Holler
Effective May 5, 2026
Holler is a voice-first family coordination app. You record short voice notes; we turn them into tasks and heads-ups for the right person in your household. This page explains what we collect, what we don't, and what you can ask us to do with it.
Plain English, no surprises. If anything below is unclear, email v7canvas@gmail.com and we'll fix it.
When you tap Continue with Apple, Apple sends us a stable identifier for your account, plus the name and email you choose to share (Apple lets you use a private relay email — we honor that). We don't ask for a password, and we never see your Apple ID password.
When you press the mic and talk, the audio is sent to OpenAI's Whisper service to be transcribed into text. The audio is discarded as soon as the transcript comes back. We do not store your voice recordings — not on your phone, not on our servers, not anywhere. Only the text transcript is kept.
We keep the text transcript of each voice note, plus the structured output our AI produces from it: tasks (who should do what, when), heads-ups (information for one person), and observations. These are stored in Supabase, our database provider, in a row scoped to your household.
The names, relationships, and ages you enter for household members. Children are listed as members but do not have their own accounts — see Children below.
When you allow notifications, Apple gives us an APNs device token. We store it so we can route a push to your phone when someone in your household sends you a heads-up. The token is rotated by iOS periodically.
If you turn on Apple Calendar import (a Holler Plus feature), Holler reads events from only the calendars you tick in Settings — never your full calendar. We store the event title, start/end time, location, source calendar name, and Apple's stable event id, so your family can see what's coming up. We never add, edit, or delete calendar events. You can switch this off any time and the events we mirrored are removed within minutes.
When you start a Holler Plus subscription, Apple processes the payment — we never see your card. RevenueCat (our subscription processor) sends us a webhook saying "this user's Plus is active until X" so we can unlock features in the app. We store the status (active / trialing / cancelled / expired) and renewal date, plus an opaque RevenueCat identifier. We do not see your Apple ID, billing address, or card details.
When you tap Ask Holler and type a question, we send it — along with a small recent slice of your household's transcripts, tasks, and heads-ups — to Anthropic's Claude API to compose the answer. The answer text is shown to you and not stored beyond the chat session. We don't keep a transcript of the chat itself.
Standard iOS device metadata that arrives with API requests (model, OS version, language). We use it for debugging and aggregate usage stats, not for ad targeting.
We don't sell your data. Ever. We share with three categories of vendors who help us run the app:
We don't share with anyone else — no analytics SDKs, no ad networks, no marketing services.
Third-party AI providers — equal protection. OpenAI and Anthropic, the two AI providers we send voice and transcript data to, have contractually agreed (via their API terms) to provide protections at least equivalent to those described in this policy, including not using API inputs to train their models. We periodically review their published data-handling commitments to confirm they remain at this standard. Before any voice data leaves the app, you'll see a one-time in-app screen explaining exactly what is sent and to whom, and you must tap to consent before Holler can transcribe or extract tasks.
You can ask us to:
Email v7canvas@gmail.com from the email tied to your account. We'll respond within 30 days.
Holler is intended for users 13 and older. Children appear in the app as household members managed by their parent — they don't have their own login, can't record voice notes, and we don't collect personal data from them directly. The names and ages you enter for your children are stored against your household and treated with the same protections as your own data.
If you believe a child under 13 has signed up directly, email us and we'll delete the account.
We don't ask for location, contacts, photos, or anything else.
Data in transit uses HTTPS / TLS. Data at rest in Supabase is encrypted by Supabase's infrastructure. Access to our backend is gated by row-level security policies — even with valid credentials, you can only read data from a household you're a member of.
No system is perfect. If we ever discover a breach affecting your data, we'll email you within 72 hours.
If we change this policy, we'll update the "Effective" date at the top and email you when the change is material (e.g., a new vendor added). Continued use after a material change means you accept the updated policy.
For anything privacy-related — questions, deletion requests, complaints — email v7canvas@gmail.com.