Last updated: November 2026 (beta version 1)
This policy explains what personal information Handy TT ("we", "us") collects through the website and app, why, who can see it, how long we keep it, and your choices. Contact: handyttapp@gmail.com.
Everyone: name, email address, phone number, password (stored only as a secure hash), your user ID, sign-up consent records, and device information (device type, operating system, app version, a device identifier, push notification token, and the IP address used for security and anti-fraud checks, for example spotting duplicate or banned accounts).
Customers: service addresses and the map location you choose for a booking; photos you upload to describe a job. People who book through a Professional's booking link without an account: name, phone number and optional email.
Professionals: photo of your face, ID document, police certificate (and its expiry date), trade, service area, rates and availability, and bank details (bank name, account name and number) used for payouts and owing records.
Location: your device location only when you allow it — to find nearby professionals and, while a job is accepted or in progress, to share live location with the other person on that job. We do not track location in the background or outside an active job.
Messages: chat messages while a job is open, and support tickets, reports, disputes and feedback you send us (including any screenshot you attach). The Support chat is answered by our human support team. If we later switch on the optional automated AI help assistant (currently off), the question you type and your account type (Customer or Professional) are sent to the AI service to generate an answer; the in-app Support screen will clearly say when you are talking to the AI.
Job and money records: bookings, prices, fees, cash confirmations, owing balances, deposit receipts and our financial ledger.
We do not use advertising, we do not show ads, and we do not track you across other companies' apps or websites.
To run the Platform and match Customers with Professionals; verify Professionals; show fees and keep financial records; send booking, safety and account notifications and emails; provide support and resolve disputes; prevent fraud, scams and abuse; keep the Platform secure; and meet legal obligations.
The other person on your job sees what is needed for that job (name, photo, rating, address or location once the job is accepted, and chat).
Handy TT staff see information only as needed for their role: Support (accounts, jobs, disputes, safety reports, verification documents), Accounts (fees, owing balances, receipts and the ledger), Technical (system health; no money details), and the Global Admin. Staff actions on accounts are recorded in an audit log.
Service providers that help us run the Platform, and what they receive: Emergent (app hosting, database on MongoDB Atlas, file storage for photos and documents, email sending through Resend, push notification relay, and Google sign-in — all account data); Resend, through Emergent (email delivery — your email address and the message); Google Firebase Cloud Messaging and Apple Push Notification service (push notifications — your device push token and the notification text); MapTiler (maps and address search — map images are loaded from your device, so MapTiler sees your IP address and the map area shown; when you search for or pin an address, the search text or the pin coordinates are sent from our server); openrouteservice by HeiGIT (driving time and distance for live tracking — only if we switch it on; currently off, and drive times are estimated on our own server instead. When on, it receives the Professional's live position and the job location as map coordinates only, sent from our server, with no names or contact details); Cloudflare Turnstile (a bot check on sign-up and booking forms; its small check script loads from Cloudflare — your IP address and browser or device signals); Cloudflare Pages (hosts the public booking website where people open a Professional's booking link — visitors' IP address and browser details, used only to deliver the page); Anthropic (Claude AI model), through Emergent — used only for: job-title and category suggestions (the job description you type), Professional bio writing (your name, the services you offer, years of experience and the highlights you type), and the optional AI help assistant when it is switched on (currently off; the question you type and your account type). Your email, phone number, address, location, photos, documents and payment details are never sent to it; Google and Apple sign-in (only if you choose them — your name and email from that provider); Twilio (text messages to people who book through a booking link — their phone number and the message; set up but currently switched off); and Sentry (error and crash reports — device and app details and the error; set up but currently switched off). We do not use any analytics service. They may only use the data to provide their service to us.
We share information with authorities only where the law requires it or where someone's safety is at risk. We do not sell personal information.
Job photos: deleted 30 days after the job is finished (longer if a dispute is open).
Verification documents (face photo, ID, police certificate) and bank details: kept while your Professional account is open, and removed when the account is permanently deleted.
Job chat: deleted when the job is paid and closed, unless needed for an open dispute.
Live location: the Professional's live location points are deleted when the job is paid and closed, and never kept longer than 30 days.
Booking-link guests: name, phone, email and address are removed 30 days after a completed booking, or 7 days after a cancelled one (the job record and rating are kept).
Disputes, safety reports and support tickets: kept as safety and legal records. You can ask us to delete yours at handyttapp@gmail.com once it is resolved.
Push notification tokens: removed when you log out or your account is disabled or deleted.
Device identifier and sign-up IP address: kept while your account is open (to stop duplicate and banned accounts) and removed when the account is permanently deleted. Fraud and abuse flags are kept as security records.
Notifications in your in-app inbox and login sessions: kept while your account is open and removed when it is permanently deleted.
Deleted accounts: you can delete your account in the app. It is deactivated straight away and permanently removed after 30 days, except for records we must keep.
Financial ledger and deposit receipts: kept, because accounting records must be kept by law and to resolve money questions. Ledger entries cannot be edited.
You can see and correct most of your information in the app. You can delete your account in the app (Account > Delete account) or ask us at handyttapp@gmail.com. You can ask us for a copy of your information or ask questions about it at handyttapp@gmail.com. You can turn off non-essential notifications in the app; job, payment and safety alerts stay on. You can turn off location and camera permissions in your phone settings (some features will then not work).
We use encrypted connections (HTTPS), hashed passwords, short-lived login tokens, role-based staff access, two-step login for staff, rate limits and an audit log. No system is perfectly secure; tell us at handyttapp@gmail.com if you think your account has been misused.
Handy TT is only for people aged 18 or older. We do not knowingly collect information from anyone under 18 and will delete it if we find out.
If we change this policy in an important way we will tell you in the app and ask you to accept the new version.