you ask us to delete your account, we remove your personal data within a reasonable period, except where we must retain it to comply with legal obligations.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these, contact us at the address below.

Security

We use industry-standard measures to protect your data, including encryption in transit and access controls. No system is perfectly secure, but we work to keep your information safe.

Changes to this policy

We may update this policy from time to time. When we make material changes, we'll update the date at the top of this page.

Contact

Questions about privacy? Email us at hello@holly-holiday.app.