HandyBase
Privacy Policy
HandyBase (“we”, “us”) is a mobile app that helps solo handymen manage jobs, photos, estimates and invoices. This policy explains what data we handle, why, and what stays under your control. The short version: your business data belongs to you, your job photos never leave your phone, and we sell nothing to anyone.
Data we store on our servers
- Account data — your email address, sign-in method (email and password, Google, or Apple), preferred language.
- Business profile — business name, phone, logo, payment instructions you add to documents.
- Work records you create — clients and their contact details, jobs, estimates, invoices, expenses and income records. You enter this data about your own customers; you are responsible for having the right to store it.
- Subscription status — whether your trial or subscription is active. Payments themselves are processed by Apple or Google; we never see your card details.
- Usage events — which app features are used, to improve the product. No advertising identifiers, no cross-app tracking.
Data that stays on your device
Job photos (before/after) and receipt photos are stored only on your phone. They are not uploaded to or backed up on our servers. When you explicitly request an AI action — recognizing a receipt or drafting a photo report — the selected images are transmitted to our AI processor to generate that draft and are not retained on our servers afterwards.
How we use your data
- To run the service: sync your records between your devices, generate documents, send you sign-in codes.
- To produce AI drafts — only when you tap the corresponding action, never automatically. Drafts are shown to you for review; nothing is sent to your clients without your explicit action.
- To answer your support requests.
We do not sell personal data, do not show ads, and do not use your data to train AI models.
Service providers
- OpenAI — processes images and text for AI drafts you request (receipt recognition, report drafts, starter price book).
- Resend — delivers transactional email (verification codes, password reset).
- RevenueCat — manages subscription status; receives your app user ID, never your card.
- Sentry — server error monitoring, may capture request metadata in error reports.
- Apple / Google — payment processing and app distribution under their own policies.
Where data is stored
Our servers are located in the Netherlands (European Union). Wherever you are located, your server-side data is processed in the EU and protected under GDPR-grade rules. Backups are encrypted and stored with the same provider.
Retention and deletion
- While your account is active, we keep your records so the service works.
- After your trial or subscription ends, your data is not deleted: the app becomes read-only and export remains available.
- When you delete your account (More → Settings → Delete account), it is deactivated immediately and permanently erased from our servers after a 30-day grace period that protects against accidental deletion. Photos on your device are yours to keep or delete.
Your rights
You can access and export your data in the app at any time. You can correct or delete any record you created. For a full copy of your data, deletion requests, or any privacy question, email support@handybase.online from your sign-up address. If you are in the EU/EEA or UK, you also have the right to lodge a complaint with your local data protection authority.
Security
All traffic between the app and our servers is encrypted (HTTPS). Passwords are stored as modern salted hashes, never in plain text. Sign-in tokens live in your device's secure storage.
Children
HandyBase is a business tool and is not directed to children under 16. We do not knowingly collect data from children.
Changes to this policy
If we change this policy in a way that matters, we will notify you in the app before the change takes effect. The latest version always lives at this address.