— Held

Privacy Policy

Last updated: 27 July 2026

This Privacy Policy explains how Kate Reardon, operating the Held app (“Held”, “we”, “us”), collects, uses, and protects your personal information. We are based in Ocean Shores NSW, Australia, and we handle your information in accordance with the Australian Privacy Principles under the Privacy Act 1988 (Cth). By using Held, you agree to this policy.

What we collect

Account details — your first and last name, email address, and a securely hashed password (we never store your password in a readable form).
Membership details — your plan, trial and subscription status, and a customer reference from our payment provider. We do not collect or store your card details.
Your activity in the app — the meditations you save, your playback progress, and anonymous play counts, so the app works and improves.
Technical information — basic device and browser information, and a secure cookie that keeps you signed in.

How we use it

To create and run your account and membership.
To provide the meditations and remember your saved practices and progress.
To send you essential account emails (welcome, receipts, trial and renewal reminders, password resets).
To send Kate's newsletter — only if you choose to opt in, and you can unsubscribe at any time.
To keep the service secure, prevent misuse, and understand how Held is used so we can improve it.

We do not sell your personal information, and we do not share it for anyone else's advertising.

Payments

Payments are processed securely by Stripe. When you subscribe, your card details are entered directly with Stripe — they never pass through or get stored on our systems. We only receive confirmation of your payment and subscription status.

The providers who help us run Held

We use trusted third-party services to operate the app. Each only receives the information needed to do its job:

Supabase — secure hosting of your account and app data.
Cloudflare — storage and delivery of the audio you stream.
Stripe — payments and subscription billing.
Resend — sending account and transactional emails.
Mailchimp — sending the optional newsletter, if you opt in.

Some of these providers store or process data on servers outside Australia. Where that happens, we take reasonable steps to ensure your information is handled with protections consistent with the Australian Privacy Principles.

Cookies

We use a small number of essential cookies to keep you signed in and to keep the app secure. We do not use advertising or third-party tracking cookies.

How long we keep it

We keep your information for as long as your account is active and for a reasonable period afterwards to meet legal, tax, and record-keeping obligations. You can ask us to delete your account and personal information at any time (see below).

Your rights

You have the right to access the personal information we hold about you, to ask us to correct it if it's wrong, and to request deletion of your account. To make any of these requests, email us at kate@katereardon.com.au.

If you have a privacy concern, please contact us first and we'll do our best to resolve it. If you're not satisfied, you may lodge a complaint with the Office of the Australian Information Commissioner at oaic.gov.au.

Security

We take reasonable steps to protect your information, including encrypted connections, hashed passwords, and access controls. No online service can be completely secure, but we work to keep your data safe.

Children

Held is intended for adults. It is not directed at children under 16, and we do not knowingly collect their personal information.

Changes to this policy

We may update this policy from time to time. When we do, we'll change the “last updated” date above, and significant changes will be notified to you where appropriate.

Contact us

Questions about your privacy? Email kate@katereardon.com.au.