Holdfast LLC

Holdfast and Steadfast

Delete your account and data

This page is the account-deletion URL for both Android apps from Holdfast LLC: Holdfast and Steadfast. You can use it without opening the apps. Holdfast LLC is the developer. Mailing address: 30 N Gould St Ste 67031, Sheridan, WY 82801. Contact: holdfast.helpdesk@gmail.com.

There is no account on this website. The account is the email sign-in inside the app, shared by Holdfast and Steadfast through Firebase Authentication.

Ask in the app

Holdfast

  1. Open Holdfast and sign in with the account you want to delete.
  2. Open Settings.
  3. Choose Delete account, then confirm.

The app deletes pairing data for that account on the Holdfast worker, then deletes the Firebase sign-in, then removes the local session, pairing keys, and remembered partner emails. The confirmation says this does not uninstall Holdfast. Device admin is not removed by that button. While device admin stays on, Android can block uninstall until a partner allows it. Email the helpdesk if you are stuck behind that.

Steadfast

  1. Open Steadfast and sign in with the account you want to delete.
  2. Open Settings.
  3. Choose Delete account, then confirm.

The app deletes the server account first, including the partner link and the group memberships it can match, then deletes the Firebase sign-in, then removes the local partner and group account. The confirmation says reading progress stays on the phone. If the server does not accept the deletion, the app leaves the phone account in place and asks you to try again.

Ask by email

Use this when you cannot open the app, you are not signed in, or device admin will not let you finish. Send an email to holdfast.helpdesk@gmail.com.

  1. Use the email address on the account if you still have access to it.
  2. Put the app name in the subject: Holdfast, Steadfast, or both.
  3. Ask Holdfast LLC to delete the account and the associated data. Include the account email if you are writing from a different address.

We will delete the Firebase user and the pairing and group records we can match to that account. We may reply to confirm we have the right email before deleting it.

Data that is deleted

  • The Firebase Authentication user for that email, when the in-app flow finishes or when we complete an email request.
  • Pairing records owned by that account, including grant material, status, stored partner reports, the content-sharing digest, and push-subscription data on that record.
  • Pointers that map the account id or email to a pairing record.
  • That account's membership on someone else's phone. The other person's phone record stays, without this partner.
  • Steadfast group membership and the comments, prayers, notes, verse shares, read days, and finishes authored by that member. A group with no members left is deleted. If the owner leaves and others remain, ownership transfers to the earliest remaining member.
  • On the phone, after a successful in-app deletion: the sign-in session and, for Holdfast, pairing keys and remembered partner emails. For Steadfast, the local partner and group account.

Data that is kept, and for how long

  • Steadfast reading progress stays on the phone, as the app's own deletion text says, until you clear the app's storage or uninstall Steadfast.
  • Holdfast filter settings and the on-device block counter are not what the delete function clears. They remain on the phone until you clear storage or uninstall. Uninstall can still require a partner while device admin is on.
  • A partner-only deletion does not remove the phone user's digest or reports. Those stay until the phone user deletes the account or the record is otherwise removed.
  • Google Play keeps its own record of a Plus subscription. Cancel the subscription in Google Play. These apps do not receive your card number.
  • Short-lived pairing data that may already have expired: grants in about five minutes, invites in about ten minutes, a replaced pair-id pointer for 30 days, a screen-check verdict for one hour. A check-in rate-limit counter, if that feature is live, lasts about 48 hours and does not contain the check-in text.
  • The email thread you send the helpdesk is kept long enough to answer you and to finish the deletion.
  • Logs held by Firebase, Google Play, DNS resolvers, API.Bible, openbible.com, Microsoft speech, or Cloudflare are kept on those services' own schedules. They are not given a separate timer in the app code.

Both apps, one account

Holdfast and Steadfast use the same Firebase project and the same worker. Deleting the account from either app deletes that sign-in, not a second hidden account. Local data that each app stored on its own phone remains as described above until that app's storage is cleared or the app is uninstalled.

The full description of collection and use is in the privacy policy, which also covers both apps.