Privacy by design
Built private, from the first line of code.
Health data is personal. Here is exactly how Holimo protects it, in plain words, including the limits.
Watch a journal entry leave your phone
Type something and press sync. Your browser encrypts it with real AES-256-GCM using a throwaway key, the same kind of encryption the app uses. Nothing is sent anywhere.
Interactive demo with sample data. Nothing you do here leaves this page.
Interactive demo with sample data. Nothing you do here leaves this page.
Encrypted on your phone
Journal text and every cycle field, including dates, are encrypted on your phone with AES-256-GCM before they sync. Each value is tied to its own row, so it can’t be copied into another one. A database leak would expose only scrambled text for these fields.
The honest part about keys
So you can move to a new phone without losing your journal, a backup of your key is kept in a secure vault on our server and released only to you after you sign in. That means this isn’t “zero-knowledge” encryption, and we won’t pretend it is. If you prefer, cycle data can stay on your phone only and never sync.
Locked to you
Every table in our database has row-level security: each person can only read and change their own rows. Automated tests try to read, change, delete and forge another person’s rows on every table, and every release must pass them.
Hosted in the EU
Your account data lives in Frankfurt, Germany, under the EU’s GDPR, the strictest privacy law among the countries we serve.
No ads. No selling. Ever.
We don’t sell data, share it for advertising, or use health data to choose shop buttons. Apple Health and Health Connect data is never used for ads.
You choose what the AI sees
Free AI runs on your phone where supported. Pro AI gets minimal context with no name or email. Journal text is never sent. Cycle data only if you switch it on.
Offline first
Your data lives on your phone first, so Holimo works without a connection and you’re never waiting on a server.
Export or delete, anytime
Export everything as JSON or CSV from Settings. Delete your account and everything goes within 30 days, backups included.
No secrets in the app
API keys live only on our servers, never inside the app you download.
Privacy PolicyConsumer Health Data Privacy PolicySecurity and Responsible DisclosureSub-processors