How we handle your data, in plain language

This page is maintained by Holmes Labs LLC to answer the questions people actually ask before trusting an app with their information. Everything below describes practices we have in place today for this website and for OurNest, SaleScout, and AlleyCat.

It is not an independent audit, a certification, or a compliance guarantee. If you need formal documentation for a procurement or legal review, email info@holmeslabs.dev and we'll answer directly.

Only what a page needs to work:

• Contact form: your name, email, and message — so a human can reply.
• Newsletter signup: your email address, so we can tell you when we ship something new.

There is no account to create here, no advertising tracker embedded in these pages, and no hidden profile built from your visit.

Each app collects only what its features require — for example, OurNest needs the events and lists your household creates in order to sync them between your devices. The authoritative, per-app detail lives in each app's in-app notice and app store privacy label, because those are the versions the platforms hold us to.

Across every app, the rule is the same: we don't sell personal information, we don't trade it to data brokers, and we don't use it to build advertising profiles.

• In transit: traffic to this site and our apps is encrypted with HTTPS.
• At rest: submissions and app data are stored with managed cloud infrastructure providers that encrypt stored data.
• Access: our databases use row-level rules so a record is only readable by the account it belongs to and by the small number of Holmes Labs LLC operators who need it to run the service.
• Least privilege: new features get the narrowest access that makes them work, not blanket access to everything.

We rely on a short list of vendors rather than building everything ourselves: managed cloud hosting and databases for storage and delivery, and an email provider so contact-form replies and newsletters reach your inbox. They process data on our instructions to run these services and for nothing else.

We'll tell you here if that list changes in a way that affects what happens to your information.

Contact messages are kept while a conversation is open and for a reasonable period afterward so we have context if you write again. Newsletter emails are kept until you unsubscribe. App data is kept while your account or household is active.

When you ask us to delete something, we delete it from our live systems and it ages out of routine backups.

• Unsubscribe or change what we send: use email preferences or the link at the bottom of any email.
• Ask what we hold, or ask us to delete it: email info@holmeslabs.dev. We aim to respond within two business days.
• Read the formal terms: see our Privacy Policy and Terms of Service.

If you think you've found a vulnerability in one of our apps or on this site, email info@holmeslabs.dev with the steps to reproduce it. Please give us a chance to fix it before sharing it publicly.

We acknowledge reports within two business days and will tell you what we found and what we changed.